Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
File:                     iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft (raw, json)
Hash identifier:          X/17CSSYB6ccUmynzCAak7+RbYt3aEb+MdHkhF09TTE=
Subject key identifier:   F4:93:1F:8E:D6:95:6D:B3:64:00:65:8C:28:83:0F:DE:94:C6:61:1D
Authority key identifier: 88:6F:AF:18:20:07:4B:79:B6:02:5D:DF:FA:B2:5C:B3:F7:74:42:4E
Certificate issuer:       /CN=886faf1820074b79b6025ddffab25cb3f774424e
Certificate serial:       0197493190B649512D418EBD62CB082CFE93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
Manifest number:          FE
Signing time:             Sat 07 Jun 2025 07:01:14 +0000
Manifest this update:     Sat 07 Jun 2025 07:01:14 +0000
Manifest next update:     Sun 08 Jun 2025 07:01:14 +0000
Files and hashes:         1: iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl (hash: 2hUxBm46X90ktfWsH3bEtMIiXdY8/TzewexnIE1Agv0=)
                          2: pBOV7_scguiJteXj3vNSqNhNc5U.roa (hash: vCrIj0wpM69dzNSkAC34US2sC7UYedyyZzr33rt/1E0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:90:b6:49:51:2d:41:8e:bd:62:cb:08:2c:fe:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=886faf1820074b79b6025ddffab25cb3f774424e
        Validity
            Not Before: Jun  7 07:01:14 2025 GMT
            Not After : Jun  8 07:01:14 2025 GMT
        Subject: CN=f4931f8ed6956db36400658c28830fde94c6611d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:25:a6:e1:1e:c5:5a:8c:40:0e:d5:2d:87:e2:
                    6c:86:c8:f7:a5:be:60:a8:ba:fc:c7:d8:12:c3:37:
                    e1:a1:70:b6:bf:79:82:52:be:eb:7f:21:d4:ba:46:
                    51:e3:99:b2:49:21:40:a4:d9:88:90:3f:c8:cb:42:
                    3c:26:ef:23:51:e8:77:fd:d4:cc:77:6e:20:6f:6e:
                    7d:9f:e3:86:b4:dc:ba:e1:2b:11:79:a5:34:e4:3e:
                    40:a3:92:65:78:4d:3d:65:de:a3:5d:df:f5:35:7e:
                    db:c5:cf:c3:e5:cf:16:64:f3:43:c9:ed:ba:03:fe:
                    c9:e0:cf:b2:5c:89:23:e4:5d:9f:bd:05:c6:0e:e6:
                    04:1e:74:ed:4a:4f:37:c1:68:d3:d5:be:d4:82:54:
                    ad:33:b5:f8:e9:a3:b4:e4:19:99:82:f2:67:42:b7:
                    b7:1d:8e:b2:50:59:6b:a7:75:80:97:bb:92:ce:e6:
                    67:a3:51:83:54:96:d9:ad:77:6c:b6:4d:69:4c:46:
                    a5:d3:1b:cc:8f:fd:a2:c8:d2:18:cb:5c:5c:fa:57:
                    c0:a8:48:a8:f1:42:14:e9:bf:93:35:96:e2:a6:de:
                    75:91:f6:b6:69:82:b6:34:09:59:4b:da:1c:3c:13:
                    98:66:5d:c9:bb:63:00:7d:da:14:d5:51:73:65:39:
                    6e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:93:1F:8E:D6:95:6D:B3:64:00:65:8C:28:83:0F:DE:94:C6:61:1D
            X509v3 Authority Key Identifier:
                keyid:88:6F:AF:18:20:07:4B:79:B6:02:5D:DF:FA:B2:5C:B3:F7:74:42:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:84:15:9c:f4:89:ef:79:ca:f5:7e:1a:99:10:16:72:bb:a5:
         d6:75:c2:44:17:e8:b8:07:21:b6:e3:ba:35:3c:2b:5e:ac:6e:
         c5:39:28:fa:62:a2:77:9c:a1:45:ed:2c:f9:c3:db:26:3c:c9:
         89:10:d2:d8:3c:4d:6a:a5:f8:b6:43:a5:48:9c:77:9e:00:9f:
         26:c6:ab:42:61:b3:14:bd:70:c1:eb:73:1b:58:db:b6:70:99:
         2d:da:06:99:44:00:4d:59:32:82:8a:93:17:73:c5:9b:c9:dd:
         9d:b8:a2:87:91:6c:3e:86:f1:8b:2d:44:c8:41:b8:11:a0:28:
         16:54:f6:dc:33:c8:83:1e:00:58:39:56:51:b9:31:4d:24:32:
         c4:9f:f9:79:99:66:08:9e:8d:95:2c:15:6f:20:28:7c:e7:56:
         aa:e8:ef:a3:34:70:a3:af:05:50:91:0c:95:15:ea:d8:20:95:
         fa:50:67:9b:3f:67:7e:a4:71:c6:27:b5:c4:1b:bb:33:c1:2e:
         0d:46:82:ef:d4:21:65:72:b9:bb:4b:e3:91:77:39:0d:63:18:
         f7:20:5d:97:b9:43:dd:94:d7:99:f8:3c:52:f8:4f:10:89:68:
         07:c8:8f:d7:c9:a4:4c:a1:67:b5:33:9f:6a:58:95:dc:5c:97:
         56:af:92:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:31:27 2025 by rpki-client