Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
File:                     iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft (raw, json)
Hash identifier:          GcYwEDJHTnGD6nAA/hIjzoRuQokVg1lGuwkCopigBOg=
Subject key identifier:   E0:A7:48:7F:91:8A:F6:ED:6A:69:76:2F:76:A4:A2:B6:52:3F:9A:A8
Authority key identifier: 88:88:81:8C:4E:CF:1D:5D:EB:4E:A9:36:67:47:0A:7A:11:4D:9A:07
Certificate issuer:       /CN=8888818c4ecf1d5deb4ea93667470a7a114d9a07
Certificate serial:       0197488C2DCF5AD1D43756B95DBEE21895E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
Manifest number:          150F
Signing time:             Sat 07 Jun 2025 04:00:35 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:35 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:35 +0000
Files and hashes:         1: KYtWtlgqE5B9oPVpa5XtMWrTy2s.roa (hash: S7OWPBmD/em3aOMLq183MKVqtbhQIKvOUTkiCEiDOio=)
                          2: iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl (hash: Su+4h9CyqiGRMcz7vvjyoSoJOUzn4Mthecd5WzPY2dg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:2d:cf:5a:d1:d4:37:56:b9:5d:be:e2:18:95:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8888818c4ecf1d5deb4ea93667470a7a114d9a07
        Validity
            Not Before: Jun  7 04:00:35 2025 GMT
            Not After : Jun  8 04:00:35 2025 GMT
        Subject: CN=e0a7487f918af6ed6a69762f76a4a2b6523f9aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:08:fc:fe:6b:e1:3d:36:53:0b:bd:20:78:8f:
                    eb:f1:e6:05:c2:a0:88:bd:65:b4:d9:73:b3:3c:72:
                    9f:72:b5:0d:37:87:d7:17:32:7a:ec:8f:85:8c:43:
                    17:d6:b2:ec:f9:a6:32:2d:37:68:36:9c:52:99:f9:
                    c9:4d:cc:eb:7e:af:75:01:0c:90:c0:9b:25:34:a0:
                    cb:16:a3:d8:3f:44:ce:31:ec:37:63:c6:21:00:e7:
                    8c:0d:b5:45:9b:33:c2:e4:e5:4b:31:ef:63:6d:ab:
                    3b:f8:f7:11:ff:33:a7:09:82:c5:08:a5:e8:4a:67:
                    71:2e:0a:c2:55:7e:5d:c9:63:42:c7:b7:a8:b5:af:
                    4b:67:d1:cb:86:3a:fc:aa:0b:6a:76:00:e6:b3:3c:
                    95:29:d0:94:7f:e8:04:32:45:99:34:fd:a5:f4:4d:
                    cd:de:bf:29:81:d1:30:07:b0:a3:d3:1e:35:20:6c:
                    a9:75:96:33:21:d6:81:19:f6:15:1a:05:13:65:18:
                    8c:8a:29:fe:e2:d0:96:3f:33:74:52:2d:c9:21:27:
                    e9:39:53:ac:ca:a1:23:2f:12:b6:82:79:68:7b:f4:
                    a8:e6:43:e4:a6:c4:d7:1b:aa:b9:87:03:cf:6f:7d:
                    30:ed:d0:f5:6b:a2:27:02:e7:d2:b7:87:9c:8f:77:
                    03:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A7:48:7F:91:8A:F6:ED:6A:69:76:2F:76:A4:A2:B6:52:3F:9A:A8
            X509v3 Authority Key Identifier:
                keyid:88:88:81:8C:4E:CF:1D:5D:EB:4E:A9:36:67:47:0A:7A:11:4D:9A:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:e0:5f:96:c6:cb:34:45:4e:4a:99:f7:7b:75:55:c7:32:a5:
         0c:14:ca:24:0b:a2:43:65:28:b2:da:34:03:f9:18:4f:ab:7b:
         41:fb:10:8d:f3:a7:f5:1d:92:d0:36:24:92:67:32:98:9f:a5:
         b5:25:34:ab:ac:ea:ee:38:9d:ca:a4:50:10:17:20:56:80:6e:
         4a:12:dc:17:91:bb:96:4b:a1:fc:82:31:0c:12:fb:53:ef:e7:
         ba:2c:c5:6d:b9:0f:80:d5:9b:53:92:1d:c7:f5:cb:58:3a:82:
         9e:0a:e3:89:75:e7:f9:92:e1:44:60:d3:e3:d9:07:7b:4c:33:
         3d:6a:45:76:57:42:4c:af:49:cb:98:50:ba:db:e0:0f:05:4c:
         df:59:01:f5:24:d6:a0:ec:de:d2:e5:f0:92:cc:9b:71:a7:ea:
         e6:a7:ed:4e:a9:0d:83:95:37:ce:9e:3a:d3:d4:1e:1c:9b:1e:
         52:4a:62:30:10:d7:2f:6d:03:d7:70:98:d3:d1:dd:68:54:b8:
         7e:61:11:91:9d:04:e5:a6:05:1f:44:65:5b:a5:5b:b6:e4:cf:
         eb:52:5b:ef:76:62:f4:cb:a0:a5:90:4c:e9:17:02:75:1f:59:
         4c:3e:6d:35:dd:27:07:c0:53:de:21:ee:78:01:c6:11:17:c4:
         46:0a:04:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:02:38 2025 by rpki-client