Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
File:                     IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft (raw, json)
Hash identifier:          ircGxgu/iurEyFIcYE/3SdgkqLFILoHcUeS+x6BvvO0=
Subject key identifier:   EF:8F:54:D0:71:0F:79:06:C7:8B:2A:5E:25:6A:B9:1C:B4:EC:74:79
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Certificate issuer:       /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial:       01974B1F470E9F3D56BE38E195A83628BF55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
Manifest number:          15B8
Signing time:             Sat 07 Jun 2025 16:00:30 +0000
Manifest this update:     Sat 07 Jun 2025 16:00:30 +0000
Manifest next update:     Sun 08 Jun 2025 16:00:30 +0000
Files and hashes:         1: B6aGxUDSSan1LbYvufjyd3IQLUs.roa (hash: dwUg5aBoWkQufw+jFxFp1hxo39/3rnNdCzkl0XPMgUM=)
                          2: IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl (hash: irFnk67IGXYtjq7DWL/tDgsRz80V2ChpzrT1AOPzNDg=)
                          3: P1ooM0tRadnnfs7yPA4JyGHOu90.roa (hash: qt3kTikonByn5yyGAReXdJ6ZcgQBVF+qY0HIxFsZ/us=)
                          4: P2j-hUrnI_G8_z_xhTDbKbOjagw.roa (hash: KXKpMQn72rg2fYHpKvlZTFcp58U/Tju8WHXUSLpo2kU=)
                          5: RC7wgRAs2o4H2l1TLqn8NZUndUY.roa (hash: SCrWR5DUqk0ILJy6T4Si10/+i7OXDOm/wTyU6YmTVRU=)
                          6: TU-tMONGCT3DfIZWWAUdCOe9_Ro.roa (hash: F4YEB/jOyjkaM49IR5P9MseesiwqC68DyQAyT79ZX1E=)
                          7: jNrtD4zRsZVN6RiJAEomlUdUZdA.roa (hash: KgT9cW1vNdUm5rrXt6b08EWBC589TMe3HgUs7IKuzA4=)
                          8: vNOS5vUWCqJEMFsm4Huo1TSEvCc.roa (hash: yDPHPi4lOHCdMJ+/kRIvQ07jiloiQq/r5yFG565XkNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:1f:47:0e:9f:3d:56:be:38:e1:95:a8:36:28:bf:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
        Validity
            Not Before: Jun  7 16:00:30 2025 GMT
            Not After : Jun  8 16:00:30 2025 GMT
        Subject: CN=ef8f54d0710f7906c78b2a5e256ab91cb4ec7479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:96:a2:1e:6d:ad:d2:7b:cc:b6:74:3b:6e:37:
                    25:f4:20:9f:bd:30:a8:01:c1:48:ab:65:82:7e:77:
                    fd:30:51:ae:9d:cf:12:a7:07:90:29:77:0f:b2:27:
                    b9:88:fd:b9:d5:5a:e3:e4:3d:c1:ee:28:ff:26:20:
                    3e:cc:84:56:2b:a2:f6:2c:01:f0:61:12:3b:8c:af:
                    b3:41:40:14:8c:0f:4d:cc:18:3f:27:21:34:8a:da:
                    eb:d5:0c:6c:72:9e:e8:f8:65:c2:51:f4:75:28:81:
                    b6:50:3b:ec:7c:a5:4d:a9:90:1d:50:39:3d:d4:a2:
                    c1:32:ac:e5:7b:75:f8:6e:33:d0:b1:45:1b:3e:69:
                    e5:57:a3:db:59:07:4e:d8:46:c0:e4:48:34:6a:d4:
                    d4:70:65:ac:0a:a6:b8:8b:21:33:32:e2:9e:65:50:
                    9f:bc:1f:f1:6c:7f:16:a1:da:3f:7e:8d:48:0d:e8:
                    58:df:93:74:a9:19:72:15:4b:75:08:fa:8e:32:d6:
                    e0:dd:28:98:ac:ba:ef:a0:1e:c8:68:b2:92:2b:25:
                    ac:51:2f:7d:47:c7:1d:e6:95:18:32:e9:a8:f2:3f:
                    7e:0b:d4:f4:25:21:11:7a:a7:e3:9d:57:3c:62:7d:
                    5f:e8:22:18:fe:d2:21:79:82:ce:d2:bb:fa:b2:a9:
                    cd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:8F:54:D0:71:0F:79:06:C7:8B:2A:5E:25:6A:B9:1C:B4:EC:74:79
            X509v3 Authority Key Identifier:
                keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:85:71:a0:c4:85:48:e0:2f:fb:05:8a:a6:f2:73:13:7f:07:
         7b:f3:77:82:d4:2b:04:a4:51:e2:f0:24:8f:c9:a5:63:66:1c:
         b6:96:db:0f:9f:5a:85:45:2b:d0:2e:a8:2f:d6:53:c7:76:52:
         a3:cf:7b:d9:6f:4f:77:2c:f6:66:b4:21:d3:af:9f:b4:68:69:
         f4:b8:79:72:e2:a6:18:fd:67:9c:24:3a:da:8c:c8:ec:fc:b5:
         89:3e:ae:2b:b6:94:4d:f9:74:39:a6:5d:df:a8:5b:12:03:1f:
         61:0d:96:d0:9f:14:d2:48:0a:7a:d0:9b:bd:c6:dd:41:43:56:
         e7:5d:9c:7b:4c:56:71:d5:f2:2d:c0:23:b3:8c:76:a8:69:db:
         72:bf:5e:b2:57:7f:7f:14:15:36:4a:3f:15:7f:bb:d1:22:35:
         ad:c0:a1:f6:cf:d5:aa:83:30:bf:da:2f:88:fc:91:ed:0b:f7:
         09:35:ce:e3:10:bd:a7:97:35:7f:5d:d1:43:3c:6b:96:06:33:
         1f:26:7d:d0:19:89:d3:8e:13:7b:1e:c0:94:51:1c:fa:6d:75:
         9b:07:c9:a4:94:a0:83:6b:4b:6b:1b:34:8c:8d:1a:86:a3:4f:
         ff:e8:19:9e:d8:ce:71:b3:67:95:14:ac:96:40:1e:ac:26:16:
         76:b1:50:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:16:08 2025 by rpki-client