Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7f1c25-d506-4ae5-a51d-c1c815b95726/1/IGcM4wRP1TINnHYtX5viba8wI-w.mft
File:                     IGcM4wRP1TINnHYtX5viba8wI-w.mft (raw, json)
Hash identifier:          +Xjef8x2Fhivw2Il6Hyqp2hRD/zj2m5BOOk3xwcf0iA=
Subject key identifier:   FB:20:5A:5E:EC:EF:EA:C1:4C:C5:F1:3D:94:3E:1E:48:F5:14:E8:3A
Authority key identifier: 20:67:0C:E3:04:4F:D5:32:0D:9C:76:2D:5F:9B:E2:6D:AF:30:23:EC
Certificate issuer:       /CN=20670ce3044fd5320d9c762d5f9be26daf3023ec
Certificate serial:       01969717E7681B73F7CBAD63B4EB16D1E616
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IGcM4wRP1TINnHYtX5viba8wI-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/7f1c25-d506-4ae5-a51d-c1c815b95726/1/IGcM4wRP1TINnHYtX5viba8wI-w.mft
Manifest number:          B5
Signing time:             Sat 03 May 2025 17:00:48 +0000
Manifest this update:     Sat 03 May 2025 17:00:48 +0000
Manifest next update:     Sun 04 May 2025 17:00:48 +0000
Files and hashes:         1: BtHL3XHEieb1gWKcjsadU5qjZac.roa (hash: 1jFZs/t3ujMVEG8CZ4mhr6EfSszS7y3HVxTcxs6WBzE=)
                          2: IGcM4wRP1TINnHYtX5viba8wI-w.crl (hash: PPyI4hy87V8bN+rVIV/jjepqf56UxEtitcXO2Z/19m4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/7f1c25-d506-4ae5-a51d-c1c815b95726/1/IGcM4wRP1TINnHYtX5viba8wI-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/7f1c25-d506-4ae5-a51d-c1c815b95726/1/IGcM4wRP1TINnHYtX5viba8wI-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IGcM4wRP1TINnHYtX5viba8wI-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 17:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:97:17:e7:68:1b:73:f7:cb:ad:63:b4:eb:16:d1:e6:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20670ce3044fd5320d9c762d5f9be26daf3023ec
        Validity
            Not Before: May  3 17:00:48 2025 GMT
            Not After : May  4 17:00:48 2025 GMT
        Subject: CN=fb205a5eecefeac14cc5f13d943e1e48f514e83a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:db:90:fa:88:a3:52:41:af:e4:65:15:ac:97:
                    d0:83:ca:6e:fd:e4:98:5f:f1:30:55:9a:58:50:3e:
                    11:71:d5:7c:49:04:24:4e:23:01:71:b4:8a:dc:86:
                    b1:68:be:ca:16:25:4a:1c:12:fa:c3:8a:b9:8f:af:
                    a1:4d:2d:eb:c7:21:ad:ab:bd:f8:66:c4:a0:72:85:
                    60:b0:63:1c:3c:cd:10:8d:1c:7e:a0:98:64:e6:1d:
                    f3:b9:2f:1f:e0:da:62:cf:4e:e0:87:eb:41:b1:35:
                    9d:dd:b2:e0:b9:d6:66:b5:07:05:79:b7:c7:e5:26:
                    14:90:fd:8a:39:00:34:d9:72:93:dc:a4:18:f6:52:
                    c4:53:e9:74:03:86:c3:ae:d2:6a:fc:1d:2e:45:7e:
                    5d:33:0a:f3:ba:f8:47:c9:28:b5:56:e3:80:e9:48:
                    fa:f9:56:f6:1c:5b:ea:74:ea:fd:2b:0a:3a:3d:ea:
                    5e:74:89:16:73:18:b2:a3:b0:fc:9f:b4:00:0b:7a:
                    a1:65:94:6c:c6:70:02:49:b8:05:7f:87:34:e2:9f:
                    af:f2:e3:b0:33:f8:1e:c8:7d:25:63:97:48:f6:e2:
                    5f:0c:eb:00:f9:af:44:ce:cd:f4:54:57:7e:76:08:
                    76:14:7c:15:fd:97:ec:25:7a:ec:51:00:fd:f1:d7:
                    2a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:20:5A:5E:EC:EF:EA:C1:4C:C5:F1:3D:94:3E:1E:48:F5:14:E8:3A
            X509v3 Authority Key Identifier:
                keyid:20:67:0C:E3:04:4F:D5:32:0D:9C:76:2D:5F:9B:E2:6D:AF:30:23:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGcM4wRP1TINnHYtX5viba8wI-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7f1c25-d506-4ae5-a51d-c1c815b95726/1/IGcM4wRP1TINnHYtX5viba8wI-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7f1c25-d506-4ae5-a51d-c1c815b95726/1/IGcM4wRP1TINnHYtX5viba8wI-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:7a:1d:d1:f1:f8:c5:1b:5a:cb:c4:e1:a0:a5:fd:89:40:ba:
         e6:eb:07:a3:d0:9c:4c:19:6b:be:3d:4b:c0:b4:e3:ba:5b:94:
         f3:13:be:41:90:2b:d4:f6:15:66:34:1f:80:48:8f:a0:5b:7f:
         7b:15:6a:99:93:1e:69:aa:fd:e9:bc:5c:6a:1f:65:cf:09:e1:
         52:03:d5:ab:c8:03:85:52:b1:93:73:28:a5:05:6f:a1:2e:da:
         bb:7d:0d:57:ce:eb:a6:8d:55:15:8d:a4:db:24:3f:ab:53:2e:
         a5:62:12:84:8e:cc:67:f5:66:fe:e3:de:91:bb:43:a2:ee:0b:
         ca:4d:98:ab:85:eb:a3:9e:2b:4f:d7:96:b4:f2:da:74:f1:d5:
         0b:be:11:ce:24:30:91:84:62:dc:f9:fb:ea:4c:aa:a0:f7:80:
         d2:18:5c:4e:93:91:e2:60:b5:1c:fb:1e:d8:35:e7:f0:71:b1:
         b3:9a:25:5a:df:57:2d:ce:3f:22:20:70:88:7f:0c:0a:74:a8:
         d0:3c:d6:79:b9:71:7b:2b:49:15:79:4f:20:aa:a9:ce:78:f3:
         39:32:fe:ba:d5:94:4f:98:56:8b:d8:6f:be:0b:a4:d1:f1:57:
         e5:e1:38:40:c6:12:68:e4:f0:ea:09:d3:e4:fc:c8:96:d4:b9:
         5e:58:f3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 01:29:07 2025 by rpki-client