Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
File:                     ILE5EMH5hzXkAWULHTS_i2oKBpY.mft (raw, json)
Hash identifier:          ecIktkmBvtpvUUDwAcm4w/mmV4cJZlEz6o0JjDt5Gr0=
Subject key identifier:   5A:70:1C:7E:B4:B9:46:D9:CB:97:60:71:02:3C:31:8C:19:04:4D:6B
Authority key identifier: 20:B1:39:10:C1:F9:87:35:E4:01:65:0B:1D:34:BF:8B:6A:0A:06:96
Certificate issuer:       /CN=20b13910c1f98735e401650b1d34bf8b6a0a0696
Certificate serial:       01976BF44EFF4B27920C6CC3E5A30D9BBA22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
Manifest number:          0197
Signing time:             Sat 14 Jun 2025 01:01:02 +0000
Manifest this update:     Sat 14 Jun 2025 01:01:02 +0000
Manifest next update:     Sun 15 Jun 2025 01:01:02 +0000
Files and hashes:         1: ILE5EMH5hzXkAWULHTS_i2oKBpY.crl (hash: U0xkgakMSruD+pm2pAVHu7r74yybKGBAiedJnWCd9Ck=)
                          2: nMKMonjjnI6Y8gPN4LEu0lw7tWE.roa (hash: 7DwnxGJishn478s//Mb4GTmfUpnt4KRFodLw/H0Hi0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:f4:4e:ff:4b:27:92:0c:6c:c3:e5:a3:0d:9b:ba:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20b13910c1f98735e401650b1d34bf8b6a0a0696
        Validity
            Not Before: Jun 14 01:01:02 2025 GMT
            Not After : Jun 15 01:01:02 2025 GMT
        Subject: CN=5a701c7eb4b946d9cb976071023c318c19044d6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ff:e2:9c:1a:df:17:24:e1:c8:54:8c:67:67:
                    97:80:15:45:59:f7:f2:cf:5d:ba:77:15:ea:e1:ee:
                    dc:85:3f:82:ec:17:72:d2:b8:ee:d1:bd:9c:5e:69:
                    6d:cb:88:9e:b5:a6:8d:ed:3c:03:7a:9d:e1:f7:40:
                    ee:99:e1:33:9b:72:4a:d7:9c:9d:a6:70:61:ab:02:
                    67:db:80:c8:48:c9:f7:67:cc:79:fe:26:ab:05:1d:
                    c2:46:6e:fd:5b:b6:3b:b6:40:a2:cf:73:b4:ee:83:
                    5e:a5:47:8f:f7:d8:64:8f:91:1b:3f:63:ea:24:67:
                    1a:de:3d:0b:79:4f:2e:f4:48:57:25:da:e1:c3:b5:
                    93:f1:e1:5e:5c:22:3e:32:f6:0b:54:31:bf:df:bc:
                    9a:4b:7b:66:ce:68:67:cb:4c:fb:1d:b4:97:0f:16:
                    57:04:b3:21:cc:8e:16:60:0f:14:a7:df:f6:98:4d:
                    86:13:aa:f9:aa:e4:ad:ce:25:f0:ea:a3:0c:ec:8f:
                    be:d9:50:3f:d2:d9:58:9b:9f:07:40:a0:0f:83:bc:
                    24:f8:00:d4:3a:51:c2:c3:30:65:c1:cc:b7:d1:83:
                    d5:6a:f2:50:a9:f4:06:be:40:72:80:e5:26:c8:71:
                    f2:a6:29:7c:3a:6e:1e:36:bd:ba:4c:40:cc:d2:6a:
                    ff:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:70:1C:7E:B4:B9:46:D9:CB:97:60:71:02:3C:31:8C:19:04:4D:6B
            X509v3 Authority Key Identifier:
                keyid:20:B1:39:10:C1:F9:87:35:E4:01:65:0B:1D:34:BF:8B:6A:0A:06:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:b7:ae:ac:7f:c2:df:91:50:f7:9e:fd:21:80:e0:bb:8e:a0:
         4f:69:33:b7:18:ed:4d:e6:7c:a1:02:00:64:5e:93:d7:19:8e:
         60:ad:72:a3:70:4e:3c:e0:00:cb:9b:10:a5:4e:de:39:d9:77:
         b0:01:54:d4:3e:fa:b8:82:f7:eb:eb:77:a4:ee:4f:f8:fb:0f:
         da:25:3b:95:a9:dd:67:3c:f2:db:40:2a:22:4b:51:fa:8e:14:
         84:d6:74:df:cb:7a:fc:dc:0a:61:e8:0c:f1:df:49:1c:0d:b2:
         13:d0:cd:18:31:42:6c:00:f7:72:8e:f4:e1:55:a6:56:0e:d8:
         03:72:9a:ba:37:05:6f:6a:97:6c:f7:0e:9a:b8:08:3b:4a:3d:
         ad:45:d7:3c:d7:a2:09:1b:4c:a8:fe:2a:78:10:31:16:d2:81:
         5f:ea:a4:2d:9d:41:5d:20:1d:cd:6d:5a:ff:07:54:41:70:56:
         ec:3c:b6:6c:b1:ee:46:4b:c4:de:f4:c5:c7:f7:b2:7c:a2:13:
         42:72:fc:f6:de:c6:ba:8a:d3:a4:6a:42:6f:bb:d4:88:b8:47:
         af:c9:a7:d5:75:f1:d6:19:a9:61:8a:f7:ef:d6:9d:68:5f:a3:
         15:96:d0:a6:cd:e1:3d:49:36:9f:33:31:b4:65:0a:70:04:77:
         85:af:9c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:38:00 2025 by rpki-client