Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
File:                     Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft (raw, json)
Hash identifier:          p1Y5XA7Ot2ifd+cIW8Bvm5hKoUTC22yxBMdqcAEPp+E=
Subject key identifier:   DF:13:02:B9:D8:31:69:21:DA:0F:E5:29:3C:81:D6:A4:8B:22:14:DF
Authority key identifier: 23:2B:BC:6F:51:CC:E0:1A:EA:AC:BA:80:F2:D0:D2:64:12:E4:7F:93
Certificate issuer:       /CN=232bbc6f51cce01aeaacba80f2d0d26412e47f93
Certificate serial:       01969416772544600859E6381238E098A871
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
Manifest number:          092C
Signing time:             Sat 03 May 2025 03:00:22 +0000
Manifest this update:     Sat 03 May 2025 03:00:22 +0000
Manifest next update:     Sun 04 May 2025 03:00:22 +0000
Files and hashes:         1: Iyu8b1HM4BrqrLqA8tDSZBLkf5M.crl (hash: ZT2SX2YFK+R2btrLx2syKvUDjnzE6OH9rnsvpOCNbTA=)
                          2: W7lSiLgEWw1PU3RjMuVHViCtMd4.roa (hash: Z1eudaBmI9GAn6czSjHaqw3jDN0IX6tghnkKM1CKFjU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:94:16:77:25:44:60:08:59:e6:38:12:38:e0:98:a8:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=232bbc6f51cce01aeaacba80f2d0d26412e47f93
        Validity
            Not Before: May  3 03:00:22 2025 GMT
            Not After : May  4 03:00:22 2025 GMT
        Subject: CN=df1302b9d8316921da0fe5293c81d6a48b2214df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:73:45:9f:aa:fd:49:3f:57:ed:74:0b:6a:ba:
                    8a:40:a0:1e:5d:3e:a5:87:e6:4c:d2:bd:74:52:54:
                    04:9c:e7:57:49:38:ce:9f:8c:cb:14:90:b8:26:00:
                    23:8d:75:fc:01:21:2b:fa:5e:4e:98:1a:04:3e:9f:
                    93:2c:cc:6b:ee:c2:f4:fb:b2:d7:f5:07:03:39:6f:
                    7d:f6:69:15:84:38:0f:cd:2a:cb:24:e6:44:cd:f5:
                    bc:19:3e:21:7b:4b:40:07:92:c2:13:5c:31:91:74:
                    c6:7b:58:fb:15:85:97:67:c4:57:1b:ef:43:86:e9:
                    77:df:de:f7:88:fb:e8:0c:e1:18:0a:ee:c1:9f:e5:
                    e0:d9:25:4e:6c:41:2c:22:34:f7:7b:0a:6d:66:7b:
                    13:40:90:e5:f4:af:72:4f:25:9c:d2:8c:35:82:2f:
                    57:f4:97:d8:ab:ee:40:d3:7e:ec:36:c6:62:e9:2a:
                    d0:a9:80:cd:20:24:a8:73:88:f2:cc:a7:a5:ab:4e:
                    5f:ab:c7:25:c1:e2:ef:da:25:f5:62:cc:58:3b:d0:
                    77:97:2b:7f:b1:0d:d9:43:4b:de:83:40:5c:f1:db:
                    58:ca:17:84:bc:7f:69:46:51:13:cf:1b:e4:d9:27:
                    69:55:b2:20:34:84:2b:8e:d6:0c:15:bf:a3:ea:92:
                    4c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:13:02:B9:D8:31:69:21:DA:0F:E5:29:3C:81:D6:A4:8B:22:14:DF
            X509v3 Authority Key Identifier:
                keyid:23:2B:BC:6F:51:CC:E0:1A:EA:AC:BA:80:F2:D0:D2:64:12:E4:7F:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:bf:8f:7f:62:9a:55:63:be:ca:76:6b:66:fd:35:1f:4e:e2:
         08:fb:9f:ef:e8:89:66:64:ca:36:eb:9b:d0:73:8a:97:48:7e:
         a0:22:77:55:a8:d6:24:c4:71:d6:3b:3b:e6:b8:bc:29:09:5e:
         27:2c:3a:02:62:54:fb:10:7b:8c:99:93:55:5d:80:52:0a:bc:
         d0:0c:94:47:e9:5f:f0:7a:7f:ad:ef:c1:e1:3e:6d:be:cf:ee:
         dd:cf:8f:b6:3c:94:53:b0:bb:33:5c:71:d5:c9:22:58:e1:24:
         cf:b7:98:fc:44:55:fa:14:02:0d:c6:fa:1a:62:ae:ba:1d:8d:
         b2:8a:69:5e:a9:51:dd:44:11:c6:5b:19:cd:97:8c:51:ce:20:
         2e:2e:1d:61:46:64:21:76:e0:95:72:a8:bb:c3:0a:2b:b3:a7:
         75:33:24:b0:a1:ab:f3:fc:50:93:1f:d8:01:66:16:64:bf:21:
         4d:68:18:d4:39:2f:a3:3a:48:7f:1a:db:c4:93:3a:55:8e:68:
         71:66:4e:56:d7:e3:47:bd:bb:6b:41:75:86:11:59:78:0b:75:
         df:60:74:f8:ca:a6:b8:69:21:c8:16:83:33:84:b2:3b:f3:f5:
         14:cb:a4:c0:17:20:96:77:7a:9a:02:1e:dc:aa:ce:70:e0:c2:
         7a:cc:f4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 06:56:37 2025 by rpki-client