Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.mft
File:                     IB_mmB68vJI8jkn0hFJEHQgOZvA.mft (raw, json)
Hash identifier:          Sv8M2fDVR7S5euI5U5gq1lkKK6mhOAb0xIDxe4b1Sdw=
Subject key identifier:   5A:41:2E:45:C5:0B:85:B4:F7:69:AC:71:E6:DA:C0:77:31:4E:61:E6
Authority key identifier: 20:1F:E6:98:1E:BC:BC:92:3C:8E:49:F4:84:52:44:1D:08:0E:66:F0
Certificate issuer:       /CN=201fe6981ebcbc923c8e49f48452441d080e66f0
Certificate serial:       019687DC1FEE1D7A18DF72149A70349825AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IB_mmB68vJI8jkn0hFJEHQgOZvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.mft
Manifest number:          0F13
Signing time:             Wed 30 Apr 2025 18:01:12 +0000
Manifest this update:     Wed 30 Apr 2025 18:01:12 +0000
Manifest next update:     Thu 01 May 2025 18:01:12 +0000
Files and hashes:         1: GDKGeKleHqIsNhWuvQIPnj1S5ik.roa (hash: 027frokon21vo4MMUC96Z9OEZpQ3AsbdGWojRJwBl/8=)
                          2: IB_mmB68vJI8jkn0hFJEHQgOZvA.crl (hash: YS3/xp7uYxP2Mx0GdD0nz5MVM5fviFjuYkhEtukMh1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IB_mmB68vJI8jkn0hFJEHQgOZvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 18:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:87:dc:1f:ee:1d:7a:18:df:72:14:9a:70:34:98:25:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=201fe6981ebcbc923c8e49f48452441d080e66f0
        Validity
            Not Before: Apr 30 18:01:12 2025 GMT
            Not After : May  1 18:01:12 2025 GMT
        Subject: CN=5a412e45c50b85b4f769ac71e6dac077314e61e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cd:47:a5:69:8d:af:d4:bd:c8:ef:52:a2:46:
                    f6:47:05:4f:41:26:09:72:05:a1:50:eb:52:5b:b3:
                    5e:1e:5c:63:b0:5c:21:b4:e4:9c:56:bb:05:4a:10:
                    43:b2:8f:a7:93:8e:b8:79:9c:2f:63:fc:04:8f:1d:
                    ce:d9:10:ee:fe:34:17:b3:4b:d1:55:a1:95:97:c8:
                    7b:36:84:0b:22:aa:75:77:79:b4:2d:12:a0:b8:e7:
                    a4:e8:23:e4:38:b8:4d:49:07:e3:7a:f4:cd:a8:11:
                    30:71:a6:4d:a5:4e:81:ff:6d:f9:4f:bf:a4:a8:7b:
                    28:41:72:18:00:77:16:22:d3:12:04:bc:9e:ab:b6:
                    0d:02:c7:9b:f7:b4:1a:f0:26:13:eb:b3:27:e1:53:
                    d6:21:d7:1c:9b:a1:bf:9f:e2:35:2e:83:6a:48:dd:
                    99:8f:78:6c:06:80:83:f2:da:d7:b5:1a:c2:56:33:
                    73:f2:ad:8b:32:ee:e4:7a:d9:ad:90:23:25:c6:ed:
                    bf:d4:57:8e:36:98:6d:f7:c8:87:63:c1:a2:55:1c:
                    4e:7f:a0:9f:ed:d0:d8:36:43:eb:47:30:f1:c7:4f:
                    00:cc:f0:dd:98:ec:0f:d3:da:54:2f:bc:ac:5f:af:
                    02:e8:77:c6:33:6e:64:a4:3f:98:e5:d7:48:3a:82:
                    65:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:41:2E:45:C5:0B:85:B4:F7:69:AC:71:E6:DA:C0:77:31:4E:61:E6
            X509v3 Authority Key Identifier:
                keyid:20:1F:E6:98:1E:BC:BC:92:3C:8E:49:F4:84:52:44:1D:08:0E:66:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_mmB68vJI8jkn0hFJEHQgOZvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ae:22:17:47:b2:e2:e6:ce:99:28:0e:6d:53:34:ef:dd:4c:
         60:bb:27:39:d8:8c:16:b1:6d:0a:1d:e9:8f:83:04:62:01:db:
         5c:9b:af:9f:e8:e9:1d:74:7e:1f:3f:b6:a4:cd:63:fd:ac:25:
         e1:1c:3a:8b:7c:9e:50:9f:fa:cb:24:9b:a1:1b:b5:52:88:66:
         fe:98:44:e5:ea:57:c5:ca:30:d7:03:a6:7f:b2:ae:d1:cb:81:
         3a:7c:5d:c6:20:03:89:61:c1:44:f3:2f:4b:1a:53:1b:c0:2a:
         14:4a:25:ef:27:76:02:18:eb:35:6c:2c:07:eb:4b:b4:f9:ea:
         50:55:74:a1:45:ea:e0:f0:e1:85:71:ac:fa:0b:aa:d6:fe:fe:
         8c:76:2f:fe:bb:00:09:c6:91:c4:47:3a:1d:59:8c:e2:53:53:
         64:28:e6:c0:63:38:c0:fb:82:7d:64:bb:15:4c:30:8e:02:46:
         ad:b0:76:18:9d:f0:f5:04:40:87:42:43:e7:f9:29:e5:88:7c:
         5e:ee:80:e6:10:5e:0b:a1:59:a6:16:cf:c3:6a:e2:e1:55:2f:
         e9:f6:58:91:70:db:e3:f7:25:88:1a:78:aa:39:e0:c1:76:94:
         f4:6f:49:75:7f:bf:11:7e:f6:8b:54:ed:76:82:58:c1:e2:b9:
         67:28:f8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:14:37 2025 by rpki-client