Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3155bf-c881-4396-aefd-236ba9ee4056/1/Ivlg_e70BzVat4Nty2uQJvRCk-o.mft
File:                     Ivlg_e70BzVat4Nty2uQJvRCk-o.mft (raw, json)
Hash identifier:          of97HU5d9ymgP5kO9ErkwS8krcsyseHXguWfZm38Dds=
Subject key identifier:   19:E1:8E:BE:76:1B:B0:3A:8C:C9:73:70:E9:25:06:CD:06:2B:CC:58
Authority key identifier: 22:F9:60:FD:EE:F4:07:35:5A:B7:83:6D:CB:6B:90:26:F4:42:93:EA
Certificate issuer:       /CN=22f960fdeef407355ab7836dcb6b9026f44293ea
Certificate serial:       0196451FE73F86589B429E96811CAEAE3816
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ivlg_e70BzVat4Nty2uQJvRCk-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/3155bf-c881-4396-aefd-236ba9ee4056/1/Ivlg_e70BzVat4Nty2uQJvRCk-o.mft
Manifest number:          085E
Signing time:             Thu 17 Apr 2025 19:00:40 +0000
Manifest this update:     Thu 17 Apr 2025 19:00:40 +0000
Manifest next update:     Fri 18 Apr 2025 19:00:40 +0000
Files and hashes:         1: 294sEvFCPZcpapErUdpT5vNPLKY.roa (hash: K9zx63RQ0E6LnQ5ZYnogejedGoy5yi5fVZmpZbGiuTU=)
                          2: Ivlg_e70BzVat4Nty2uQJvRCk-o.crl (hash: +e4H4/NI/b2f/w5g00BIsTMiB1N39C0P0kv6z2yMQIY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/3155bf-c881-4396-aefd-236ba9ee4056/1/Ivlg_e70BzVat4Nty2uQJvRCk-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/3155bf-c881-4396-aefd-236ba9ee4056/1/Ivlg_e70BzVat4Nty2uQJvRCk-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ivlg_e70BzVat4Nty2uQJvRCk-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:1f:e7:3f:86:58:9b:42:9e:96:81:1c:ae:ae:38:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f960fdeef407355ab7836dcb6b9026f44293ea
        Validity
            Not Before: Apr 17 19:00:40 2025 GMT
            Not After : Apr 18 19:00:40 2025 GMT
        Subject: CN=19e18ebe761bb03a8cc97370e92506cd062bcc58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e5:55:52:9e:f7:d7:a1:1c:80:6b:ae:f4:aa:
                    18:64:4b:35:8b:14:5f:31:3e:4b:88:82:8e:50:75:
                    43:22:97:a8:7b:fc:58:1b:c1:c1:58:64:8e:89:02:
                    4f:f0:62:6c:d8:85:9e:a8:14:ca:1e:cc:59:c7:c0:
                    e4:c3:e2:85:82:50:56:ce:1c:22:27:7b:a9:a9:97:
                    67:3c:37:e8:50:ee:80:8b:e8:87:f5:56:05:0d:98:
                    f4:50:2a:ee:96:46:da:43:42:93:66:a2:60:89:3b:
                    cf:af:72:8d:96:25:79:c0:b0:dd:e2:89:0f:c3:42:
                    7e:95:ae:12:46:84:95:9e:4a:01:1d:a4:0e:6e:37:
                    8f:d4:e0:98:e8:bb:43:22:76:31:65:9a:74:5a:a3:
                    69:fd:4d:ee:5e:fd:79:39:cb:d2:df:5e:07:28:77:
                    14:71:7e:46:e6:e0:e0:ee:94:14:5d:97:60:a1:05:
                    5c:4f:3c:8d:15:f9:63:67:c9:6d:68:47:b4:f3:48:
                    8e:13:13:2c:9f:64:a0:8f:ef:0f:01:34:6f:ad:50:
                    67:d2:0e:96:9d:7f:f4:b7:53:50:41:ec:19:37:97:
                    89:b5:cf:53:63:90:d1:24:5c:31:cc:f9:47:99:ba:
                    da:34:dd:e5:9b:b4:bf:4a:bb:e9:5e:0f:0c:8b:81:
                    1f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E1:8E:BE:76:1B:B0:3A:8C:C9:73:70:E9:25:06:CD:06:2B:CC:58
            X509v3 Authority Key Identifier:
                keyid:22:F9:60:FD:EE:F4:07:35:5A:B7:83:6D:CB:6B:90:26:F4:42:93:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ivlg_e70BzVat4Nty2uQJvRCk-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3155bf-c881-4396-aefd-236ba9ee4056/1/Ivlg_e70BzVat4Nty2uQJvRCk-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3155bf-c881-4396-aefd-236ba9ee4056/1/Ivlg_e70BzVat4Nty2uQJvRCk-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:a3:dc:cc:fe:11:e0:16:86:e1:37:d5:db:31:25:fe:e9:c9:
         29:dc:89:31:12:af:0a:1c:e4:ea:bf:b3:f9:13:e9:5a:d6:eb:
         0c:dd:66:26:5c:a0:38:9c:b8:64:21:f7:b6:4e:aa:94:f5:a1:
         14:e6:d0:27:59:a1:b5:27:39:7c:c3:c4:f6:43:6f:24:54:75:
         9e:dc:cb:50:2d:8c:15:31:19:e1:7a:61:7e:d1:1c:ab:10:73:
         d0:d7:63:ee:0b:20:b8:dd:04:7a:16:80:63:7e:f9:d3:63:74:
         ab:03:fd:9e:e6:c9:7f:70:28:aa:72:ef:13:90:eb:a5:32:94:
         1b:b2:bc:f5:ba:15:16:c5:56:b1:15:fb:4b:6f:b1:f4:1d:31:
         58:9d:83:51:47:e7:6d:69:e5:2b:69:5d:8f:c0:76:a6:a9:79:
         0c:53:c3:8a:43:fb:33:8f:85:db:3c:c6:c9:94:c6:7b:d5:3f:
         47:39:87:35:72:97:22:e2:17:ce:f7:07:40:6b:3e:1e:b3:9c:
         78:62:60:09:32:ed:2a:f9:cf:41:70:d9:a8:e1:5e:22:73:96:
         b0:07:dc:6e:51:4e:d2:cf:18:fc:52:3c:b2:58:8a:6e:07:4e:
         47:58:84:7c:7b:fc:82:16:ba:5e:48:ab:5f:f8:7d:fb:6c:08:
         48:ca:79:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:50:44 2025 by rpki-client