Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
File:                     Igqw164Bx7p9pp1xqRRys5DNcJE.mft (raw, json)
Hash identifier:          Wf1fCIBHxBVpaGs+Vqt5qxz4koWlFcNvg4IzEbjd2/k=
Subject key identifier:   2E:7A:B5:54:2E:20:FE:1B:7A:F9:56:38:E5:48:28:3D:F6:D6:41:A0
Authority key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
Certificate issuer:       /CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Certificate serial:       01975C81049BAF0580AA2558994B741A94D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
Manifest number:          025B
Signing time:             Wed 11 Jun 2025 01:00:48 +0000
Manifest this update:     Wed 11 Jun 2025 01:00:48 +0000
Manifest next update:     Thu 12 Jun 2025 01:00:48 +0000
Files and hashes:         1: Igqw164Bx7p9pp1xqRRys5DNcJE.crl (hash: Wyd3TL62QYhSboU2HD3qXkeJAJp3J8SNGyYNiUAA2PI=)
                          2: avLYAmYO9wvbuIB-t2UHkT4WNBk.roa (hash: eNorqBfzjIBrKphnA3Hxbm94Qe9pNP73PjpzIgRcQ3E=)
                          3: c_sMTj7v_tcLPK4ph9KiN4hyel8.roa (hash: WlGUEszKDgI/p0yTM/WRVaqPEPGJ8QjHZwVMfO6NE9k=)
                          4: uZq55f5XuQqQ7rrf5WAbTtH3Eg0.roa (hash: mqFOL5ArU7MflWJib0dCvCKgrFOQckiZASgofur+1AE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:81:04:9b:af:05:80:aa:25:58:99:4b:74:1a:94:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
        Validity
            Not Before: Jun 11 01:00:48 2025 GMT
            Not After : Jun 12 01:00:48 2025 GMT
        Subject: CN=2e7ab5542e20fe1b7af95638e548283df6d641a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:be:82:d0:82:74:9b:c4:40:e1:3e:43:92:5f:
                    31:7e:e3:7c:98:bd:ce:1c:be:da:33:14:75:13:ac:
                    79:c9:ae:62:be:50:b7:ad:4e:4c:fe:70:1b:10:ce:
                    48:e5:c1:27:e7:2b:b4:46:d6:cc:5f:e7:c2:96:08:
                    2a:7f:b6:97:c1:17:1b:b7:a6:4a:75:0c:84:16:9c:
                    d7:52:83:cf:59:9f:fd:be:3f:02:0e:ed:e7:9e:bf:
                    f8:3b:bb:8b:2e:77:73:c3:d1:99:29:a9:cb:06:b3:
                    7e:f6:fe:52:d4:ae:9c:fb:30:8d:c6:26:8c:3a:96:
                    51:c4:07:29:45:78:99:19:a9:bb:21:f8:51:15:38:
                    0c:70:74:41:5d:e3:bd:7a:48:53:66:78:9a:a2:bd:
                    d3:63:4e:01:8e:8e:80:60:7a:55:51:a2:10:1a:57:
                    60:88:09:ca:21:f7:90:b1:dd:eb:d2:27:20:fe:57:
                    41:86:8f:a9:d6:ab:65:ea:8a:6d:29:2e:9e:74:bd:
                    a1:3b:78:57:67:1b:57:e8:fb:36:af:e8:67:ca:95:
                    ba:82:26:f2:92:a2:27:31:5c:f9:52:d1:33:b3:5d:
                    e4:02:d6:6a:71:69:10:e3:fd:6b:39:7d:39:92:49:
                    01:18:4f:2e:0d:5e:ab:6a:a1:ca:b7:cd:6d:c4:a7:
                    52:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:7A:B5:54:2E:20:FE:1B:7A:F9:56:38:E5:48:28:3D:F6:D6:41:A0
            X509v3 Authority Key Identifier:
                keyid:22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:33:4e:d4:a5:96:65:4a:f4:aa:ab:de:17:d7:99:ae:3b:ea:
         15:17:47:ef:92:c9:f4:27:41:1f:7d:66:0c:0b:9b:74:8b:ba:
         ea:8b:39:aa:75:71:c7:cf:8c:0a:91:a8:3c:1f:78:e9:7a:f0:
         7c:d8:07:da:18:90:68:00:b5:a7:99:a1:49:c5:de:19:dd:98:
         d4:d6:8a:48:86:65:9d:86:b0:f0:37:19:76:52:7e:5f:2e:f7:
         6d:05:74:a8:e3:08:14:16:be:aa:bb:38:6b:fe:d1:d4:87:c0:
         a4:51:dd:dc:9a:e0:a6:f1:0e:7c:f5:30:cf:b8:93:4b:67:94:
         4f:fa:c5:e1:eb:12:7f:45:87:86:57:4c:c4:8f:1f:8a:45:ad:
         71:e7:8a:3d:20:2e:0f:b8:0b:f4:a1:e3:77:d1:28:89:33:6f:
         30:52:31:e8:15:26:fe:a6:37:e3:bf:2e:45:44:d0:62:38:4c:
         3e:64:ab:ce:e0:5f:e5:fc:67:00:f5:9d:49:dc:cd:d5:72:16:
         e0:9b:76:4f:f3:12:4e:c4:f9:a0:8e:19:94:78:a8:91:00:f6:
         c0:c2:49:d9:34:e4:39:a8:99:65:07:c1:3b:c7:d2:84:b5:ef:
         e3:02:d8:e2:f4:1b:07:66:5f:92:0c:5b:d6:5c:63:09:5b:4f:
         fb:be:e8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:27:46 2025 by rpki-client