Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
File:                     iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft (raw, json)
Hash identifier:          D37o/cXsczsg6EQEGr+3D37gUAYwHYxsFQFdwgJWBNg=
Subject key identifier:   EF:30:52:43:85:5B:F2:0A:F0:F4:17:0F:1F:C4:E4:38:E8:7D:37:BD
Authority key identifier: 88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C
Certificate issuer:       /CN=88feb2b050d50ad8ce10c1c2f507fdb8a52d028c
Certificate serial:       01967831B3092703768B121D23C7D7918CD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
Manifest number:          121F
Signing time:             Sun 27 Apr 2025 17:00:45 +0000
Manifest this update:     Sun 27 Apr 2025 17:00:45 +0000
Manifest next update:     Mon 28 Apr 2025 17:00:45 +0000
Files and hashes:         1: PMwAzTvxWSjXFX28MV2s8k9HrhI.roa (hash: t71gV8OtnRcF1xNLqmy1I40UHYgIb7svkEMIzmfxErA=)
                          2: iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl (hash: gnwLnMxKnMTyvxvkhorzUc0vEImTUO/7K8yLBk0Q/ho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:31:b3:09:27:03:76:8b:12:1d:23:c7:d7:91:8c:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88feb2b050d50ad8ce10c1c2f507fdb8a52d028c
        Validity
            Not Before: Apr 27 17:00:45 2025 GMT
            Not After : Apr 28 17:00:45 2025 GMT
        Subject: CN=ef305243855bf20af0f4170f1fc4e438e87d37bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d2:79:fb:33:a3:f5:f6:f4:40:be:0a:32:5d:
                    44:3d:74:94:70:c9:56:75:4d:d7:5f:f1:c2:51:d7:
                    bb:46:ed:d7:0c:6b:3e:14:44:8c:2e:b6:56:e1:70:
                    b4:eb:bc:7b:2d:16:1a:1c:b7:38:1a:48:3b:68:61:
                    4f:80:72:6e:23:57:50:3f:f2:2a:bf:dc:62:82:1d:
                    d1:d2:9a:25:74:b5:9c:43:b7:93:fe:b4:f5:0b:0d:
                    5c:0f:2d:ca:fd:97:19:2e:18:c2:d9:ea:f4:fa:cd:
                    be:04:54:be:9f:a5:2b:98:29:76:aa:28:6c:7b:37:
                    c1:15:41:7a:84:15:d1:a0:a7:b5:cc:8a:fe:99:01:
                    c7:b6:b4:a1:ac:57:78:7a:9c:5e:bc:02:31:fa:fe:
                    99:b7:7a:61:36:6e:fe:74:e5:84:e5:68:69:1a:30:
                    a1:91:37:a3:3c:1e:c4:56:f6:87:69:fe:a0:df:fb:
                    13:e0:25:1b:8a:97:96:06:87:6d:25:d3:4b:02:ef:
                    d7:5f:90:0d:06:31:e7:27:7a:f7:17:33:56:7c:71:
                    44:9e:b2:3e:77:e0:21:15:16:26:49:56:c5:68:73:
                    5d:d0:f2:d6:0c:a1:91:df:57:7d:2f:cd:b5:e7:6c:
                    ca:15:81:a9:5b:84:7d:26:13:b2:86:40:8f:47:6a:
                    51:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:30:52:43:85:5B:F2:0A:F0:F4:17:0F:1F:C4:E4:38:E8:7D:37:BD
            X509v3 Authority Key Identifier:
                keyid:88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:5d:53:d5:a6:fe:55:89:60:0e:b7:3b:af:08:ff:cf:ba:b8:
         c1:0f:f5:db:18:75:78:14:b4:32:b1:1f:06:b0:2f:cf:11:d6:
         a7:9a:6f:5e:bf:b2:9b:fb:f7:2d:3b:33:e0:d0:5e:61:31:c4:
         66:fa:47:0e:2b:6d:b6:fa:3c:5a:a1:5e:79:a0:e7:7e:8c:b5:
         eb:4f:ed:56:b7:3a:7f:9b:c7:16:64:a7:cf:52:e1:54:67:df:
         b8:42:91:6d:49:05:4e:8e:43:e1:fd:c9:1a:a3:30:9b:1f:f0:
         40:79:de:34:75:fc:9f:c0:1b:f1:f4:69:cd:67:4f:76:c5:0e:
         94:be:a8:ca:f2:d8:e7:bd:eb:97:14:3a:e7:f3:33:c1:51:fb:
         2b:af:72:c1:6d:9b:64:bb:a4:29:4f:3b:79:f5:f8:bb:fe:dd:
         17:bd:fa:d4:73:69:2e:e7:ef:e3:de:03:d8:80:92:42:1b:d8:
         93:da:eb:10:8a:d6:22:95:f8:e9:2a:8a:21:de:48:67:9d:47:
         59:5d:ce:69:2d:f5:2d:41:73:44:dc:7b:3a:f6:ad:e1:07:c7:
         1d:29:af:df:aa:00:e2:96:0c:71:e3:e6:c5:ae:a9:6b:ae:8e:
         fc:51:b8:62:a9:49:47:00:d2:f8:63:af:00:1e:35:ac:f2:f4:
         18:0e:14:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:53:45 2025 by rpki-client