Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
File:                     IYLNOsXE22fqcxprcZi31uT_EVw.mft (raw, json)
Hash identifier:          R9MLhSo8FkqcXOhBdd/Wm0Zmtb8rgLXtIJCpwkuyERM=
Subject key identifier:   0B:3D:AB:AF:DF:5B:96:7F:BD:66:46:8E:48:A2:45:B2:E6:76:67:1A
Authority key identifier: 21:82:CD:3A:C5:C4:DB:67:EA:73:1A:6B:71:98:B7:D6:E4:FF:11:5C
Certificate issuer:       /CN=2182cd3ac5c4db67ea731a6b7198b7d6e4ff115c
Certificate serial:       019746D512E0BE4B5D546626119F13CBECC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYLNOsXE22fqcxprcZi31uT_EVw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
Manifest number:          0FE2
Signing time:             Fri 06 Jun 2025 20:00:58 +0000
Manifest this update:     Fri 06 Jun 2025 20:00:58 +0000
Manifest next update:     Sat 07 Jun 2025 20:00:58 +0000
Files and hashes:         1: IYLNOsXE22fqcxprcZi31uT_EVw.crl (hash: mW9gzwy7LwvNiU3sAcjpt8o3xgev2nIoBaTQIrego3c=)
                          2: g3nTkjVHfCtnRgD2iYnxWWRZOIk.roa (hash: 8O+KUIsUB5NmSou/PBbO/5fJhmgcsiY9mA8eGOd3AB0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYLNOsXE22fqcxprcZi31uT_EVw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 20:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:d5:12:e0:be:4b:5d:54:66:26:11:9f:13:cb:ec:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2182cd3ac5c4db67ea731a6b7198b7d6e4ff115c
        Validity
            Not Before: Jun  6 20:00:58 2025 GMT
            Not After : Jun  7 20:00:58 2025 GMT
        Subject: CN=0b3dabafdf5b967fbd66468e48a245b2e676671a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f2:b3:39:7c:ae:51:b6:b0:92:1b:03:c2:b6:
                    ae:19:5d:26:f5:57:fa:e7:ff:6c:4f:90:e3:17:cf:
                    7e:03:e0:df:76:33:5d:0b:bc:65:b6:b6:52:d7:44:
                    56:0a:18:a0:37:6d:54:c5:1d:fa:40:d0:18:14:46:
                    98:b3:1e:90:2c:2d:2f:2b:75:ae:2d:85:92:21:8f:
                    84:58:3d:db:c4:73:a8:03:cd:41:3d:79:8e:86:b1:
                    5c:18:0c:d8:3a:23:c8:84:04:01:2a:3a:c9:6d:37:
                    b9:39:15:8e:4c:ea:97:b0:ce:73:ac:b4:26:13:13:
                    49:6b:4f:a1:be:b4:c8:da:4c:ee:00:fc:f4:6b:d2:
                    fc:72:31:61:9c:ca:64:ff:e4:5f:75:4c:c5:dd:15:
                    96:96:d6:2a:f8:09:af:fc:c4:c0:86:8f:dd:0c:51:
                    8d:76:3c:ad:1c:67:16:24:dd:17:21:d1:a5:1f:74:
                    c3:f9:d8:7c:42:ec:e0:4e:f2:6c:c0:5b:7d:f4:e7:
                    55:1b:3e:de:fc:15:1e:cf:a5:2e:c3:50:55:50:ce:
                    e0:29:b2:08:e1:5a:34:0b:e2:92:fc:4a:18:01:9b:
                    a1:bb:21:0a:65:6d:08:f9:00:fb:04:0f:cb:b7:f8:
                    07:43:fe:83:ad:cb:dc:39:24:e4:bb:29:cb:23:2d:
                    aa:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:3D:AB:AF:DF:5B:96:7F:BD:66:46:8E:48:A2:45:B2:E6:76:67:1A
            X509v3 Authority Key Identifier:
                keyid:21:82:CD:3A:C5:C4:DB:67:EA:73:1A:6B:71:98:B7:D6:E4:FF:11:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYLNOsXE22fqcxprcZi31uT_EVw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:e3:f3:1b:5f:52:86:e4:c6:02:d0:27:8b:25:c4:97:82:81:
         31:6f:25:13:6f:a5:27:f9:10:8a:ba:8f:de:8b:33:38:ab:8c:
         14:c3:3c:97:f4:1c:5a:cd:9e:e3:06:7b:82:29:9a:7a:14:ed:
         d3:d5:8f:4c:65:65:e2:e3:de:7a:85:23:5e:3a:59:9d:35:41:
         b8:e2:44:63:d6:24:10:8a:12:09:87:cb:f4:51:8f:24:fc:5a:
         a2:d8:7e:52:b7:eb:8b:f7:a1:75:42:9d:a3:bb:25:f7:0d:de:
         85:37:50:26:4e:59:56:db:f9:ce:25:ae:6e:39:08:a6:a5:10:
         a4:71:1f:1e:a8:87:17:0c:a0:fe:31:95:4e:ef:91:4b:f2:4b:
         04:97:7b:73:e0:5d:1b:a9:fd:eb:5e:96:4c:7c:11:61:0f:3d:
         21:f1:bb:e7:00:c4:86:05:61:d1:17:77:89:7e:58:2c:0a:23:
         07:46:f4:d1:f7:3d:de:a4:14:d6:a0:81:5a:34:94:55:90:79:
         87:28:0d:a6:da:f8:aa:cc:99:08:c8:90:86:8e:9b:f7:7f:b9:
         28:f7:a3:1e:7f:b3:13:1f:6f:a7:f9:f2:58:71:a2:51:50:88:
         17:f7:c7:7d:56:22:a7:27:3d:4c:a5:ab:4a:98:f1:06:33:ec:
         5a:fd:b3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:26:32 2025 by rpki-client