Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
File:                     ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft (raw, json)
Hash identifier:          8xUCvJ1KubgXUYL+VXSJ3ccwbbpJEOo7OqhH9VUNQ18=
Subject key identifier:   D8:75:93:0C:5E:F0:2D:DB:B7:6A:40:14:15:90:7E:E9:7A:6B:47:89
Authority key identifier: 20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04
Certificate issuer:       /CN=20b5100e798fab7577bf725ac9569ea80e6c2a04
Certificate serial:       01976A059D65E635BD05C5130258C77374B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
Manifest number:          0A1E
Signing time:             Fri 13 Jun 2025 16:00:42 +0000
Manifest this update:     Fri 13 Jun 2025 16:00:42 +0000
Manifest next update:     Sat 14 Jun 2025 16:00:42 +0000
Files and hashes:         1: 0WfJoxMemQt8nwlwlbf0-N5ZBgI.roa (hash: lHb75yOft9Kv2xRvC1d+Vx96c+J/4+jIL8gOSIRqeFs=)
                          2: 5RlzUCtoZ32Oa93A2fEfoYArcWM.roa (hash: iA8YpgMYI54//mfKtXnw0NA6/nJYpojDOe0q+RA30ZU=)
                          3: ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl (hash: kV+mC1mDhiE4j12M/N5DBmKMZ3m3ABydodISM1/Nwa0=)
                          4: zmJ9lE5vi4Jqc9Z9iVsq8OjO3sw.roa (hash: b4eeLp19myrQzh9AuX2bzcABMyXzCxCR666FaiLOLYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:05:9d:65:e6:35:bd:05:c5:13:02:58:c7:73:74:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20b5100e798fab7577bf725ac9569ea80e6c2a04
        Validity
            Not Before: Jun 13 16:00:42 2025 GMT
            Not After : Jun 14 16:00:42 2025 GMT
        Subject: CN=d875930c5ef02ddbb76a401415907ee97a6b4789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bd:31:22:6b:94:2c:d6:30:3c:53:9e:a2:20:
                    30:52:2b:0c:be:bd:4b:2d:c7:9f:9e:30:65:80:0a:
                    de:f6:05:34:5f:82:12:4d:bf:bd:33:a3:81:62:27:
                    d7:3a:a2:a5:e4:b4:aa:63:11:d5:d1:00:f2:e0:3e:
                    1c:74:73:3e:32:af:de:36:dc:64:86:c7:36:c0:33:
                    07:a3:7b:6e:30:3a:29:76:77:64:f2:53:72:63:27:
                    8b:43:e5:9b:c7:a3:46:ff:e6:2d:cb:43:28:d7:dc:
                    af:16:41:0d:76:4a:a8:18:1e:15:57:c0:e0:d9:00:
                    d5:20:69:71:42:00:4f:b8:ed:5e:67:c6:fc:fa:db:
                    01:be:c1:92:af:a2:1a:08:2b:d4:5c:93:55:8c:c1:
                    f6:5d:9d:5d:1e:58:b6:18:21:9a:c0:7a:2b:46:e4:
                    c5:99:db:40:9f:2f:aa:34:b5:47:ae:ba:23:6f:fb:
                    ab:ad:3a:f3:d1:48:55:93:ca:4b:a8:18:b8:de:a7:
                    32:f1:ca:d6:f5:d1:7a:28:a1:17:a3:27:f7:30:90:
                    66:69:ff:1c:63:6c:0f:12:96:d4:e5:9c:e5:7b:85:
                    06:73:38:ef:75:2e:54:b2:dc:4b:70:bc:91:aa:01:
                    a8:4b:70:0e:e9:c7:bc:25:c5:d9:be:e2:28:0a:70:
                    ef:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:75:93:0C:5E:F0:2D:DB:B7:6A:40:14:15:90:7E:E9:7A:6B:47:89
            X509v3 Authority Key Identifier:
                keyid:20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:25:98:97:08:a7:1d:ec:b1:f7:b7:41:6f:21:68:d5:90:0b:
         21:14:39:74:68:0f:ec:23:0c:ae:31:67:77:76:de:f7:fa:b5:
         a2:a8:31:a5:d1:b3:2d:39:5e:d0:45:7a:62:56:7e:bc:b0:e6:
         c3:42:34:9b:20:82:77:4a:64:50:1e:4e:b3:cd:d2:72:15:08:
         c0:72:ef:cf:1f:63:d3:dd:9b:cc:39:bc:9f:d4:87:b9:6e:73:
         1b:2b:3b:17:2f:e3:3a:49:09:74:e6:66:0a:8d:e7:31:1b:44:
         88:d4:df:ed:de:41:5b:e6:86:9b:e5:48:44:8b:c1:2b:ba:51:
         59:1e:28:c6:49:c6:9f:e1:3e:43:b5:19:74:ba:2b:0f:b1:90:
         76:4f:01:d6:86:4d:c8:96:8e:aa:2e:44:d3:60:77:0b:0a:4b:
         ec:7a:82:42:1a:92:0c:cd:68:78:55:1f:ae:6e:ae:83:32:ca:
         bb:d5:69:62:62:36:5f:02:69:d9:99:d6:72:ce:cb:fa:83:33:
         01:ed:6d:8a:d9:e1:81:e6:b4:c2:da:1e:80:51:76:4f:5c:7e:
         56:be:5a:35:ac:24:90:05:48:7c:71:79:c6:ec:d7:8e:a6:50:
         1b:42:71:d3:3f:3f:4f:33:fa:ea:3a:0b:1c:fc:3e:cd:8b:4c:
         15:05:e5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 21:35:11 2025 by rpki-client