Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
File:                     iC-gGQL06MNH8hFuRkXaGmtOCWI.mft (raw, json)
Hash identifier:          hthC8oMwj5GPoqNxpbbntSvMP+Fi1pOsJW2LQMaAaHM=
Subject key identifier:   75:E3:A6:CB:FC:CA:2A:4B:F8:10:47:FD:A3:0E:72:21:56:B4:2F:25
Authority key identifier: 88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62
Certificate issuer:       /CN=882fa01902f4e8c347f2116e4645da1a6b4e0962
Certificate serial:       019746670E12E0624916439B84D4B2C75A59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
Manifest number:          133B
Signing time:             Fri 06 Jun 2025 18:00:48 +0000
Manifest this update:     Fri 06 Jun 2025 18:00:48 +0000
Manifest next update:     Sat 07 Jun 2025 18:00:48 +0000
Files and hashes:         1: ENS55DqOSCIACYKV88lsj2-9Qt0.roa (hash: DHbJggMAa2s1Y5SQ9CvEy1KweRl3G7QnT7Ch9hrVq4Y=)
                          2: Eh5XcZTOlwwjICZ8D5e6YinN9to.roa (hash: i3hRAhyXtajePfAySoecKpTzxKsfIbEuHCpoNygQqoo=)
                          3: iC-gGQL06MNH8hFuRkXaGmtOCWI.crl (hash: kJnE/jjXb6mPWuED0y08dZvG9VlDDWAC+HHpGQu1vZw=)
                          4: rqFZA9uVkdGBL0x6Ei0L9MHEurQ.roa (hash: L0IGvxVXiMO117M8Wm4IgrHBTq1xuhWbcFCP05D3zJk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:67:0e:12:e0:62:49:16:43:9b:84:d4:b2:c7:5a:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882fa01902f4e8c347f2116e4645da1a6b4e0962
        Validity
            Not Before: Jun  6 18:00:48 2025 GMT
            Not After : Jun  7 18:00:48 2025 GMT
        Subject: CN=75e3a6cbfcca2a4bf81047fda30e722156b42f25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:45:ed:49:6c:bb:4b:a1:7d:8f:59:52:f6:82:
                    71:11:a1:67:a6:18:42:43:aa:73:72:2b:83:f6:4c:
                    a6:96:02:86:3d:3f:eb:dc:ad:d9:e3:9a:cd:5c:25:
                    50:52:31:d2:02:15:74:b6:be:c5:9b:00:97:10:2f:
                    fb:5c:ed:11:85:b4:dd:04:8a:34:d4:d5:69:55:df:
                    23:4b:76:e5:fc:f6:ae:69:3d:53:56:ae:73:fe:ec:
                    47:eb:5a:e8:f8:f0:a6:60:bb:d4:21:06:06:27:51:
                    0d:96:04:57:7b:62:c1:ed:a4:91:18:b8:49:bc:39:
                    52:50:0d:d0:5b:18:80:58:61:82:58:62:4b:3d:68:
                    f9:28:55:42:b7:1f:92:89:bd:b8:27:e8:02:0d:97:
                    6a:ed:7a:36:fd:49:13:d6:93:cc:6d:af:c3:54:ff:
                    b3:99:00:59:52:d7:5e:73:f4:9b:4b:3b:9a:25:25:
                    ee:a1:8b:51:dc:04:97:a7:1e:94:c4:63:ae:f0:70:
                    4e:27:fb:0e:16:a0:ab:09:3d:d6:f4:fe:01:46:7a:
                    8d:4c:6b:16:d7:f3:33:49:6e:78:f8:97:0f:77:c8:
                    28:e9:fb:c7:41:20:ce:59:1a:8b:92:6f:d4:50:8a:
                    cc:ea:8a:3b:71:0f:52:a0:ba:7f:b4:53:e8:20:a5:
                    d7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E3:A6:CB:FC:CA:2A:4B:F8:10:47:FD:A3:0E:72:21:56:B4:2F:25
            X509v3 Authority Key Identifier:
                keyid:88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:81:b1:19:c8:7b:60:c3:b4:dc:90:0a:fd:7e:d9:c3:aa:89:
         cf:42:a3:ef:b6:a2:54:d9:c6:92:3c:99:39:0f:4a:da:08:a9:
         d0:95:43:6e:a3:dc:a9:82:94:09:2b:4b:d8:ab:e4:24:40:dd:
         a0:d1:6b:4c:ea:4d:3a:3f:83:82:df:5d:d5:67:23:db:46:7b:
         95:c2:2f:f3:5c:36:45:8e:30:82:61:b0:e5:a0:31:73:e5:df:
         80:86:ce:80:6b:a3:bd:ae:fc:08:90:7a:69:5f:ae:65:21:3f:
         18:53:49:53:52:c2:d9:7f:9c:b6:87:c1:af:c0:5a:f6:5b:f8:
         6b:d2:85:dd:4d:fe:c5:33:eb:b2:76:72:e3:0e:0d:d5:90:c1:
         d6:87:3b:da:7a:7c:97:14:d1:e5:4d:7e:fd:fe:3e:96:44:49:
         a2:0e:80:33:df:4c:db:de:e5:88:e6:4f:c6:d5:da:f7:08:c9:
         9c:99:c1:a4:cd:fb:ca:aa:5c:3e:05:48:31:1f:68:28:19:44:
         0f:8f:f5:44:42:b1:a7:95:f4:a0:ea:a3:11:4b:77:c7:36:82:
         f8:b8:96:2b:3e:f3:10:c6:60:81:71:49:1f:1e:ad:e4:d5:22:
         14:2f:22:31:a0:fc:11:e8:b4:f4:b7:fc:bb:27:4d:bc:44:a1:
         32:75:32:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:55:42 2025 by rpki-client