Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
File:                     iBDn48kXXrmP94FdMHb7Aplqc0o.mft (raw, json)
Hash identifier:          mxBNqZloUXcFdFXtzOvlld31PSys3AonAkaRjYKl3fk=
Subject key identifier:   83:F4:47:13:35:FC:09:0D:4B:0E:32:41:E8:EA:E1:6F:75:2C:03:31
Authority key identifier: 88:10:E7:E3:C9:17:5E:B9:8F:F7:81:5D:30:76:FB:02:99:6A:73:4A
Certificate issuer:       /CN=8810e7e3c9175eb98ff7815d3076fb02996a734a
Certificate serial:       01975DCAFCD18F270629B257F872D4269D21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
Manifest number:          0194
Signing time:             Wed 11 Jun 2025 07:01:13 +0000
Manifest this update:     Wed 11 Jun 2025 07:01:13 +0000
Manifest next update:     Thu 12 Jun 2025 07:01:13 +0000
Files and hashes:         1: 98GklQIoHkHkn0CoFh_6Dud54bo.roa (hash: M+9C1iQsySZxvMjL702thfggxvSIoF6cEK1D5Lq/ro4=)
                          2: iBDn48kXXrmP94FdMHb7Aplqc0o.crl (hash: BWqDukwh+xOYv4izSmRK7AVTWGSRhL6xHBBbbbEBi3w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 07:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5d:ca:fc:d1:8f:27:06:29:b2:57:f8:72:d4:26:9d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8810e7e3c9175eb98ff7815d3076fb02996a734a
        Validity
            Not Before: Jun 11 07:01:13 2025 GMT
            Not After : Jun 12 07:01:13 2025 GMT
        Subject: CN=83f4471335fc090d4b0e3241e8eae16f752c0331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9f:5d:7d:d2:bf:20:a5:4a:87:f4:1f:77:23:
                    4b:ce:22:91:e6:01:64:81:4e:27:6a:46:07:c7:37:
                    7a:f4:46:ee:5d:d6:d7:7e:57:e1:af:e6:79:d5:99:
                    08:32:b9:47:9e:71:88:33:4c:22:f5:3d:02:fb:59:
                    83:dc:d9:1c:40:35:a4:76:0d:ce:ba:d7:ed:b2:c8:
                    b0:02:4a:a6:76:6a:2f:ad:54:e2:b6:6e:40:86:ec:
                    be:24:cc:16:ba:15:91:a5:35:db:a2:12:2b:1b:14:
                    5a:cd:0e:ec:ce:c4:69:f4:3e:fe:cd:de:09:a4:08:
                    d9:93:3b:20:69:88:ed:39:06:fc:e1:d3:db:9b:f5:
                    4d:a8:83:f0:55:71:04:44:ee:0b:5e:94:03:a6:b8:
                    9e:a1:60:fc:c2:17:10:7d:bb:a4:af:a6:59:b0:56:
                    8a:53:3d:3b:f4:a2:77:dd:ba:f4:12:e1:3e:a8:72:
                    40:15:44:b8:30:fc:cc:68:4c:1f:7a:b4:73:1e:38:
                    67:dd:d6:4f:9a:34:7a:bf:19:4a:9d:5c:86:b4:5d:
                    9b:19:bb:6d:e4:d9:11:40:0a:14:ef:74:45:6d:a2:
                    1f:00:ce:c9:b6:75:90:53:5c:15:52:5a:27:b5:83:
                    0f:95:ba:85:33:b1:e3:5b:a8:7a:4f:a9:d3:bc:d4:
                    c6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F4:47:13:35:FC:09:0D:4B:0E:32:41:E8:EA:E1:6F:75:2C:03:31
            X509v3 Authority Key Identifier:
                keyid:88:10:E7:E3:C9:17:5E:B9:8F:F7:81:5D:30:76:FB:02:99:6A:73:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:c1:a6:38:61:cb:1c:9f:e0:da:6c:e0:0c:d6:31:54:49:93:
         45:81:1e:e7:d3:e6:05:87:4a:55:bb:08:7e:ad:22:7c:c1:0c:
         a7:df:da:26:54:94:8c:e5:de:95:b2:66:90:f7:22:f6:62:20:
         cd:fd:33:63:15:2d:2f:d6:90:ac:a6:04:45:d7:7e:02:60:f6:
         b3:20:9f:84:8d:e2:f0:c2:9f:59:59:34:30:12:08:09:1b:36:
         61:b6:ff:20:fd:0b:fd:5f:e2:24:e9:78:ce:82:ab:19:85:70:
         9e:05:7b:fc:3d:f9:6b:3c:5c:0c:23:2f:4e:4a:3d:43:81:61:
         c9:1a:d0:19:30:60:da:51:df:8b:e3:63:55:03:7c:28:d1:a1:
         1c:83:51:50:c4:b4:e5:97:53:6f:9d:00:f1:2e:4d:73:e6:c4:
         cc:03:99:85:5e:84:b6:75:76:b6:75:f6:fe:8c:6b:2f:71:cb:
         57:94:a3:9e:96:fd:08:0a:ac:e2:58:d3:c2:4f:42:5c:17:07:
         b5:f2:41:b9:a5:96:5e:aa:35:7d:c0:4c:cd:1d:d7:dd:6d:27:
         10:48:1d:63:bb:de:d2:ef:f7:e1:4c:3b:fa:e5:7c:42:97:06:
         dd:91:99:4a:20:7f:d2:92:89:f0:6e:9e:ca:32:b0:57:d3:5d:
         82:9b:bd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 12:11:11 2025 by rpki-client