Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
File:                     IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft (raw, json)
Hash identifier:          H4mDdVzEcKqWeb4ekRxdINtqmkzQhaGOMwJzfFhOTEY=
Subject key identifier:   C4:B7:EA:2C:70:8D:90:7E:64:50:E1:65:7A:8B:B1:0F:A0:78:77:AC
Authority key identifier: 23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3
Certificate issuer:       /CN=23051215f6f1bd227db7f40df748d64c106f84a3
Certificate serial:       01974D448B6C7B3E45DD2A339776152365AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
Manifest number:          02BB
Signing time:             Sun 08 Jun 2025 02:00:27 +0000
Manifest this update:     Sun 08 Jun 2025 02:00:27 +0000
Manifest next update:     Mon 09 Jun 2025 02:00:27 +0000
Files and hashes:         1: EuYflw2vpOToo9K8lFetTYAhWyo.roa (hash: SUT2OfNUp9WFMOp/u/f5+vrQyr/WoDJgwv8+U/p5Afw=)
                          2: IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl (hash: A5WugDUcXQJZf7JqlFC3FXApi3hj1DN95BcdXmkPLCc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 02:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:44:8b:6c:7b:3e:45:dd:2a:33:97:76:15:23:65:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23051215f6f1bd227db7f40df748d64c106f84a3
        Validity
            Not Before: Jun  8 02:00:27 2025 GMT
            Not After : Jun  9 02:00:27 2025 GMT
        Subject: CN=c4b7ea2c708d907e6450e1657a8bb10fa07877ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:90:f1:16:f7:8d:ce:46:e4:ef:a2:20:ec:fe:
                    d6:c4:0e:24:32:22:cc:ed:62:e8:b6:01:5b:c6:be:
                    8f:9a:5e:05:46:20:81:77:dd:32:ad:f9:d2:83:12:
                    c1:9b:04:95:2e:a2:89:65:75:81:aa:15:eb:32:b0:
                    98:a7:b4:06:6f:f2:2b:c2:51:c2:1a:6e:99:1c:47:
                    08:10:1e:56:92:da:27:bb:68:a7:35:e2:1d:95:d4:
                    86:8c:f1:6c:66:99:5a:64:ba:eb:c5:6b:12:3d:6f:
                    06:00:4f:74:3f:35:3f:68:29:c8:4a:5c:42:a4:0e:
                    5e:a6:9c:12:35:69:c2:01:d5:f8:fb:49:4c:58:41:
                    21:50:0b:fd:f4:c5:35:bb:bc:c5:7c:3c:25:1a:e7:
                    7a:d2:69:8f:f5:f9:8b:72:f7:cf:14:0f:c6:35:68:
                    a3:b8:2c:6b:05:38:8d:b2:6f:ce:e5:9a:cb:6c:10:
                    70:16:cc:56:13:28:23:1d:47:93:51:54:8f:7f:a3:
                    25:66:54:82:50:b0:44:37:cb:26:8b:17:24:fd:df:
                    c6:7a:d5:cb:d5:69:4e:1c:9f:c8:9c:82:86:c9:fe:
                    c2:ca:a8:78:2e:69:05:5d:8a:4f:b7:b4:ad:33:1d:
                    e5:06:5a:8c:2c:9d:49:66:3a:bd:5d:2f:18:ef:5e:
                    8c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B7:EA:2C:70:8D:90:7E:64:50:E1:65:7A:8B:B1:0F:A0:78:77:AC
            X509v3 Authority Key Identifier:
                keyid:23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:4b:86:21:a7:a9:1f:13:9e:b7:1e:f4:13:e1:44:ce:69:5c:
         24:e2:ec:ad:04:42:52:c0:d2:f8:e7:c2:57:94:6d:f6:f0:60:
         85:48:69:ca:e1:f5:ab:49:5d:5b:9b:f7:e9:70:3c:4f:69:0b:
         8d:f0:bc:1b:5d:98:2b:4a:c9:22:84:4e:dc:0a:30:31:58:bf:
         e7:99:53:b5:9b:e1:0d:15:7d:9a:d5:fe:8c:4a:21:12:94:0e:
         72:cb:09:d6:78:22:c3:ff:68:cf:e5:29:bb:66:ba:91:47:83:
         d2:fa:af:46:3e:ed:ee:ac:14:4a:fd:1d:d1:04:7a:d9:51:2d:
         80:ac:46:a2:5e:36:fc:34:59:8a:0d:a1:e3:c4:05:bc:8f:1b:
         60:91:d6:e1:9c:a8:4c:5f:45:d7:ed:90:d6:d3:8d:e3:d2:71:
         aa:3d:f6:a6:37:44:23:be:6a:ca:e0:c3:4c:73:ca:f5:e3:bd:
         27:2d:62:19:fc:83:52:9b:b0:41:78:e2:83:4a:b8:92:ca:83:
         67:a2:e0:50:2b:1d:61:bd:cc:4e:b5:dc:62:16:49:f3:ad:58:
         d8:2b:56:64:2d:01:4a:82:9f:6b:3d:26:6f:6c:27:55:4b:80:
         ae:2e:01:cf:22:54:d8:21:0b:f3:f6:2a:52:94:25:a2:58:f6:
         70:a4:ec:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:15:19 2025 by rpki-client