Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft
File:                     IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft (raw, json)
Hash identifier:          TlIkfdyWUzKefR8r+q0vxROLzH+cKKV+tU7ZgSuQu54=
Subject key identifier:   11:A1:00:68:6B:AD:9C:43:2B:1F:1F:83:0D:0B:BA:5D:B1:79:8A:30
Authority key identifier: 23:22:6D:55:9F:ED:C5:0D:7A:55:C0:6E:F4:8F:D3:A2:D2:D3:FD:F4
Certificate issuer:       /CN=23226d559fedc50d7a55c06ef48fd3a2d2d3fdf4
Certificate serial:       019645FB90B7B3F1C7F38B24F22944362C8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IyJtVZ_txQ16VcBu9I_TotLT_fQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft
Manifest number:          042A
Signing time:             Thu 17 Apr 2025 23:00:36 +0000
Manifest this update:     Thu 17 Apr 2025 23:00:36 +0000
Manifest next update:     Fri 18 Apr 2025 23:00:36 +0000
Files and hashes:         1: IyJtVZ_txQ16VcBu9I_TotLT_fQ.crl (hash: 4YoSi6RpWHD3/lsnMJZcO7oU5Uc2BDsgFoGVMfuICis=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IyJtVZ_txQ16VcBu9I_TotLT_fQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:fb:90:b7:b3:f1:c7:f3:8b:24:f2:29:44:36:2c:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23226d559fedc50d7a55c06ef48fd3a2d2d3fdf4
        Validity
            Not Before: Apr 17 23:00:36 2025 GMT
            Not After : Apr 18 23:00:36 2025 GMT
        Subject: CN=11a100686bad9c432b1f1f830d0bba5db1798a30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:17:c3:95:28:0b:86:0a:b8:d2:49:1d:81:ab:
                    1b:0c:bd:42:c9:91:93:9f:04:7f:54:27:36:85:0f:
                    3f:5a:78:c7:9c:d1:30:1a:22:02:12:c6:70:50:c2:
                    13:5e:46:5b:16:f9:80:4b:e5:93:24:d6:dc:95:d0:
                    de:03:19:30:9b:9f:05:67:3c:5a:ce:d7:62:3c:90:
                    77:bb:f8:59:9f:14:8c:86:a7:de:64:14:e1:ee:83:
                    78:e0:ac:20:7a:60:d2:15:d8:fb:78:1a:82:98:01:
                    c7:e1:d8:26:c5:d3:e6:82:0b:28:c6:c9:e7:47:0e:
                    c4:8e:80:8f:8a:6d:d2:96:98:05:11:38:ea:20:f2:
                    81:5a:b5:8b:0d:29:75:68:ec:51:92:3e:55:90:46:
                    a8:6f:c7:5d:8c:60:d2:cc:5b:d1:b9:9e:e0:b3:6f:
                    ed:59:14:d3:08:53:aa:ac:72:37:f6:e9:08:b6:97:
                    31:94:dc:64:57:08:d2:37:56:f8:33:8b:e2:37:c5:
                    99:88:1f:2d:b0:93:fd:fc:1a:26:51:88:31:fa:4b:
                    2a:56:f6:71:28:61:7e:d9:dc:47:5b:00:34:f8:ef:
                    25:08:de:5c:e9:54:c1:78:a4:a0:bf:f0:19:a3:69:
                    50:71:9c:b1:80:ca:dd:86:ce:fa:c4:06:7e:f9:e6:
                    a8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A1:00:68:6B:AD:9C:43:2B:1F:1F:83:0D:0B:BA:5D:B1:79:8A:30
            X509v3 Authority Key Identifier:
                keyid:23:22:6D:55:9F:ED:C5:0D:7A:55:C0:6E:F4:8F:D3:A2:D2:D3:FD:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyJtVZ_txQ16VcBu9I_TotLT_fQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:1e:35:a2:38:f6:fd:6c:37:c3:2e:ad:ec:0d:1c:c9:cc:fb:
         24:c0:da:b8:f1:99:bc:d1:2d:bf:41:1e:42:fb:66:dc:4e:5f:
         0d:d2:78:26:27:22:b2:5c:e1:c1:81:8d:3d:b3:33:24:3b:91:
         ae:82:26:1a:d2:2d:31:c9:96:99:e0:34:76:e9:68:8c:8d:77:
         61:51:20:73:3b:73:fb:2f:5b:7b:1a:8a:25:ac:64:ae:95:6e:
         fb:e2:22:d3:cc:eb:4f:05:8f:01:47:b1:c6:02:c8:0e:ea:20:
         58:12:50:5b:ba:95:58:db:cc:27:86:4f:dc:65:1f:b7:fa:1b:
         e9:44:50:b1:ab:f6:a6:7d:46:a1:72:41:18:af:94:44:12:44:
         c3:60:66:56:55:ae:6c:7b:6e:09:0c:b1:a2:c8:de:df:a2:b1:
         85:5d:40:3f:23:6f:c0:09:a6:51:be:c8:d2:36:0f:41:2f:2b:
         a5:3d:27:74:b8:89:f0:30:d0:56:1f:2c:12:5a:cf:fb:bd:5b:
         fd:ce:41:84:ba:a5:f8:1d:39:ca:35:34:7a:b1:88:98:83:51:
         76:31:db:70:36:b8:c8:34:80:49:92:41:e7:54:38:8f:2e:f7:
         92:39:41:cf:b6:ef:3b:26:c4:e7:28:3c:2a:c7:a4:89:8d:f3:
         91:97:ee:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:40:19 2025 by rpki-client