Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft
File:                     IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft (raw, json)
Hash identifier:          5yvVZBFyRR5z6SNMcDyiF99yWNFE7q01IE2MB99nBIU=
Subject key identifier:   79:F9:00:20:62:47:27:64:82:BF:CD:06:44:EC:73:08:DE:F2:65:BC
Authority key identifier: 23:16:2B:BF:02:46:CD:A2:28:0A:29:34:32:AE:6F:0B:D6:82:61:31
Certificate issuer:       /CN=23162bbf0246cda2280a293432ae6f0bd6826131
Certificate serial:       019848F76F6D81F284A784D2E49A1088AF2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft
Manifest number:          08C4
Signing time:             Sat 26 Jul 2025 23:00:32 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:32 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:32 +0000
Files and hashes:         1: IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl (hash: rh0OkEjmLjC3X+/Ai5KmufQy+gYMOICvTvVZ/X4oGaU=)
                          2: _Ya9SawdjIbplJ2DDMKFuiItpWw.roa (hash: D98XW56rnTmNC9SFO3Lu162y4j8aooITvkhCs2VUjc4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 23:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:6f:6d:81:f2:84:a7:84:d2:e4:9a:10:88:af:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23162bbf0246cda2280a293432ae6f0bd6826131
        Validity
            Not Before: Jul 26 23:00:32 2025 GMT
            Not After : Jul 27 23:00:32 2025 GMT
        Subject: CN=79f900206247276482bfcd0644ec7308def265bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:67:34:54:3d:85:cf:30:59:02:b1:3a:70:d5:
                    ff:eb:bf:36:4a:40:e8:8c:0a:37:d6:a7:4d:94:52:
                    e3:04:5b:a1:1f:23:85:a5:12:f6:2e:c7:0d:a0:7a:
                    b1:fe:a1:b1:39:dd:02:ac:c5:0a:59:db:c4:3d:89:
                    78:0c:64:51:76:25:92:87:46:0a:a1:b1:dd:3c:ed:
                    28:f3:58:47:c7:b7:00:99:56:cb:68:0f:9f:a9:72:
                    bc:3c:68:5e:32:a1:19:3c:45:9a:0b:1d:47:aa:a4:
                    cc:29:53:c8:69:90:bb:ab:5b:f9:de:13:21:57:14:
                    c8:e8:63:ae:54:89:34:c6:6b:bd:cd:91:0b:54:8a:
                    49:e9:09:ba:87:df:57:64:70:75:6b:09:97:30:95:
                    af:8f:41:69:b9:16:45:c6:82:00:b4:55:ff:83:35:
                    43:17:a1:24:30:6d:a9:ed:aa:fc:52:c8:58:ea:f8:
                    8f:a5:0d:43:55:11:c8:97:ac:03:4d:18:e4:4a:9c:
                    d2:62:cd:ba:b1:f7:aa:74:3a:9f:e8:ca:ae:d5:a4:
                    66:b5:7a:1b:21:1a:f8:63:ed:3a:44:85:6f:bc:6f:
                    f8:46:3d:a4:bf:0a:2d:82:4a:3e:b8:aa:51:09:12:
                    89:64:a8:2a:e1:2f:4c:20:ac:cf:d8:10:f8:78:af:
                    3f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F9:00:20:62:47:27:64:82:BF:CD:06:44:EC:73:08:DE:F2:65:BC
            X509v3 Authority Key Identifier:
                keyid:23:16:2B:BF:02:46:CD:A2:28:0A:29:34:32:AE:6F:0B:D6:82:61:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:94:59:d0:fb:62:9e:d0:dd:d5:da:1f:0a:6d:6d:5c:54:a0:
         2b:90:29:d9:07:1b:71:7e:e4:f7:97:3c:7a:cf:4b:eb:04:80:
         c3:43:ec:de:a0:c7:39:fb:e1:43:14:f7:c5:be:7c:16:dd:95:
         15:ca:83:b3:3b:0a:6f:c0:9a:d7:1a:87:75:7c:1f:be:16:db:
         6e:70:28:5b:0b:26:0b:c8:b7:20:b1:c4:0f:2b:51:16:e6:6d:
         9d:5a:09:d1:7b:e2:bb:18:9a:54:be:e0:c0:39:82:c8:8e:fb:
         ec:ae:df:bd:8d:9e:35:e4:7f:a5:68:03:82:06:68:3e:38:ee:
         af:1e:95:3d:21:a9:76:06:8e:e6:ce:8e:a7:cd:69:f2:e8:5d:
         5a:31:37:e8:98:1f:50:45:5f:22:f0:45:b0:80:bd:6e:bb:ac:
         c1:9c:e8:29:24:bb:01:28:8f:ac:c1:c3:fa:cc:f8:cd:bf:ff:
         c7:98:69:de:4b:7a:dc:1b:b8:71:2a:f5:a0:0c:7d:27:ed:bc:
         ef:8f:00:15:9e:b9:4b:35:80:6a:19:e4:fb:d2:32:1b:bc:92:
         d3:6c:70:5a:07:f4:7a:a1:e4:31:ca:20:88:49:fd:ee:41:09:
         e0:66:ed:bf:c4:44:ea:68:b3:3f:c9:b3:55:c5:b5:2a:98:73:
         e2:33:f3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:31:03 2025 by rpki-client