Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
File:                     iqtMDPIcGj1upBBoy-kIvjiORQo.mft (raw, json)
Hash identifier:          mzV+uH7VM2YroZ3JREii60sdZqf5RGFqvjrnzIID5uk=
Subject key identifier:   56:00:5A:FE:9D:11:45:17:55:FF:5C:13:CC:A4:AE:88:49:4F:17:3E
Authority key identifier: 8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A
Certificate issuer:       /CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
Certificate serial:       01976DAB29CCD5CC285C9866072287AE75DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
Manifest number:          02CD
Signing time:             Sat 14 Jun 2025 09:00:23 +0000
Manifest this update:     Sat 14 Jun 2025 09:00:23 +0000
Manifest next update:     Sun 15 Jun 2025 09:00:23 +0000
Files and hashes:         1: 5ROabaZ0IQjGvjydG24dxkFdbIw.roa (hash: VZzap9WlH6EGkLU7RiUuipaz7yv8laZyaoXJmwbYxFo=)
                          2: KNoplKbnalbBlNJ0HrGiOS5fwgk.roa (hash: 6g25L6YriR7F4NqmIjLUqgHXTaSIa9NMu6Z6ggsvzHE=)
                          3: alNy-myxrA734TUoeZ1JVeikh6c.roa (hash: OCkDLXElKJB9eMUhsdq5dMT5WhX6caAwH3DuhC8oZvM=)
                          4: gdHjw5BAYBUGiQIKDf_rANYjbqo.roa (hash: rBCOEGXMkDk7MH6Epcgax70EgSCg7o0cp931QH6ZEmk=)
                          5: iqtMDPIcGj1upBBoy-kIvjiORQo.crl (hash: 5wrehXtwwqFzIAes5/OuYyh+w2X77EGL/jpbEZekTrg=)
                          6: y7BcwDEAXqOJr6z4aNGCsX7xfw0.roa (hash: NHC7ZwJSkEI3d9bNJO6OCWV6hxqIR1IsXwJaROvY2+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ab:29:cc:d5:cc:28:5c:98:66:07:22:87:ae:75:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
        Validity
            Not Before: Jun 14 09:00:23 2025 GMT
            Not After : Jun 15 09:00:23 2025 GMT
        Subject: CN=56005afe9d11451755ff5c13cca4ae88494f173e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a9:4e:fc:a6:85:c6:7a:53:3d:95:b7:27:df:
                    93:e7:dd:68:5c:00:64:e1:bb:d3:b9:5c:80:c9:46:
                    2e:cc:30:1f:4d:02:6e:fe:9e:3c:86:c0:83:ef:59:
                    be:a2:4d:f3:d3:cb:1a:c3:60:54:6b:03:75:2b:cc:
                    a0:48:22:a3:2b:3a:04:f8:5d:31:83:4b:16:64:d9:
                    d7:cd:ca:13:e3:14:13:8d:52:b6:c3:3a:e1:cd:3e:
                    a6:62:f0:ef:92:b7:eb:c8:b4:38:7c:67:6a:f4:c6:
                    1d:11:f4:6e:98:8d:f0:67:a1:0f:50:90:1b:07:31:
                    73:f1:6a:91:a1:f5:0f:ee:b2:ee:c9:24:65:b6:c4:
                    76:e1:de:bc:66:37:1d:7a:84:5e:3d:32:99:af:7c:
                    4d:5c:2e:9c:b7:c3:15:90:b7:ea:0f:4e:d4:08:af:
                    bb:c7:be:10:27:1e:6f:1f:aa:7e:1a:12:4d:91:03:
                    0a:2a:33:1e:98:99:55:97:56:19:c8:d6:ee:b7:69:
                    01:88:48:af:12:ee:53:58:00:a5:bd:55:58:93:58:
                    d3:32:74:7a:1c:0a:c5:f5:94:ad:49:a2:b3:13:ce:
                    23:d3:d6:1e:ef:37:d6:08:9f:55:ef:14:4f:81:69:
                    f9:f3:18:20:00:9d:78:1c:c1:77:92:c3:3e:10:1a:
                    ea:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:00:5A:FE:9D:11:45:17:55:FF:5C:13:CC:A4:AE:88:49:4F:17:3E
            X509v3 Authority Key Identifier:
                keyid:8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ec:1e:f8:f6:c4:5d:47:a0:fc:c1:6c:ca:9a:8f:b1:6a:b4:
         7e:a8:fc:d8:a4:a1:34:b3:68:b7:28:d7:3e:de:f0:53:e4:d9:
         1b:d4:f3:fd:ab:cd:88:39:91:f9:b9:7a:36:de:7d:1b:92:21:
         01:16:0f:91:53:f7:af:43:da:a4:b1:51:bb:5e:09:5f:d4:ea:
         fb:35:61:a9:09:f9:89:a7:45:9e:b1:bf:e7:48:7e:ed:5f:a0:
         14:b4:96:26:56:11:85:ff:76:6a:7b:07:43:da:9c:10:3e:f1:
         80:f1:94:ca:5a:f5:cb:1a:07:2b:f3:0c:8f:5b:8f:be:11:d4:
         31:37:5f:75:87:6a:ff:9f:4b:ab:12:e1:d3:e1:7a:32:00:64:
         5b:ea:45:b2:1e:53:ba:15:93:43:e5:b9:1f:c5:37:42:10:d2:
         31:2e:9c:cf:3a:f4:43:ea:6a:4a:ff:79:15:9f:ee:c8:e3:d5:
         1e:fe:b0:dc:c4:38:b9:97:5c:8d:a4:09:9e:02:9d:7b:c0:24:
         b1:ed:91:57:3b:da:e7:3a:4a:13:80:5a:d8:f3:aa:b7:73:35:
         3e:4f:58:2b:0a:94:ce:a5:31:ee:09:21:60:91:47:81:fc:59:
         a5:f3:29:61:d3:e2:e6:bc:cc:7e:3c:f2:76:c5:42:e7:29:d4:
         c3:aa:d6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:35:29 2025 by rpki-client