Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
File:                     Igqw164Bx7p9pp1xqRRys5DNcJE.mft (raw, json)
Hash identifier:          aczG/6OGSz8G1zdA0kKHom8awEIsRnTbcNYtlkQZGN8=
Subject key identifier:   88:79:88:58:D3:BC:70:F0:B5:1C:C1:36:FD:9A:14:EF:91:6E:87:5A
Authority key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
Certificate issuer:       /CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Certificate serial:       019758A40EFB8AA7E1F4278E33C0160D26CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
Manifest number:          0259
Signing time:             Tue 10 Jun 2025 07:00:36 +0000
Manifest this update:     Tue 10 Jun 2025 07:00:36 +0000
Manifest next update:     Wed 11 Jun 2025 07:00:36 +0000
Files and hashes:         1: Igqw164Bx7p9pp1xqRRys5DNcJE.crl (hash: SH3Zjce3kM3nFfzPP/pLQ3F0p41vkve3Zf2KkX0mgdI=)
                          2: avLYAmYO9wvbuIB-t2UHkT4WNBk.roa (hash: eNorqBfzjIBrKphnA3Hxbm94Qe9pNP73PjpzIgRcQ3E=)
                          3: c_sMTj7v_tcLPK4ph9KiN4hyel8.roa (hash: WlGUEszKDgI/p0yTM/WRVaqPEPGJ8QjHZwVMfO6NE9k=)
                          4: uZq55f5XuQqQ7rrf5WAbTtH3Eg0.roa (hash: mqFOL5ArU7MflWJib0dCvCKgrFOQckiZASgofur+1AE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 07:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:a4:0e:fb:8a:a7:e1:f4:27:8e:33:c0:16:0d:26:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
        Validity
            Not Before: Jun 10 07:00:36 2025 GMT
            Not After : Jun 11 07:00:36 2025 GMT
        Subject: CN=88798858d3bc70f0b51cc136fd9a14ef916e875a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:91:03:6a:62:ec:7d:c1:62:09:dc:32:bc:cc:
                    f0:e0:45:7c:36:bf:dd:0d:ca:c1:9d:1f:42:c8:14:
                    45:1e:31:5f:f9:51:db:91:ef:4f:a5:3b:fe:3d:cf:
                    08:30:ba:e4:99:fe:0f:b4:61:16:01:6b:f4:16:eb:
                    fa:93:27:4f:83:10:fb:d0:c9:76:50:be:de:ce:b7:
                    a4:58:60:22:db:06:7b:d6:8a:6e:49:79:77:8f:67:
                    cb:55:29:40:04:37:cd:17:41:83:6a:67:f0:58:97:
                    fe:12:cd:2e:1c:05:8c:12:f5:97:8e:cf:c2:b6:70:
                    23:f3:4e:5f:db:c7:30:d3:4c:78:88:ee:bd:c5:85:
                    94:1d:91:64:cf:78:f5:3c:94:8f:51:1d:89:58:7a:
                    a7:c9:eb:66:8f:ca:00:10:46:6b:ec:bd:fc:ea:0f:
                    7e:97:85:e1:d4:92:68:ac:9a:08:fd:72:0d:21:f5:
                    92:c5:3e:0b:7b:a0:13:a2:d6:aa:2b:37:99:e2:86:
                    51:81:d5:dc:d4:32:57:9a:7a:50:52:e1:54:27:d2:
                    68:23:bf:35:fa:73:e9:34:37:09:e1:72:7d:a1:51:
                    45:f7:82:68:11:99:05:00:fa:5a:26:fd:c3:bf:94:
                    fb:61:f1:9f:98:63:fc:2c:e4:72:cd:94:db:f4:fe:
                    9a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:79:88:58:D3:BC:70:F0:B5:1C:C1:36:FD:9A:14:EF:91:6E:87:5A
            X509v3 Authority Key Identifier:
                keyid:22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:df:22:d0:a3:e3:7a:33:05:41:cf:1c:72:c4:f2:4b:82:12:
         c2:86:67:60:49:91:eb:b5:0a:9a:18:cb:6a:71:6b:a8:d4:46:
         66:65:ed:1a:0f:55:8d:f5:a7:51:75:e5:3f:00:0b:13:2c:d4:
         9d:35:f9:43:d0:17:5c:94:70:98:f5:46:a8:13:d7:36:30:80:
         86:fb:45:14:5e:9a:2a:68:3c:7a:8c:98:1a:ae:0c:3c:43:5f:
         dd:78:a9:37:f9:78:15:f0:b4:87:dc:04:58:4c:6e:79:b3:bf:
         78:84:3b:1b:ed:a2:87:0d:91:74:7b:5e:61:22:59:74:f2:eb:
         69:d0:72:45:2e:09:c4:ee:b8:87:e0:9e:8e:ee:c5:7d:00:83:
         df:a6:13:d1:49:23:e1:67:c5:89:3e:77:6e:d3:4b:fb:1b:b3:
         f2:a2:5d:88:ec:1f:cb:e0:01:fb:b1:ab:11:21:0a:fa:aa:b8:
         2c:e8:9e:c4:41:9c:42:e3:99:e9:a1:18:81:57:0c:32:d9:6f:
         3f:e0:0f:2d:5f:c8:a3:9c:50:f0:dd:ba:a9:e3:e6:d2:a7:b9:
         eb:8e:dd:5e:67:8a:5c:77:8e:f6:7c:80:d8:88:41:54:79:14:
         00:54:9e:62:b3:4c:2e:c2:03:73:ef:0b:ba:2f:22:e7:a4:a1:
         f7:9b:be:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 14:26:35 2025 by rpki-client