Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
File:                     iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft (raw, json)
Hash identifier:          K+S+Vuwm2lEZfsS+XMQvwdi1AFTzHfYlv6ZpmIKSNxs=
Subject key identifier:   02:82:BD:F4:FA:32:F1:E6:A1:AE:64:95:97:B8:1E:03:1D:07:19:C2
Authority key identifier: 88:6F:AF:18:20:07:4B:79:B6:02:5D:DF:FA:B2:5C:B3:F7:74:42:4E
Certificate issuer:       /CN=886faf1820074b79b6025ddffab25cb3f774424e
Certificate serial:       01976BF45FD254A29FE8B1D5DA9223A474CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
Manifest number:          0110
Signing time:             Sat 14 Jun 2025 01:01:06 +0000
Manifest this update:     Sat 14 Jun 2025 01:01:06 +0000
Manifest next update:     Sun 15 Jun 2025 01:01:06 +0000
Files and hashes:         1: iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl (hash: pkxNhm9T21afPB6Bu7F1NvhKxN2CHlLTY8J3Xwa7Hmo=)
                          2: pBOV7_scguiJteXj3vNSqNhNc5U.roa (hash: vCrIj0wpM69dzNSkAC34US2sC7UYedyyZzr33rt/1E0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:f4:5f:d2:54:a2:9f:e8:b1:d5:da:92:23:a4:74:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=886faf1820074b79b6025ddffab25cb3f774424e
        Validity
            Not Before: Jun 14 01:01:06 2025 GMT
            Not After : Jun 15 01:01:06 2025 GMT
        Subject: CN=0282bdf4fa32f1e6a1ae649597b81e031d0719c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8c:3d:c6:1c:46:87:87:2e:d8:9c:56:e9:20:
                    66:be:9c:e8:2d:b3:70:ba:71:8f:7a:b6:f2:8c:ac:
                    ec:6d:30:95:e3:a9:64:0f:67:05:80:83:21:58:c5:
                    5a:bd:98:6d:a2:39:7b:51:73:37:51:d4:2b:e0:f6:
                    c3:90:46:3b:1a:70:2c:17:0c:d9:cd:27:62:97:a3:
                    b1:d6:19:31:41:3c:cd:02:77:bc:f5:22:c6:9f:fa:
                    0e:1d:42:0b:00:8f:5f:4d:a0:70:ea:b1:1d:fb:21:
                    fd:74:ac:67:9b:90:92:0a:a9:d8:a6:e6:be:ac:8e:
                    5a:f3:c8:e5:4e:71:9a:4b:a1:b8:93:9b:35:77:79:
                    4d:f4:ec:81:09:57:90:da:6b:03:8e:a8:30:d9:25:
                    23:d8:fa:51:26:90:c8:04:90:d2:9b:c9:1b:38:f7:
                    b9:2f:9e:dc:a4:76:c4:18:d4:49:45:35:b4:11:a5:
                    dd:e8:9c:13:6a:d0:d2:6d:7e:17:7c:38:73:e2:d4:
                    88:14:2b:64:fb:07:9e:19:1a:9f:b6:44:26:33:e6:
                    f4:0c:c2:bf:74:54:41:6a:80:61:cf:c1:35:8c:ac:
                    46:51:1b:a6:8f:93:76:a0:fa:f2:57:89:bf:58:2a:
                    96:26:ed:93:2e:43:7c:e4:dc:f8:33:1e:c0:9d:98:
                    54:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:82:BD:F4:FA:32:F1:E6:A1:AE:64:95:97:B8:1E:03:1D:07:19:C2
            X509v3 Authority Key Identifier:
                keyid:88:6F:AF:18:20:07:4B:79:B6:02:5D:DF:FA:B2:5C:B3:F7:74:42:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:6a:68:76:40:bd:f3:af:9d:7d:ae:ed:f4:cf:c8:c7:2f:30:
         4e:7f:f7:68:59:a2:9b:21:80:7f:ad:b7:06:66:14:08:30:7f:
         2b:60:d7:9f:1a:db:c5:ae:22:c4:5b:04:af:09:ae:2b:5b:94:
         f2:ab:92:5e:07:81:5f:48:11:f6:f4:1c:92:05:90:0a:0d:2e:
         9d:82:7c:db:eb:ad:71:fc:7a:b9:f0:ed:fb:06:02:a2:2d:b8:
         3c:47:40:01:24:6a:d5:a3:e3:23:ae:31:00:33:14:fe:1b:a2:
         3b:50:0b:52:e3:b4:e1:a5:20:4a:2b:8c:78:62:e9:e8:3b:0e:
         e3:9d:13:46:bd:03:ae:d3:f8:c5:fd:1d:ae:c0:ed:2a:6b:ec:
         e8:2c:fc:5c:64:5c:82:82:ab:c6:c6:3f:ee:e2:04:bf:5a:5e:
         53:04:0f:18:1d:b3:3f:08:e0:55:a2:aa:2f:1f:d4:df:6c:7d:
         c4:03:b1:78:72:ef:73:7c:59:1e:1a:ec:5d:01:33:05:f0:0f:
         0f:e5:e8:c2:98:51:c7:5f:ea:d2:a3:3e:06:24:84:99:39:50:
         3f:7c:1c:8b:69:cb:04:f3:15:ab:cc:cf:9d:cd:93:66:0d:b2:
         9f:7c:79:55:0a:4b:e7:a6:f6:f8:15:70:5d:1f:ff:26:5f:a9:
         d8:8d:97:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:08:30 2025 by rpki-client