Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft
File:                     IvtSiroBjxQvRETMzJcjc2zU5LY.mft (raw, json)
Hash identifier:          eGfRbw9eoEnxuOeXrMu/eZ+oQJobsppB8+vqLR882/Y=
Subject key identifier:   E1:94:36:06:13:5B:B9:6E:E5:F7:95:6D:8C:54:85:AE:4A:58:66:38
Authority key identifier: 22:FB:52:8A:BA:01:8F:14:2F:44:44:CC:CC:97:23:73:6C:D4:E4:B6
Certificate issuer:       /CN=22fb528aba018f142f4444cccc9723736cd4e4b6
Certificate serial:       01976C624BDE37A4862C60C151800684E0C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft
Manifest number:          1179
Signing time:             Sat 14 Jun 2025 03:01:10 +0000
Manifest this update:     Sat 14 Jun 2025 03:01:10 +0000
Manifest next update:     Sun 15 Jun 2025 03:01:10 +0000
Files and hashes:         1: 4Qe9-T0nXWoVHW9lPtNAFV1MJeQ.roa (hash: MEUx9Qe02B/09ozBtbyk47nH68xJFm0Hu6pf18Q/8p0=)
                          2: IvtSiroBjxQvRETMzJcjc2zU5LY.crl (hash: 8lVk0b24qQRulywX4IfVaYmYdb4YPFyiYBJVnZb5WAg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:62:4b:de:37:a4:86:2c:60:c1:51:80:06:84:e0:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22fb528aba018f142f4444cccc9723736cd4e4b6
        Validity
            Not Before: Jun 14 03:01:10 2025 GMT
            Not After : Jun 15 03:01:10 2025 GMT
        Subject: CN=e1943606135bb96ee5f7956d8c5485ae4a586638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:41:c6:8c:79:40:40:5f:68:d4:f1:42:3e:4c:
                    9b:ad:21:67:cb:9b:af:57:47:3a:b8:c9:c8:ff:bc:
                    35:99:2c:e3:8d:1f:1f:a0:0b:86:0e:57:e3:b6:b1:
                    14:16:a6:70:5b:ca:49:56:15:f5:94:cd:03:ac:9f:
                    dc:6a:fa:24:21:92:9d:d6:91:30:62:37:51:b5:a2:
                    91:94:bd:2c:39:aa:f6:bc:77:4c:f8:7f:b4:45:41:
                    55:13:10:02:61:79:e5:fe:58:da:5b:14:88:c2:1a:
                    02:f8:13:21:38:04:52:5d:e1:d7:c1:24:5d:6f:9b:
                    b4:e5:42:7d:23:fa:b6:ce:7e:f2:1f:a3:92:d3:79:
                    9f:b3:9c:6e:46:10:72:25:87:54:0b:e1:90:dc:00:
                    c5:b5:8a:72:dc:61:73:4b:d9:74:c0:ad:25:7c:73:
                    f8:ed:f4:18:bf:fc:f2:61:d8:06:c0:65:cd:51:d2:
                    17:e1:ef:da:0b:f8:f2:64:36:ba:d0:de:d1:55:c1:
                    92:f6:87:f4:41:8d:11:3b:c9:5c:13:b9:0f:0c:52:
                    83:8c:e8:a2:21:44:a3:29:54:97:e7:1b:b5:b7:74:
                    52:34:ad:99:45:2d:7a:12:e8:21:d8:bc:c9:7d:9d:
                    b7:35:7a:c6:56:3f:87:b1:a8:29:8e:5b:44:22:3f:
                    42:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:94:36:06:13:5B:B9:6E:E5:F7:95:6D:8C:54:85:AE:4A:58:66:38
            X509v3 Authority Key Identifier:
                keyid:22:FB:52:8A:BA:01:8F:14:2F:44:44:CC:CC:97:23:73:6C:D4:E4:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:d6:7f:f4:a2:0f:11:2f:93:3d:9e:c1:87:eb:06:85:16:b0:
         a7:cb:62:69:d0:b0:12:c4:6e:33:8f:79:cf:17:f5:76:5d:02:
         03:95:ca:3e:09:39:60:0d:e3:f1:31:d2:96:80:f7:7d:d9:de:
         07:83:c4:e4:c1:64:ba:03:81:3e:0a:bd:71:42:06:e7:a2:6d:
         31:a2:e2:59:d5:0b:df:7d:ed:55:3c:fb:08:2d:73:a7:88:33:
         a1:00:41:65:62:a4:a5:ed:bd:01:18:9d:60:f9:ff:53:3a:3d:
         cd:ec:0f:97:0e:9a:b8:d5:ea:6a:61:71:f7:cf:69:d8:f5:f1:
         81:a0:74:fd:9a:06:bd:41:02:44:1f:5e:15:53:e9:c2:18:8a:
         08:ad:0f:a0:46:08:59:63:bc:ac:b2:9c:27:95:6e:63:cb:20:
         5e:18:87:f4:bf:07:d0:45:ea:23:48:c1:07:b4:85:5d:58:fb:
         8c:bf:91:a9:62:1b:45:fe:80:10:01:61:c5:76:8f:6a:56:c1:
         b3:3b:55:9b:91:b8:e7:b3:7a:d2:d0:f7:88:e7:3c:1d:9c:a3:
         b8:b5:64:1f:ba:d6:c1:db:62:2e:a3:77:92:11:07:91:80:20:
         f8:18:5c:ea:57:a6:af:35:a8:fc:7c:71:2c:fa:29:53:54:28:
         d4:a3:ce:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:55:17 2025 by rpki-client