Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft
File:                     iawKy_23onTvNsFvWGCtoqJHBpc.mft (raw, json)
Hash identifier:          Sy723PxchqRKvYYIl4LtexfLVQ0dYEkMuh3MjIGrRhs=
Subject key identifier:   70:8B:B4:84:29:F1:3C:68:B2:15:18:66:DE:1E:45:92:B1:6E:9C:A1
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Certificate issuer:       /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial:       01964F358A2E1134F208755C7F1A6FE916FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft
Manifest number:          14E0
Signing time:             Sat 19 Apr 2025 18:00:30 +0000
Manifest this update:     Sat 19 Apr 2025 18:00:30 +0000
Manifest next update:     Sun 20 Apr 2025 18:00:30 +0000
Files and hashes:         1: dJyo5maMFYG06CB60KewP8-LNEc.roa (hash: LO26kgSXxCz0IxFKcAaH1ZYq5V5rRxtBlLjShWu3YvU=)
                          2: iawKy_23onTvNsFvWGCtoqJHBpc.crl (hash: 2dgU+HuiMZ0ip2TWx8TJ7E8VRMSApj4ELOpE7XVsTlE=)
                          3: kALeFOqdoUlsrrEA4gEeCsqdb7U.roa (hash: CGGNVlWIfGNVOdkVdR2nL+rohybhJ6hPwgX68rdZVTI=)
                          4: lquc59oCp8WIYEdNZK91aJH6maQ.roa (hash: vPy/zetwkHCDmtJu/tBMMZU0UeQDHqlS91Jz+2bOl8w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:35:8a:2e:11:34:f2:08:75:5c:7f:1a:6f:e9:16:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
        Validity
            Not Before: Apr 19 18:00:30 2025 GMT
            Not After : Apr 20 18:00:30 2025 GMT
        Subject: CN=708bb48429f13c68b2151866de1e4592b16e9ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:44:6f:08:4c:01:b9:71:83:1b:7d:c7:c0:af:
                    31:cc:20:b8:ec:94:c9:81:1d:08:8f:17:6c:ef:4f:
                    23:b2:6b:7f:a3:b9:f1:fb:9f:13:f3:c7:fc:8f:88:
                    ba:f3:1e:45:ab:a5:91:84:b6:d8:35:e8:09:0c:8f:
                    73:26:b2:65:f2:2d:2c:38:c8:09:2a:1d:b7:14:26:
                    83:63:41:61:1a:56:49:39:ab:76:5a:86:59:09:46:
                    e2:d3:04:2d:a0:76:ce:d3:c7:06:bb:17:7d:f5:2d:
                    79:9f:94:2d:9f:f0:92:b1:3c:52:45:ab:56:26:c0:
                    85:5c:97:1a:40:fc:cf:28:74:41:b4:e9:54:b4:4c:
                    34:ab:a8:65:62:51:17:9a:a9:7b:59:53:6c:4b:76:
                    c1:47:45:94:a0:5c:62:29:13:8b:a2:21:44:9c:0a:
                    26:83:70:81:9b:cf:e3:58:fc:46:63:78:98:f0:b2:
                    b7:6e:73:bd:26:7e:f1:9b:65:2e:55:eb:59:68:23:
                    69:52:69:90:08:92:df:9b:d6:88:dd:8f:fb:ea:57:
                    4e:08:a1:01:1c:1e:c0:c7:93:f3:f8:dc:25:88:b3:
                    5a:9d:59:1e:27:61:89:e0:b2:1c:de:03:42:a2:c4:
                    d2:56:7f:f3:7d:53:63:d5:20:f5:98:9d:89:b6:b9:
                    e9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8B:B4:84:29:F1:3C:68:B2:15:18:66:DE:1E:45:92:B1:6E:9C:A1
            X509v3 Authority Key Identifier:
                keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:f9:e0:b5:8c:5c:fd:78:ec:cf:ff:27:a5:b8:a8:3f:5c:15:
         bf:89:fe:bc:b1:5f:03:b9:94:65:fa:bc:24:62:67:62:8e:f9:
         70:0c:9e:c4:ec:26:cc:c3:3a:d2:6c:85:9d:2d:04:a7:d3:26:
         5d:86:27:fc:ae:f3:3c:a5:67:4a:03:ec:06:43:fd:89:9c:31:
         c9:01:bd:af:75:ff:38:b6:ed:e5:73:2d:39:b2:9c:eb:05:f7:
         22:c4:7e:e2:80:d6:77:2d:f7:e2:36:db:1f:25:d7:64:78:7c:
         05:88:52:f8:17:6f:76:74:e0:f5:fa:da:69:aa:f3:67:c6:3e:
         d6:b5:b4:ba:d6:94:6f:b4:d6:4a:c1:34:74:4f:bf:fa:7e:97:
         e7:70:1c:4a:e1:ec:df:f2:f5:1f:fc:34:08:f4:86:2d:b5:ca:
         4f:5b:94:8e:57:1c:70:fe:b4:20:34:60:db:de:c0:81:5b:99:
         e8:80:74:27:6f:57:c5:e9:5e:01:fc:5f:7c:bb:b2:bb:c7:2e:
         35:69:1d:f5:1a:b2:78:d8:1d:85:8b:a7:0b:52:df:c8:df:58:
         4f:6d:3a:bf:e4:72:60:90:34:55:b8:77:2a:45:8e:d1:92:c7:
         11:1b:fe:16:a2:1f:2c:57:ac:58:43:8b:1d:04:35:51:dc:c3:
         78:22:32:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:21:53 2025 by rpki-client