Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
File:                     Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft (raw, json)
Hash identifier:          nxPwuOnLSRjv8WOlxeW+eolr4D4rbm3nJ+auyFuaBOo=
Subject key identifier:   45:84:03:58:43:83:CF:48:13:97:B0:F9:C5:3F:D7:D1:B7:B0:23:5A
Authority key identifier: 21:CE:31:1C:8E:D6:0B:EF:1B:5E:4F:7D:3B:86:41:07:81:44:18:A3
Certificate issuer:       /CN=21ce311c8ed60bef1b5e4f7d3b864107814418a3
Certificate serial:       0197575AD3689C094B8915CE4EEECFC7187B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
Manifest number:          0924
Signing time:             Tue 10 Jun 2025 01:00:59 +0000
Manifest this update:     Tue 10 Jun 2025 01:00:59 +0000
Manifest next update:     Wed 11 Jun 2025 01:00:59 +0000
Files and hashes:         1: Ic4xHI7WC-8bXk99O4ZBB4FEGKM.crl (hash: vsM5d16qvfLtGnEUJjMrCL7bTBKWYSIE29Vu4ASX4QU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 19:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:57:5a:d3:68:9c:09:4b:89:15:ce:4e:ee:cf:c7:18:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21ce311c8ed60bef1b5e4f7d3b864107814418a3
        Validity
            Not Before: Jun 10 01:00:59 2025 GMT
            Not After : Jun 11 01:00:59 2025 GMT
        Subject: CN=458403584383cf481397b0f9c53fd7d1b7b0235a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:90:d5:14:8d:3b:ed:ba:1b:bb:49:7f:91:03:
                    0f:bc:f4:0e:40:03:54:71:40:ba:ae:7e:e4:73:aa:
                    03:d7:5e:6c:d5:0a:8c:45:31:19:7b:c4:e3:82:72:
                    31:4a:0c:f5:c7:ed:7a:19:9e:79:89:6c:e4:a1:73:
                    8d:31:7b:cb:84:2c:94:cd:b5:bd:ed:81:66:33:3f:
                    26:b4:ce:a0:b7:8e:f4:3e:ad:54:27:3a:fd:c0:f4:
                    f1:cb:62:6d:40:85:17:a3:b4:69:84:bb:66:6c:25:
                    44:a5:99:cb:d1:48:f6:7a:fe:08:bf:1e:1e:8c:7d:
                    c3:4b:40:d2:5d:6f:34:80:da:94:8d:9f:50:d1:cf:
                    ef:db:36:e2:04:51:6f:a3:43:a9:f2:66:fe:c0:25:
                    0e:80:74:fe:97:4a:c3:22:78:c2:92:7a:44:00:73:
                    62:eb:e1:fa:61:81:8e:d5:ed:37:d2:fc:03:e6:23:
                    c5:48:44:ea:f1:41:ac:9b:35:af:3a:54:67:c2:15:
                    5d:28:82:42:8c:50:04:11:3e:76:0e:51:26:b9:12:
                    f7:91:f6:a8:e4:4d:39:55:88:75:e3:0d:e2:61:21:
                    0c:4d:63:6d:0b:bc:2c:a9:82:f9:52:da:51:e3:d1:
                    a8:19:3a:6c:45:3f:75:7e:2c:9e:f7:d1:90:73:db:
                    f4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:84:03:58:43:83:CF:48:13:97:B0:F9:C5:3F:D7:D1:B7:B0:23:5A
            X509v3 Authority Key Identifier:
                keyid:21:CE:31:1C:8E:D6:0B:EF:1B:5E:4F:7D:3B:86:41:07:81:44:18:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:ea:f4:fe:7d:dc:f0:c0:2d:32:14:93:79:aa:d6:da:8a:98:
         d6:8d:1c:3c:dc:eb:ab:d8:eb:81:47:2f:6b:83:4b:c4:93:75:
         0d:8d:f7:50:e1:39:ba:90:55:84:58:ee:65:97:89:55:13:7d:
         79:70:3e:fd:89:4d:a6:87:79:41:de:a0:2c:59:a8:ef:0e:c1:
         d4:d7:f8:87:50:6e:4c:3f:aa:3e:8c:75:5f:42:05:bd:95:e4:
         2a:fe:f2:90:69:bf:ef:87:73:5a:f7:8d:b4:a5:7f:5f:09:02:
         11:22:3a:7a:23:cc:c9:08:63:fe:56:0d:c6:5e:2f:fe:63:be:
         c6:fe:c8:e6:f7:28:b3:cf:99:5b:b1:cf:de:26:a0:a2:3c:8c:
         97:59:6c:1a:a3:35:f7:33:b5:ed:97:9f:4d:0d:3d:35:ed:29:
         9c:3e:90:73:ee:d2:a6:f1:00:f4:75:0a:91:a4:a4:f3:f4:e0:
         87:cc:ba:00:41:3d:da:14:30:1c:81:68:88:e1:40:f8:b8:3f:
         ba:08:d8:62:78:cc:d8:e2:ec:5b:0d:dd:a8:10:7e:5d:d8:74:
         2c:96:e0:71:01:b4:20:2b:7a:02:a8:2a:bb:7d:41:c8:03:20:
         f8:43:1b:56:59:01:ae:c7:90:32:4f:a1:14:08:d8:61:0d:db:
         54:f6:8c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 03:31:17 2025 by rpki-client