Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
File:                     IlS8wDKT460OGaej_Rsc-9NMCZA.mft (raw, json)
Hash identifier:          SFYkUXfRaZyVaJ7N477JygIaLN1o6HeHXXsEa2oAMhI=
Subject key identifier:   40:BE:EF:0C:F5:67:C7:E9:A5:58:37:56:78:1A:02:F9:98:E1:D3:F3
Authority key identifier: 22:54:BC:C0:32:93:E3:AD:0E:19:A7:A3:FD:1B:1C:FB:D3:4C:09:90
Certificate issuer:       /CN=2254bcc03293e3ad0e19a7a3fd1b1cfbd34c0990
Certificate serial:       01975B009557DC3F90B63ECEB1033278C934
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
Manifest number:          1327
Signing time:             Tue 10 Jun 2025 18:00:54 +0000
Manifest this update:     Tue 10 Jun 2025 18:00:54 +0000
Manifest next update:     Wed 11 Jun 2025 18:00:54 +0000
Files and hashes:         1: IlS8wDKT460OGaej_Rsc-9NMCZA.crl (hash: qi5U1DffB/suGh/uPZdTcmaVgKAkzvN5beBq99yp0uI=)
                          2: iYAJK9Z1vSabwblAeb2bbovBgWQ.roa (hash: UwR7QsThfF3C52K+v8ctdTEGP4PnZH+tKi6tWCBxuy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5b:00:95:57:dc:3f:90:b6:3e:ce:b1:03:32:78:c9:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2254bcc03293e3ad0e19a7a3fd1b1cfbd34c0990
        Validity
            Not Before: Jun 10 18:00:54 2025 GMT
            Not After : Jun 11 18:00:54 2025 GMT
        Subject: CN=40beef0cf567c7e9a5583756781a02f998e1d3f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:41:70:af:41:65:d2:87:7b:37:52:8b:43:2b:
                    18:82:5a:10:6e:8a:b0:aa:1e:bf:28:49:a2:59:6d:
                    dc:af:67:43:67:43:4e:1e:74:e1:dd:14:0f:ff:c0:
                    db:6a:aa:ae:66:e6:38:55:36:f2:a0:1a:70:47:42:
                    8b:0d:c0:16:ee:a4:e8:46:ac:0c:47:ed:e0:28:22:
                    96:18:a4:d2:2e:30:8c:4c:66:30:3f:07:35:8f:82:
                    2a:85:0e:75:3f:2e:cf:2b:10:5f:77:09:ec:2d:a9:
                    a7:c1:13:df:b3:74:e1:bb:58:77:0f:73:95:a6:65:
                    12:cf:b6:b8:b4:e8:a1:50:8d:db:50:3d:10:82:46:
                    73:dc:45:46:ee:1f:28:d0:56:5b:3b:57:aa:7c:6d:
                    dc:1c:f5:47:5c:36:8f:a0:fb:1e:f6:97:89:0c:e5:
                    70:5e:98:f0:a4:72:dd:9d:bd:5f:11:cd:54:37:9f:
                    16:28:73:8a:15:67:31:aa:ba:7e:85:2c:da:02:14:
                    b3:c0:13:3f:7c:3a:d5:91:a9:1d:6a:2e:3e:08:43:
                    cf:5e:de:1e:f4:7f:5e:73:a6:9d:8f:af:0c:57:61:
                    5b:20:57:4d:f7:f7:ca:1c:ab:16:3e:07:61:91:41:
                    57:67:3e:2f:a1:aa:9c:d0:69:77:9b:1e:56:94:49:
                    7a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:BE:EF:0C:F5:67:C7:E9:A5:58:37:56:78:1A:02:F9:98:E1:D3:F3
            X509v3 Authority Key Identifier:
                keyid:22:54:BC:C0:32:93:E3:AD:0E:19:A7:A3:FD:1B:1C:FB:D3:4C:09:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:ef:a7:2c:e0:2e:30:99:27:e2:51:02:cc:6b:58:4a:d6:b4:
         dd:53:bc:82:8c:c1:92:c2:0e:50:6c:e9:e7:de:ab:2a:96:75:
         b1:2e:b2:5b:25:96:5c:0b:d3:44:7c:7f:f2:51:b8:64:81:fe:
         5e:bc:bc:97:37:cb:99:85:17:30:34:36:85:b7:7f:5e:02:21:
         03:88:3b:8b:14:28:98:3b:af:43:61:ea:20:a8:16:c9:fc:1e:
         64:9a:1e:0f:eb:33:9a:95:86:33:c6:d7:b9:26:2f:54:b1:d2:
         ac:6d:e1:cc:75:11:56:2f:bd:3f:70:cd:4f:66:75:49:9f:be:
         9d:fe:53:ae:4a:39:d6:90:43:df:38:d5:b2:8b:ef:ca:60:27:
         96:1e:e6:d9:a8:38:18:18:21:41:b3:ae:9d:d7:11:02:ad:23:
         41:d2:05:96:d9:dc:2e:96:09:b6:d8:bb:dd:cd:4d:2f:70:62:
         70:af:8a:61:0a:10:cc:ba:39:9a:e0:0d:5f:88:9a:64:9a:55:
         36:0e:52:dc:71:9c:dc:ad:66:78:8b:f1:dd:cf:99:3f:c2:23:
         7a:73:f1:b0:92:2e:02:0f:92:58:9a:5d:f9:ce:1e:8c:07:48:
         09:15:f3:9d:03:98:92:6a:3d:c6:05:7b:94:03:05:0d:30:2e:
         bb:68:3c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 03:40:39 2025 by rpki-client