Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
File:                     ILgwgzh4tshhJpoOKkWDeqlIW-E.mft (raw, json)
Hash identifier:          N91AkeBh5ZbSM2e81F3ykKRKnVJKe1ZdXrmtCz6SUvc=
Subject key identifier:   5F:A1:C9:01:71:90:CE:7E:CF:E7:6F:5F:CC:04:07:DD:BF:1B:91:A3
Authority key identifier: 20:B8:30:83:38:78:B6:C8:61:26:9A:0E:2A:45:83:7A:A9:48:5B:E1
Certificate issuer:       /CN=20b830833878b6c861269a0e2a45837aa9485be1
Certificate serial:       01977007730879F1443516434C5569558FC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
Manifest number:          05C0
Signing time:             Sat 14 Jun 2025 20:00:25 +0000
Manifest this update:     Sat 14 Jun 2025 20:00:25 +0000
Manifest next update:     Sun 15 Jun 2025 20:00:25 +0000
Files and hashes:         1: ILgwgzh4tshhJpoOKkWDeqlIW-E.crl (hash: 1qYp3wu1i8ttiuKivnAqb3iRedFojZ44KuwHZLjXS2E=)
                          2: Ykp7B25gotnyLx9mDtSzNq96W6k.roa (hash: NIlK9x59nPV4O79DLDS8wTUzWHzJ4y+mS34Pzan31ak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:07:73:08:79:f1:44:35:16:43:4c:55:69:55:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20b830833878b6c861269a0e2a45837aa9485be1
        Validity
            Not Before: Jun 14 20:00:25 2025 GMT
            Not After : Jun 15 20:00:25 2025 GMT
        Subject: CN=5fa1c9017190ce7ecfe76f5fcc0407ddbf1b91a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5e:19:e5:3f:41:6e:13:c7:8f:f3:c3:25:30:
                    25:d6:da:ea:bd:fc:95:25:1e:62:f9:01:3d:f4:2b:
                    8b:c7:7c:fe:48:24:86:19:80:13:d5:db:c1:bf:ff:
                    88:4a:0c:39:29:e4:99:f0:ef:7b:2b:6b:a2:9d:d0:
                    7c:d1:84:18:90:53:74:4b:50:da:1d:9f:3e:7a:2d:
                    f2:3e:f8:ea:89:c7:b3:05:43:0f:7b:8e:02:a6:59:
                    fe:da:56:13:f3:24:6e:07:a7:33:02:af:b9:f9:52:
                    c3:cd:c4:4a:13:0b:38:ac:7b:4b:92:43:3b:56:c2:
                    21:65:57:3e:50:f5:65:bd:2a:c9:e4:f4:5c:fd:80:
                    04:e1:f3:a5:3d:69:d4:bc:66:85:b8:e5:7c:26:e3:
                    7e:34:9b:f4:c7:89:04:1b:ef:1c:39:c3:44:bb:37:
                    9a:e7:93:10:93:70:e6:6f:ea:bf:77:b4:27:be:45:
                    b1:c8:50:cb:79:b2:16:80:48:29:42:52:9d:43:e0:
                    73:9d:72:61:ec:09:4e:06:d4:8e:ab:5e:fc:7c:5b:
                    67:fd:52:6d:57:b5:c9:19:53:77:53:38:48:7d:be:
                    21:73:8e:d0:c2:32:dd:1f:9e:54:83:43:7f:ec:5d:
                    c4:41:a1:3d:81:ca:77:a6:23:fd:15:da:c3:c1:73:
                    ba:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A1:C9:01:71:90:CE:7E:CF:E7:6F:5F:CC:04:07:DD:BF:1B:91:A3
            X509v3 Authority Key Identifier:
                keyid:20:B8:30:83:38:78:B6:C8:61:26:9A:0E:2A:45:83:7A:A9:48:5B:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:89:83:9f:4e:8b:54:60:d7:c0:6a:18:6f:4f:75:46:58:0a:
         4b:7a:4b:0d:90:49:9b:3f:bc:52:1d:29:f3:3c:2f:7c:d2:ba:
         30:c3:7e:33:e8:e2:10:bd:82:7b:61:82:af:af:1d:54:60:f9:
         e7:85:8b:ab:ce:fe:81:0a:c0:6d:8e:34:ba:72:3c:3d:86:e3:
         14:59:68:c1:bb:44:4e:0e:9c:6a:d7:60:5a:f7:ff:67:11:d0:
         e5:25:c3:83:d4:2f:d1:d4:a3:62:dd:2d:18:fa:fd:12:56:19:
         8d:48:76:47:c7:77:fe:0d:98:03:28:53:f2:15:d9:fe:02:56:
         07:7e:03:59:4e:07:76:ea:cc:21:75:24:f5:87:2a:0b:6f:d4:
         7a:35:bc:fd:ba:e9:d5:9b:57:81:4c:09:47:da:d8:57:b0:1f:
         8b:fd:9b:b9:87:24:9e:1a:e8:25:16:d9:8a:bf:3d:67:71:e1:
         60:11:1a:44:f4:82:fb:e5:a4:02:27:d3:71:00:ee:c5:3e:8a:
         89:a5:e2:45:ff:f3:b0:9c:7c:48:75:d9:32:ab:d1:12:02:86:
         57:20:dd:00:31:6c:a4:5e:e2:40:6c:18:70:52:8a:cc:cf:1a:
         45:b0:00:ac:b6:b9:c0:53:94:58:62:de:f6:4b:11:7a:6b:cd:
         cc:03:9b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:45:06 2025 by rpki-client