Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
File:                     m-Io1xO-xtTJq87C8Aoo6CH8J78.mft (raw, json)
Hash identifier:          ROMUzeFT9O6LGNSt/CIk6TKri8UAYQn7C+uOXVC4k3E=
Subject key identifier:   45:41:B9:3D:C9:A9:6C:F9:9C:5F:D2:75:53:64:36:12:FF:5E:8D:06
Authority key identifier: 9B:E2:28:D7:13:BE:C6:D4:C9:AB:CE:C2:F0:0A:28:E8:21:FC:27:BF
Certificate issuer:       /CN=9be228d713bec6d4c9abcec2f00a28e821fc27bf
Certificate serial:       01960FB3B71E1341927A6327F438464A2182
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
Manifest number:          146C
Signing time:             Mon 07 Apr 2025 10:02:37 +0000
Manifest this update:     Mon 07 Apr 2025 10:02:37 +0000
Manifest next update:     Tue 08 Apr 2025 10:02:37 +0000
Files and hashes:         1: kf3kJU5iO7T2BjxJ8agaP22As0g.roa (hash: 6biDLkp/WSQoW2uWUpFKCh5FtwQ9kjocP16pC2UTYzg=)
                          2: m-Io1xO-xtTJq87C8Aoo6CH8J78.crl (hash: IwlhI3FEsYezg4ND03QnPRVOF4tDBxmWnfcusADgor0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:0f:b3:b7:1e:13:41:92:7a:63:27:f4:38:46:4a:21:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be228d713bec6d4c9abcec2f00a28e821fc27bf
        Validity
            Not Before: Apr  7 10:02:37 2025 GMT
            Not After : Apr  8 10:02:37 2025 GMT
        Subject: CN=4541b93dc9a96cf99c5fd27553643612ff5e8d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2c:20:22:42:11:35:60:8b:5c:53:35:f1:90:
                    aa:91:c4:06:2a:a0:83:2e:ff:53:9a:5a:40:69:a9:
                    b2:85:25:e7:75:86:d8:e8:0e:da:60:88:e9:60:f3:
                    96:9e:23:35:2c:d1:64:fd:4c:1a:a5:6f:01:18:15:
                    09:3d:ed:44:13:00:32:70:9c:b1:df:af:a0:4d:d2:
                    2a:60:4d:49:d7:d4:11:10:6a:b4:73:6e:e5:72:97:
                    1d:bc:39:94:01:7d:8f:7c:de:e2:90:87:9a:cd:ae:
                    ec:59:c4:48:b7:d0:41:26:e5:b3:c3:b9:ec:87:59:
                    3a:45:85:25:47:93:22:3d:ab:d9:ff:17:1f:b8:bc:
                    46:fa:5f:f8:37:58:eb:0a:36:f9:2e:61:0a:5a:13:
                    77:20:04:82:34:17:23:2a:4f:0a:da:0d:ab:67:3f:
                    fb:b1:5e:d6:e6:22:13:d3:e1:f5:b8:c9:4c:00:d9:
                    76:1c:96:8f:38:f7:a2:f7:18:ab:06:e9:94:87:15:
                    fc:84:23:41:0d:ba:0f:d5:77:ea:2d:b7:33:ab:5b:
                    07:a7:2b:eb:3d:40:fd:33:9c:e2:f2:dc:86:85:01:
                    f7:45:ee:e6:a2:25:36:8f:3b:b3:e2:ee:d8:93:35:
                    7e:f9:e1:e0:bd:5b:3c:53:6e:97:3c:17:76:ac:aa:
                    f9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:41:B9:3D:C9:A9:6C:F9:9C:5F:D2:75:53:64:36:12:FF:5E:8D:06
            X509v3 Authority Key Identifier:
                keyid:9B:E2:28:D7:13:BE:C6:D4:C9:AB:CE:C2:F0:0A:28:E8:21:FC:27:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:99:5b:ff:ad:bf:40:d5:41:fa:22:f2:95:55:79:d0:65:77:
         a9:10:e8:90:32:94:07:29:30:03:c9:d6:8c:c4:01:6d:7f:dc:
         09:89:1b:6d:6c:a3:3c:da:bc:a8:31:aa:d7:d2:7a:ce:3c:ab:
         39:e5:23:b2:35:bd:51:84:0d:7e:11:93:0e:13:f8:c2:ca:30:
         9c:5f:56:2d:2c:4d:e7:f5:4f:56:57:e7:f1:7b:6f:bd:3d:8e:
         bd:e3:b0:fe:66:d8:f3:8c:2b:01:b5:a0:74:f7:4f:08:44:3d:
         22:74:d9:af:3d:e2:51:db:fd:61:4d:bc:93:93:f5:04:4f:e4:
         b1:84:b4:13:1e:4d:1e:67:34:d9:23:89:08:19:20:c2:7d:7d:
         8f:f5:25:5d:51:c7:e1:21:ab:53:0d:c1:80:56:3d:c8:f7:43:
         4c:c5:bc:a4:df:55:41:cd:22:a4:5e:ea:3a:81:7e:bb:1f:d7:
         9f:b0:69:29:c9:fb:56:47:81:5e:32:16:05:04:d1:bb:50:2e:
         dc:2f:a1:a2:16:11:c1:c5:bd:c6:49:33:c9:6d:3a:5d:df:8d:
         88:41:ac:69:d1:c9:f4:f4:6f:ec:c0:4c:82:27:ad:7e:11:00:
         0f:cd:b5:a1:54:fb:b2:93:dd:6d:ce:cc:6b:ca:94:bd:f9:fe:
         cb:48:05:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:52:36 2025 by rpki-client