Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
File:                     iC-gGQL06MNH8hFuRkXaGmtOCWI.mft (raw, json)
Hash identifier:          AQRZ9FwBEqaQl06VX/1GGxt91wOHgaLrAKxVHWH3njM=
Subject key identifier:   F9:4A:74:CC:F4:AD:B2:52:B5:3E:F7:52:F8:85:17:E4:DD:A8:E1:BD
Authority key identifier: 88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62
Certificate issuer:       /CN=882fa01902f4e8c347f2116e4645da1a6b4e0962
Certificate serial:       019774BFEC0231252550549E96A49692A78F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
Manifest number:          1353
Signing time:             Sun 15 Jun 2025 18:00:24 +0000
Manifest this update:     Sun 15 Jun 2025 18:00:24 +0000
Manifest next update:     Mon 16 Jun 2025 18:00:24 +0000
Files and hashes:         1: ENS55DqOSCIACYKV88lsj2-9Qt0.roa (hash: DHbJggMAa2s1Y5SQ9CvEy1KweRl3G7QnT7Ch9hrVq4Y=)
                          2: Eh5XcZTOlwwjICZ8D5e6YinN9to.roa (hash: i3hRAhyXtajePfAySoecKpTzxKsfIbEuHCpoNygQqoo=)
                          3: iC-gGQL06MNH8hFuRkXaGmtOCWI.crl (hash: GWg943xbcuHAiS8BE41fVEpUSgRQHPNap3wmykA53XU=)
                          4: rqFZA9uVkdGBL0x6Ei0L9MHEurQ.roa (hash: L0IGvxVXiMO117M8Wm4IgrHBTq1xuhWbcFCP05D3zJk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:74:bf:ec:02:31:25:25:50:54:9e:96:a4:96:92:a7:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882fa01902f4e8c347f2116e4645da1a6b4e0962
        Validity
            Not Before: Jun 15 18:00:24 2025 GMT
            Not After : Jun 16 18:00:24 2025 GMT
        Subject: CN=f94a74ccf4adb252b53ef752f88517e4dda8e1bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c1:63:02:6a:d9:c0:74:9e:e4:8d:ff:a4:60:
                    2b:6e:4d:f3:8e:21:8e:97:8c:35:aa:a8:f3:87:36:
                    29:92:c9:37:02:59:00:89:6d:06:9d:1d:06:be:b0:
                    6a:ea:5f:93:ac:d7:ee:ff:b4:89:3b:60:9e:47:0e:
                    60:c2:e0:a6:da:dc:58:5e:aa:3d:03:6d:fb:6e:91:
                    0e:51:37:c0:8d:37:24:b2:ca:0a:f9:69:d9:ba:79:
                    77:8c:09:ed:00:b6:c5:8b:9d:b6:a2:83:fc:c7:f3:
                    eb:c5:20:55:48:07:c8:c7:b8:ce:9e:dc:36:4d:30:
                    99:ee:5d:74:9a:a2:26:90:6e:8a:b4:32:5e:89:3f:
                    51:8a:94:60:65:1e:89:16:20:ef:f9:e0:2a:92:26:
                    a0:51:ca:0c:e2:ca:bd:63:39:13:e8:d2:a0:20:9d:
                    18:20:4b:14:50:69:18:12:0f:61:6b:8d:4b:44:5c:
                    df:63:65:e2:96:8d:6f:b9:a2:98:13:38:bc:86:20:
                    ee:1d:f0:e9:68:3e:e6:87:d9:80:b7:3f:43:b7:53:
                    55:13:03:ce:99:36:e0:6d:86:ae:48:5b:24:93:09:
                    40:7e:a9:96:a2:55:05:c6:2c:4a:00:4f:ff:2e:94:
                    2d:f8:f9:c4:f6:40:1d:16:96:a8:03:88:29:6c:cf:
                    00:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:4A:74:CC:F4:AD:B2:52:B5:3E:F7:52:F8:85:17:E4:DD:A8:E1:BD
            X509v3 Authority Key Identifier:
                keyid:88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:d1:cf:90:8c:43:87:d0:6b:8d:59:17:81:82:c7:6c:2c:9f:
         92:4b:8a:b2:10:bc:8c:84:8e:07:89:24:24:1f:e9:95:9f:e2:
         2a:12:37:4e:ae:14:81:d1:dc:1e:a8:3d:fa:cf:cc:01:61:28:
         64:51:ec:ff:9e:c0:16:47:92:27:82:61:9e:2c:ee:de:01:cd:
         8b:7c:c7:93:5f:30:84:1c:68:e9:80:b9:71:d7:6e:93:ae:bc:
         e3:bc:2c:d6:65:a5:4d:05:50:12:4e:2e:f7:5d:b1:10:ce:91:
         fb:db:bd:04:1c:78:a9:0a:0d:54:34:65:22:fc:94:1c:dc:c9:
         fa:de:66:20:c1:8b:45:38:d8:ec:38:04:9b:d3:77:cf:b1:a5:
         d5:85:2a:a0:cd:6c:f8:5d:ca:55:e6:1e:f3:5f:1b:2e:ff:80:
         4d:2a:ff:e4:3b:ea:fd:36:4e:b9:85:b3:4d:06:75:cd:18:85:
         c2:d9:94:1b:9e:6e:e8:ed:c6:68:8f:a3:ff:32:57:ad:ca:6a:
         b2:5f:02:01:82:ca:14:c1:85:9d:50:55:a3:f0:b3:8a:d7:6d:
         07:80:88:68:27:15:e2:a2:b9:9f:44:53:65:6b:cb:c7:fb:08:
         ef:d0:dd:3c:5e:a3:e3:5a:67:dc:71:04:a4:15:4e:fd:0d:42:
         ef:7b:fe:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:28:33 2025 by rpki-client