Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
File:                     iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft (raw, json)
Hash identifier:          1wWvfsIuwrerstqH7ZIFNh7lTWcgC5A7NlnLEQNKe/0=
Subject key identifier:   29:94:EA:92:D8:54:75:4B:2A:AB:F3:E5:31:0F:0B:48:10:35:98:13
Authority key identifier: 88:88:81:8C:4E:CF:1D:5D:EB:4E:A9:36:67:47:0A:7A:11:4D:9A:07
Certificate issuer:       /CN=8888818c4ecf1d5deb4ea93667470a7a114d9a07
Certificate serial:       019769607AAA24EAB355EDB6709A8F0DEEAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
Manifest number:          1520
Signing time:             Fri 13 Jun 2025 13:00:19 +0000
Manifest this update:     Fri 13 Jun 2025 13:00:19 +0000
Manifest next update:     Sat 14 Jun 2025 13:00:19 +0000
Files and hashes:         1: KYtWtlgqE5B9oPVpa5XtMWrTy2s.roa (hash: S7OWPBmD/em3aOMLq183MKVqtbhQIKvOUTkiCEiDOio=)
                          2: iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl (hash: QN5cTtYnf9NlzDajhYtaGiT0zEHRHgJ2SynmUprtRDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:60:7a:aa:24:ea:b3:55:ed:b6:70:9a:8f:0d:ee:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8888818c4ecf1d5deb4ea93667470a7a114d9a07
        Validity
            Not Before: Jun 13 13:00:19 2025 GMT
            Not After : Jun 14 13:00:19 2025 GMT
        Subject: CN=2994ea92d854754b2aabf3e5310f0b4810359813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b1:4d:fb:e3:9c:99:04:99:01:57:ba:34:d6:
                    61:a5:af:ef:90:d1:97:c0:aa:d4:d1:5b:6b:89:ff:
                    d1:01:c0:47:ad:98:45:98:28:66:76:fd:f6:ca:d8:
                    02:f5:2d:2d:9d:16:34:50:6e:78:52:e5:ea:ce:81:
                    ce:9a:80:07:f5:64:8e:2d:89:a4:f6:a2:fe:b0:80:
                    88:2b:cf:a5:0b:dd:32:bc:4c:5b:fa:e1:12:bb:ed:
                    fd:e0:90:03:76:f1:39:e6:76:38:98:51:b9:c0:b3:
                    ab:6d:4d:18:c1:20:83:c5:b9:7c:44:84:a1:76:26:
                    c1:0b:b8:76:13:d5:1b:c9:f1:2f:3f:a2:29:19:01:
                    e8:14:64:11:9f:f9:4f:f0:bf:dc:67:a2:7c:df:1f:
                    36:9b:2e:41:6d:18:b9:fb:23:2e:c1:9a:45:58:fa:
                    76:d4:03:31:bc:ca:19:d9:3d:f7:16:5e:4e:32:4f:
                    ba:d5:dd:5e:d5:f4:0a:a4:d1:6c:11:61:d0:eb:68:
                    d7:0c:c1:dd:6e:f5:78:71:bb:da:6a:d4:37:ff:03:
                    fd:8c:95:a8:9c:c0:0c:32:4c:d0:3f:35:00:9e:11:
                    30:9b:46:dd:4d:9d:c4:9f:e6:62:e0:2d:7d:02:26:
                    fd:73:70:1e:73:0e:06:cc:37:a7:c1:65:04:e3:f0:
                    b0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:94:EA:92:D8:54:75:4B:2A:AB:F3:E5:31:0F:0B:48:10:35:98:13
            X509v3 Authority Key Identifier:
                keyid:88:88:81:8C:4E:CF:1D:5D:EB:4E:A9:36:67:47:0A:7A:11:4D:9A:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:a0:a4:58:c3:ae:d3:16:cb:4d:d9:1d:e1:3e:ff:59:99:ab:
         29:22:c0:a4:a5:2c:20:ac:93:b1:04:5a:a8:82:37:04:23:33:
         f6:4c:ed:40:2a:83:8c:0e:dd:81:45:bb:c6:e4:15:2b:2c:ce:
         5d:3a:49:85:c3:3e:6a:f2:4b:14:df:96:09:72:36:c0:6b:7e:
         64:44:51:bc:79:85:da:02:99:91:85:15:c4:59:26:4a:2a:33:
         44:de:87:c5:80:b0:2c:7c:2d:45:81:03:68:af:1b:2c:55:a0:
         53:a6:e4:e5:e9:f1:c6:cc:9c:f2:a7:94:7b:b7:3b:28:14:1b:
         2a:87:ee:93:0d:b6:ea:e6:d3:84:e2:fc:38:73:0a:a3:2e:ee:
         10:57:4a:36:0f:10:b6:17:8f:ba:cb:58:79:3e:20:e5:a2:d3:
         84:79:84:e3:34:66:ab:94:51:78:8d:cc:f8:70:ab:1b:da:5c:
         fe:b3:d5:3f:86:7d:42:7b:70:1f:2d:49:58:88:aa:5f:a7:cb:
         78:4b:eb:29:a2:91:19:78:73:73:a3:a2:ad:60:70:d9:92:3a:
         14:21:81:17:17:72:31:11:f0:c8:0e:8f:1e:fd:cd:a0:a1:5d:
         8b:13:a6:a4:5d:43:87:2c:78:18:0a:3b:b9:5f:ac:7f:ec:20:
         32:ec:ec:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:45 2025 by rpki-client