Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft
File:                     Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft (raw, json)
Hash identifier:          t7nPUDtfEzyZ/U78jR8kF8nsfJoRAX90df8dWQxv0u0=
Subject key identifier:   26:0C:03:CC:E5:9A:EC:3B:58:E3:FA:DC:1B:BF:66:D2:4E:DF:A4:47
Authority key identifier: 23:2B:79:8F:F7:6E:8D:5C:EC:5B:A4:7F:7B:E7:83:29:83:DB:33:35
Certificate issuer:       /CN=232b798ff76e8d5cec5ba47f7be7832983db3335
Certificate serial:       01964F35DE36F504C9103FC714BE5152335E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft
Manifest number:          0472
Signing time:             Sat 19 Apr 2025 18:00:52 +0000
Manifest this update:     Sat 19 Apr 2025 18:00:52 +0000
Manifest next update:     Sun 20 Apr 2025 18:00:52 +0000
Files and hashes:         1: Iyt5j_dujVzsW6R_e-eDKYPbMzU.crl (hash: JapE5CcKfSF3LtX/u5A1a9COcVxXHI0dJoBc3NFMEYc=)
                          2: jSw8bTH4hTcqpfa7bHW8ZyPkknU.roa (hash: ABUXiiTkIZUHgQ3xysDCG98yDMZyrM6LOi10VqvVwCc=)
                          3: zC-XVtksfypCOwDmUdUeVllfLQI.roa (hash: q1lLlXPM1B2OuaAxpSk6zZYVH0rc6yp93NQ9Af6bSzU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:35:de:36:f5:04:c9:10:3f:c7:14:be:51:52:33:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=232b798ff76e8d5cec5ba47f7be7832983db3335
        Validity
            Not Before: Apr 19 18:00:52 2025 GMT
            Not After : Apr 20 18:00:52 2025 GMT
        Subject: CN=260c03cce59aec3b58e3fadc1bbf66d24edfa447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:22:3e:62:d4:7c:a1:1b:1d:cd:6f:3e:c7:49:
                    eb:c3:48:9b:84:5e:48:c7:61:c2:e6:4f:de:0b:bd:
                    af:9c:1e:06:f0:f2:23:27:54:11:98:ab:a0:33:df:
                    b6:40:10:1e:27:1b:5b:80:ad:b8:f7:ed:8e:b8:bf:
                    7c:6f:33:90:ed:bd:1e:17:bc:e9:65:97:ea:21:5b:
                    9c:39:1c:a9:8e:a1:dc:ba:a0:70:ff:aa:38:76:e8:
                    c6:b8:cb:d1:c1:66:f0:a1:78:d3:07:1a:3a:f6:56:
                    b9:5e:4e:3c:e0:94:30:bb:93:df:7e:fa:ca:34:36:
                    6f:49:f9:29:de:69:ac:16:4d:27:d0:04:9d:b5:6f:
                    16:82:83:1b:ba:b5:c2:f3:df:ef:ec:aa:d7:e8:a9:
                    ba:51:6f:af:ce:a3:7a:fb:68:06:47:f6:06:7a:de:
                    0e:cb:ee:f3:a7:bd:44:19:ab:0f:f5:bd:e7:4b:b6:
                    2a:1c:47:50:fa:8d:1f:20:26:06:e1:2e:b8:b1:b6:
                    62:42:22:bb:05:9e:53:c7:5a:26:42:82:46:b5:fe:
                    be:03:a0:08:be:34:36:49:c6:c0:af:f4:09:bf:0f:
                    91:10:83:70:91:dd:4a:ed:e5:31:50:e0:eb:f1:0e:
                    e8:71:48:57:4e:a7:4b:e6:53:20:ea:17:e5:7f:a5:
                    f3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:0C:03:CC:E5:9A:EC:3B:58:E3:FA:DC:1B:BF:66:D2:4E:DF:A4:47
            X509v3 Authority Key Identifier:
                keyid:23:2B:79:8F:F7:6E:8D:5C:EC:5B:A4:7F:7B:E7:83:29:83:DB:33:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:32:32:51:be:f2:d3:ed:c7:3e:08:1d:08:67:a0:28:49:0b:
         85:f7:42:a0:de:d8:74:63:5d:3c:22:0b:9e:2a:3e:27:0a:d5:
         ab:da:de:8c:51:81:f9:61:8a:87:44:8e:97:0e:70:52:f2:d8:
         8f:51:3d:9d:c5:cd:74:e1:87:81:3f:38:bd:42:c5:6c:38:66:
         7e:99:8d:30:7a:50:c1:8c:a2:61:c3:6c:a4:e3:18:3b:51:83:
         40:a4:12:04:dc:dd:de:9a:f5:5a:98:6e:75:e5:d1:ac:c1:a2:
         3e:30:9c:e9:35:12:ff:b0:a3:2c:ba:b8:8b:df:68:c8:42:70:
         a4:25:48:15:dc:47:c6:d2:f3:df:23:ea:f7:9a:e0:a3:8e:23:
         d6:dd:b6:d9:cc:43:32:e0:eb:81:c4:89:37:c3:6f:9d:e8:21:
         18:36:74:bf:16:ab:29:e7:3b:a0:0e:1a:5d:c4:92:ed:73:23:
         22:31:70:7b:70:2f:4a:c8:81:b8:e6:3c:58:cb:9f:6c:c6:d0:
         20:8d:10:fc:6d:9b:fd:22:1b:5f:a3:87:cc:13:af:61:a1:fc:
         19:dd:db:8a:78:64:c9:33:88:c3:99:9b:05:8f:74:a0:76:84:
         33:08:ad:0f:7a:97:7a:49:64:c4:d3:06:ba:27:b6:8c:6a:e1:
         3e:c1:5a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:46:48 2025 by rpki-client