Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
File:                     i1_lDykN2eQeX0pl2rsjlyqCytM.mft (raw, json)
Hash identifier:          2jY7+VwsQfpnclIKrXiSZtww5Ip2RVkwEY2v1fslgFk=
Subject key identifier:   7A:04:63:AB:BE:CD:8B:68:7A:0C:56:37:F6:FD:82:99:00:40:A7:95
Authority key identifier: 8B:5F:E5:0F:29:0D:D9:E4:1E:5F:4A:65:DA:BB:23:97:2A:82:CA:D3
Certificate issuer:       /CN=8b5fe50f290dd9e41e5f4a65dabb23972a82cad3
Certificate serial:       01974F6A2FE98F23CA3C92B0C4F22E384018
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
Manifest number:          098D
Signing time:             Sun 08 Jun 2025 12:00:48 +0000
Manifest this update:     Sun 08 Jun 2025 12:00:48 +0000
Manifest next update:     Mon 09 Jun 2025 12:00:48 +0000
Files and hashes:         1: VyXgHHFFQ2oH5mDTe8acLrMgUes.roa (hash: LW13jFriZ57WfbtFccojs/LokeY+i7PgigFeLOhpQuY=)
                          2: i1_lDykN2eQeX0pl2rsjlyqCytM.crl (hash: +GhsGpBFEV8JK14/KHeItG1Q+MVTLwMeuMtWd1BPzVQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 11:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:6a:2f:e9:8f:23:ca:3c:92:b0:c4:f2:2e:38:40:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b5fe50f290dd9e41e5f4a65dabb23972a82cad3
        Validity
            Not Before: Jun  8 12:00:48 2025 GMT
            Not After : Jun  9 12:00:48 2025 GMT
        Subject: CN=7a0463abbecd8b687a0c5637f6fd82990040a795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:67:02:54:b5:75:2f:9f:82:99:1b:cd:b3:c6:
                    ac:e9:80:c1:8f:b6:04:d2:61:fd:11:2d:6a:53:37:
                    52:29:a3:0f:52:d0:de:0e:72:3e:ad:e1:4a:25:a8:
                    00:6d:66:5b:37:0e:e0:0b:73:fc:4e:99:31:20:eb:
                    d5:16:53:50:f9:69:15:c5:6a:1d:19:13:27:ae:ac:
                    45:be:8d:0c:e0:c8:db:02:58:24:d9:ca:c8:d1:34:
                    9b:93:1c:b5:b0:10:1a:55:e5:58:8b:72:52:04:37:
                    00:0e:cb:25:39:5f:0e:76:bf:35:6c:f5:7e:39:40:
                    12:1c:5b:55:69:6f:18:ba:37:9f:ad:8c:d4:3e:10:
                    c2:f9:4f:6b:0f:96:28:23:fe:ad:a8:70:ea:a1:83:
                    7e:1f:23:f4:9b:fc:6a:58:b9:e0:59:d4:dc:f1:50:
                    fd:00:9d:af:51:64:37:aa:3a:67:7c:75:d2:d9:89:
                    9e:c7:4b:d7:73:1c:e1:89:cb:74:63:49:ab:40:b7:
                    63:52:b8:38:3c:ba:49:d4:32:fd:44:da:ff:ea:b4:
                    6e:f1:b1:53:7f:9e:86:ed:7e:f5:d7:c2:0a:e8:6c:
                    8f:be:59:e5:bc:81:bd:5c:b5:5a:d3:cc:29:7a:a8:
                    d5:56:13:e0:36:ce:1c:d5:fe:2c:f8:26:b7:86:19:
                    a6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:04:63:AB:BE:CD:8B:68:7A:0C:56:37:F6:FD:82:99:00:40:A7:95
            X509v3 Authority Key Identifier:
                keyid:8B:5F:E5:0F:29:0D:D9:E4:1E:5F:4A:65:DA:BB:23:97:2A:82:CA:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:06:76:28:7f:a1:29:a2:3d:84:b7:b7:91:f7:f6:a8:ea:b8:
         4a:98:ef:11:8c:8f:cb:2b:4d:d3:55:e5:c6:f9:de:3d:bc:cf:
         c7:69:cf:d6:24:02:12:65:5f:2e:98:91:de:db:9a:5b:78:34:
         df:d7:7d:36:66:5e:73:d5:23:7d:c3:bc:c3:b0:2d:9c:e2:b6:
         8b:4c:f8:1c:5e:32:03:9e:89:47:45:e4:8d:2a:67:03:17:ab:
         20:01:57:25:f8:8e:5a:ca:90:e5:0d:71:4a:40:88:ab:b0:8c:
         16:6c:e1:29:8e:bb:c8:1d:6a:27:0e:3a:35:21:a4:4b:33:ca:
         91:6d:96:e7:30:15:cb:09:a3:4b:9e:5a:09:6f:46:29:af:8a:
         a0:21:df:ec:06:34:37:d0:f6:2b:53:39:43:6a:6e:98:c0:b3:
         3a:14:63:26:0a:7d:52:7c:cd:b3:65:20:17:cb:8e:40:5e:09:
         af:77:26:c1:63:33:25:50:f0:17:24:fa:67:63:10:ea:44:6c:
         1d:36:0c:1c:c4:f7:16:a3:2e:98:62:80:8f:84:10:4f:bb:aa:
         11:85:fb:6b:17:05:92:58:17:73:88:0d:df:bf:70:8e:2c:52:
         dc:f9:d4:84:3c:fa:d7:9a:c8:b2:e0:ff:0a:a9:9d:1c:83:41:
         17:32:ec:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:44:53 2025 by rpki-client