Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
File:                     1IspGxb22WyArX0xKS9WDU-q6_A.mft (raw, json)
Hash identifier:          fLvnmRuDsxXoD/LojEmkSzQO2mKDTEwBUKZkbEDDhRg=
Subject key identifier:   81:9C:57:21:07:C7:96:F4:FC:91:5F:19:48:29:67:EC:EE:73:6E:6B
Authority key identifier: D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0
Certificate issuer:       /CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0
Certificate serial:       01958BBBBAFFC24036C16C55398DA649AA9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
Manifest number:          06E7
Signing time:             Wed 12 Mar 2025 19:01:30 +0000
Manifest this update:     Wed 12 Mar 2025 19:01:30 +0000
Manifest next update:     Thu 13 Mar 2025 19:01:30 +0000
Files and hashes:         1: 1IspGxb22WyArX0xKS9WDU-q6_A.crl (hash: Jk4nDwbjVCZEjWfP8OyJkPi8tjnnjd0RiEfB7yPGzjc=)
                          2: BtbTjlVmCrr8FM6cqZ2L6WfooLI.roa (hash: DB5JF41Iz6t5oALsnpByg4NgG1R5sryuRnCUBnIxDiY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:bb:ba:ff:c2:40:36:c1:6c:55:39:8d:a6:49:aa:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0
        Validity
            Not Before: Mar 12 19:01:30 2025 GMT
            Not After : Mar 13 19:01:30 2025 GMT
        Subject: CN=819c572107c796f4fc915f19482967ecee736e6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:13:4a:9c:1c:42:55:2b:0a:8d:94:d2:8d:bc:
                    26:e6:17:a8:2b:f6:08:01:e1:13:5b:9a:a3:61:06:
                    ef:9d:33:32:b0:08:aa:0c:6b:a2:f8:26:19:76:0e:
                    fb:2c:af:5d:9c:68:87:80:c1:ff:b8:9e:00:d8:79:
                    06:64:4b:ef:e1:db:35:44:db:33:82:3d:c1:13:7b:
                    48:e8:e4:f2:f2:29:8c:9a:da:61:fe:c3:3c:d5:24:
                    b4:6a:67:f9:6e:c3:61:be:e6:a7:18:48:a5:c2:da:
                    a0:15:c2:08:de:fa:bb:4e:55:3b:d5:70:fb:60:45:
                    2f:86:8b:09:eb:39:eb:f4:1e:7b:ed:7a:9f:6b:4a:
                    4e:65:f5:0a:c6:99:c5:42:a2:78:1f:73:c4:2b:be:
                    46:df:e7:ab:a8:09:cd:aa:e6:b0:bf:9c:43:14:bd:
                    ce:7d:48:f1:a2:f5:2d:75:4f:4b:3a:06:3b:d9:cf:
                    3a:20:67:84:ad:57:e0:49:15:a9:5a:60:3f:f8:98:
                    b1:c3:16:ba:a2:ae:20:88:44:8c:e7:74:ac:a6:e0:
                    0c:58:26:14:aa:28:d0:98:cf:48:f6:c1:cf:c9:55:
                    82:76:81:85:79:1c:51:35:cb:71:73:b3:f9:da:d9:
                    f3:ec:e1:74:19:52:85:ce:1e:b1:e1:39:7e:bb:23:
                    a8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:9C:57:21:07:C7:96:F4:FC:91:5F:19:48:29:67:EC:EE:73:6E:6B
            X509v3 Authority Key Identifier:
                keyid:D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:cf:3d:d9:a1:58:86:6f:b9:98:93:92:98:ad:9a:7a:02:ae:
         45:4c:6d:ce:43:5c:f0:38:45:9e:f6:66:d2:0c:20:71:9c:16:
         d7:34:31:aa:77:72:3e:89:85:13:fa:18:88:8b:35:37:c3:99:
         05:37:06:b5:94:ca:56:22:3d:6a:72:a5:0e:59:c4:0f:a7:83:
         b1:cf:76:75:45:30:eb:f6:cd:67:c7:a1:04:01:69:ad:0e:27:
         de:de:4f:92:55:37:a4:1c:87:ba:05:59:46:7c:20:a0:a8:d2:
         6e:2d:0d:a0:83:eb:24:0e:90:17:23:95:d0:96:d8:0c:5a:40:
         30:d8:09:f9:f1:6e:4c:c6:6b:ad:5a:f3:d2:6b:69:22:48:4d:
         d2:05:73:97:90:9a:a7:e1:d1:d4:6b:1c:45:98:c2:28:00:37:
         d0:38:a8:dc:5d:69:4a:12:28:06:9e:a3:3f:fa:42:05:0b:78:
         f7:a0:c6:9b:e4:49:3c:57:97:57:1a:d6:b5:95:8a:67:d2:2b:
         b5:17:a9:80:3d:43:a2:a6:42:32:95:47:54:2a:0d:2f:ec:ce:
         62:2a:c6:9c:12:80:bd:3c:12:76:95:99:de:e7:86:1c:22:05:
         0d:21:96:83:96:fe:87:9d:ea:38:66:e4:f9:d3:d1:f1:a9:df:
         0c:39:96:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:28:43 2025 by rpki-client