Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.mft
File:                     IBBUhPGH8gh9Egytlx1oLbMVmWU.mft (raw, json)
Hash identifier:          ad47dmtADBdBHavj6V6HfQfmevC4ggxR5F4o1Sum5MY=
Subject key identifier:   59:7E:65:4E:FB:AE:EA:C8:10:D6:AB:F2:97:61:89:CE:FD:DE:5B:F7
Authority key identifier: 20:10:54:84:F1:87:F2:08:7D:12:0C:AD:97:1D:68:2D:B3:15:99:65
Certificate issuer:       /CN=20105484f187f2087d120cad971d682db3159965
Certificate serial:       01963F1DE9089BF5926BEE2188B67BC7C6C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IBBUhPGH8gh9Egytlx1oLbMVmWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.mft
Manifest number:          95
Signing time:             Wed 16 Apr 2025 15:00:46 +0000
Manifest this update:     Wed 16 Apr 2025 15:00:46 +0000
Manifest next update:     Thu 17 Apr 2025 15:00:46 +0000
Files and hashes:         1: IBBUhPGH8gh9Egytlx1oLbMVmWU.crl (hash: SMCLWHZ4tdoLrA/EspM74bEHrsBGvaZZHnw5WlW6mUM=)
                          2: Rh0IEx7nLGjWZjM91m5L9ROERFI.roa (hash: ueZbxYCJshLwHxcAfnLZtqfa1hKKEGpxZF9hNshflTs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IBBUhPGH8gh9Egytlx1oLbMVmWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:1d:e9:08:9b:f5:92:6b:ee:21:88:b6:7b:c7:c6:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20105484f187f2087d120cad971d682db3159965
        Validity
            Not Before: Apr 16 15:00:46 2025 GMT
            Not After : Apr 17 15:00:46 2025 GMT
        Subject: CN=597e654efbaeeac810d6abf2976189cefdde5bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:41:31:5e:31:b9:e0:3c:97:96:34:e6:53:7b:
                    12:6b:f9:7e:dc:f4:28:ae:3d:b9:2b:a7:ba:9f:f0:
                    68:4d:67:64:3b:a1:97:da:c7:36:d6:2a:0c:04:54:
                    bb:37:b3:35:1c:33:2d:69:29:69:ee:7f:28:cb:7c:
                    84:df:54:0c:b7:1f:73:7e:3b:f4:9d:bf:48:75:b2:
                    83:32:20:be:0c:d8:cd:8f:91:37:ee:0e:dd:08:5f:
                    78:45:d5:98:07:8e:86:e8:04:6f:2b:94:4f:74:a7:
                    e6:83:7f:c1:4c:e6:ef:ce:a5:5e:f9:87:22:7b:3b:
                    26:dd:b9:47:11:6c:2a:3f:65:79:a8:62:b2:ac:30:
                    bc:c4:0e:46:0e:ca:77:f0:c7:ec:83:46:1d:94:24:
                    49:d7:2e:30:7d:38:cc:52:7f:8d:72:c5:18:2a:27:
                    11:f3:e1:77:60:91:24:75:f8:4c:e4:94:68:2f:fd:
                    e5:dd:a0:9e:e4:e3:72:ef:73:56:90:8b:70:da:98:
                    ae:15:1b:03:09:16:22:53:94:8a:3c:07:4f:32:c5:
                    f7:31:f1:2a:0b:48:3e:a3:68:3c:bc:35:4b:ab:57:
                    75:fb:0f:61:e1:52:bc:ec:36:54:bc:df:fe:c4:23:
                    ce:6a:81:bb:5f:48:ab:53:f1:f5:2a:39:45:2b:3c:
                    61:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:7E:65:4E:FB:AE:EA:C8:10:D6:AB:F2:97:61:89:CE:FD:DE:5B:F7
            X509v3 Authority Key Identifier:
                keyid:20:10:54:84:F1:87:F2:08:7D:12:0C:AD:97:1D:68:2D:B3:15:99:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBBUhPGH8gh9Egytlx1oLbMVmWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:66:70:f7:ca:91:fa:7d:38:9b:94:48:17:dc:bf:9f:41:09:
         f3:ef:9a:c8:9f:50:26:63:8d:50:71:9b:fc:f3:5f:02:9b:8a:
         50:0e:d8:68:04:ec:0d:b9:11:59:0f:93:5e:8e:7f:55:2c:a9:
         a0:1d:6f:e4:85:76:e8:8d:bd:df:68:75:67:36:2d:23:e9:90:
         e3:08:12:b6:f4:82:1e:8d:ad:a5:fd:cd:11:f0:b7:18:d9:e7:
         dd:27:18:00:ea:2a:d5:31:d2:0b:37:ab:27:98:83:05:37:8c:
         33:5f:03:b7:a1:39:41:96:30:d3:c2:a8:1f:ea:56:1a:b7:c4:
         ef:aa:b6:a5:00:15:d0:25:fe:14:98:74:f4:79:29:af:d0:15:
         46:39:08:fc:c8:a2:73:4d:a7:6a:58:7e:30:bd:f2:f7:53:e4:
         31:5c:1f:66:e7:01:84:93:3e:93:58:cb:f2:24:6c:8b:ad:d0:
         09:a0:47:bc:1d:08:35:20:f1:1f:13:bb:9e:5e:27:75:2c:20:
         f8:5c:aa:8a:6c:fe:d8:3b:bb:0a:b3:a1:56:43:ff:61:65:a2:
         f1:70:98:1f:0a:85:be:3e:e9:88:f5:4c:2d:e3:33:a6:2c:69:
         f1:b5:69:59:ac:8a:eb:89:70:5e:45:c0:e8:aa:ae:9e:1a:92:
         58:c2:d2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:36:58 2025 by rpki-client