Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
File:                     iqtMDPIcGj1upBBoy-kIvjiORQo.mft (raw, json)
Hash identifier:          huOIrC++znvIThpezMzo56pbMW/GLZA565JYceEMDVE=
Subject key identifier:   7E:07:60:02:42:B5:F4:80:CB:83:68:6F:1B:6F:CC:6E:3F:96:8D:FA
Authority key identifier: 8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A
Certificate issuer:       /CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
Certificate serial:       01962B2A5CC4BA7C0E1C3E3206FA28A0B3AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
Manifest number:          0226
Signing time:             Sat 12 Apr 2025 18:01:58 +0000
Manifest this update:     Sat 12 Apr 2025 18:01:58 +0000
Manifest next update:     Sun 13 Apr 2025 18:01:58 +0000
Files and hashes:         1: 5ROabaZ0IQjGvjydG24dxkFdbIw.roa (hash: VZzap9WlH6EGkLU7RiUuipaz7yv8laZyaoXJmwbYxFo=)
                          2: KNoplKbnalbBlNJ0HrGiOS5fwgk.roa (hash: 6g25L6YriR7F4NqmIjLUqgHXTaSIa9NMu6Z6ggsvzHE=)
                          3: alNy-myxrA734TUoeZ1JVeikh6c.roa (hash: OCkDLXElKJB9eMUhsdq5dMT5WhX6caAwH3DuhC8oZvM=)
                          4: gdHjw5BAYBUGiQIKDf_rANYjbqo.roa (hash: rBCOEGXMkDk7MH6Epcgax70EgSCg7o0cp931QH6ZEmk=)
                          5: iqtMDPIcGj1upBBoy-kIvjiORQo.crl (hash: xupLM1ZyW1bFVSTia56J5vjKpQbP9WgkbzUniu/h75U=)
                          6: y7BcwDEAXqOJr6z4aNGCsX7xfw0.roa (hash: NHC7ZwJSkEI3d9bNJO6OCWV6hxqIR1IsXwJaROvY2+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 18:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2b:2a:5c:c4:ba:7c:0e:1c:3e:32:06:fa:28:a0:b3:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
        Validity
            Not Before: Apr 12 18:01:58 2025 GMT
            Not After : Apr 13 18:01:58 2025 GMT
        Subject: CN=7e07600242b5f480cb83686f1b6fcc6e3f968dfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7b:49:10:e1:d9:8e:58:15:be:3e:8f:2a:3d:
                    57:5c:30:82:a8:36:26:45:69:09:42:0d:1d:58:e9:
                    45:33:5d:f4:b7:fc:28:62:10:dd:55:d1:7c:80:fb:
                    e7:36:b8:8d:6a:f8:46:75:16:f2:a3:2f:1e:6d:13:
                    d2:f3:ee:78:ca:aa:57:9e:fa:66:1e:b0:0f:21:23:
                    ca:ba:c0:2e:2a:eb:ec:b4:61:da:f2:81:03:b9:bf:
                    cb:90:4a:0e:3b:e9:5d:e3:62:73:03:69:1e:3f:3b:
                    8a:58:3a:10:0f:dc:bd:fd:4c:d1:67:78:9c:e9:ee:
                    e0:60:30:a7:00:46:f5:62:50:c3:5e:37:24:d8:04:
                    9b:7e:be:a7:a7:da:35:e7:2c:f4:9d:c2:58:96:e5:
                    fb:0b:05:bd:2c:6a:bc:a6:ba:88:56:96:a5:55:38:
                    e8:ff:a9:52:e9:9b:1d:58:6b:6c:aa:6c:fa:d1:53:
                    72:69:6e:96:b8:81:a2:3c:44:cb:dc:49:14:47:46:
                    53:15:db:5c:d0:f8:c5:10:20:f1:58:13:1c:18:61:
                    e5:ff:21:39:d3:5a:17:cc:3c:3e:a0:4a:da:60:db:
                    e6:7f:2e:e1:f1:32:84:e7:c7:1d:7a:49:0d:41:e4:
                    c9:99:7f:5e:ff:fd:42:26:4e:54:d9:fc:2b:02:a9:
                    78:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:07:60:02:42:B5:F4:80:CB:83:68:6F:1B:6F:CC:6E:3F:96:8D:FA
            X509v3 Authority Key Identifier:
                keyid:8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:39:00:21:e9:02:93:00:b8:ec:46:54:ec:37:23:b8:cf:0a:
         95:96:54:ee:a0:c0:ee:a3:14:b0:05:e2:5e:a6:15:1b:6b:97:
         1b:2f:fc:dd:0b:f8:bc:5f:2b:97:28:7a:dc:47:b6:3a:5f:8d:
         3d:f0:5c:05:9b:31:72:bf:fc:f3:7b:e6:12:67:83:99:85:00:
         18:b4:c7:a7:ac:dc:a1:01:6c:1f:34:98:5c:2e:0c:b4:a7:80:
         3f:70:64:81:db:38:ec:67:02:0d:50:aa:ca:a5:dd:86:d0:fc:
         72:35:35:f2:30:20:34:d0:42:07:66:44:62:9b:f8:be:89:62:
         cc:f4:2a:3d:de:2a:4f:e8:14:68:05:94:90:61:14:3f:c9:23:
         ee:3f:38:25:0f:6d:a3:ed:1d:b8:52:8b:77:c8:45:de:29:ae:
         cd:84:af:cb:36:8e:22:d4:4a:c1:38:f6:e0:fd:e8:0e:0f:fb:
         c1:b9:b1:35:f2:a4:35:9e:1f:77:b3:28:9e:ac:b0:eb:af:95:
         f9:c7:b9:85:e5:2d:6d:f0:b8:a5:fe:04:cf:29:64:df:0b:8f:
         0a:c4:90:a1:25:12:9f:e1:e3:98:93:d3:69:ea:c0:15:9d:64:
         df:2b:d6:08:1d:c5:36:f9:8f:22:a0:48:35:cd:2e:75:fb:f3:
         45:d5:51:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:48:38 2025 by rpki-client