Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft
File:                     2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft (raw, json)
Hash identifier:          gO+q6cuaGMeT1csYmKGnadDm2+PQG0abPbyZpxM1z7M=
Subject key identifier:   55:3E:97:4E:98:4B:D1:7D:C2:BC:D1:D2:72:8A:0C:8B:4C:E5:B6:6E
Authority key identifier: D8:76:63:C5:E1:4F:13:74:6C:80:F6:0B:A3:63:49:3D:9A:49:34:CC
Certificate issuer:       /CN=d87663c5e14f13746c80f60ba363493d9a4934cc
Certificate serial:       0198808B1A223030461E8AAD9E952D47218A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2HZjxeFPE3RsgPYLo2NJPZpJNMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft
Manifest number:          06B7
Signing time:             Wed 06 Aug 2025 18:00:56 +0000
Manifest this update:     Wed 06 Aug 2025 18:00:56 +0000
Manifest next update:     Thu 07 Aug 2025 18:00:56 +0000
Files and hashes:         1: 2HZjxeFPE3RsgPYLo2NJPZpJNMw.crl (hash: 1GaKjUgCZPVjFnJVpQVS2hTufXdijFCaSZEgoUgmWOM=)
                          2: eNatCM_ng_ZzT0XjnAhnE8JwsaM.roa (hash: NiVcVjOLTxJgHF9YkgZvM/M3+zTG2kPIupDct4SjNb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2HZjxeFPE3RsgPYLo2NJPZpJNMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:8b:1a:22:30:30:46:1e:8a:ad:9e:95:2d:47:21:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d87663c5e14f13746c80f60ba363493d9a4934cc
        Validity
            Not Before: Aug  6 18:00:56 2025 GMT
            Not After : Aug  7 18:00:56 2025 GMT
        Subject: CN=553e974e984bd17dc2bcd1d2728a0c8b4ce5b66e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:91:1e:ec:e1:c7:ee:5b:b1:2a:ee:09:72:8f:
                    7d:6a:b3:8d:79:f7:53:cd:8c:ea:f7:40:f7:a2:cf:
                    92:7b:30:56:89:43:98:18:74:e0:f9:c1:63:30:11:
                    f4:ec:31:f2:ce:02:63:87:8b:e5:d5:8f:21:d3:54:
                    f9:9a:bf:20:fe:4d:08:c3:93:c2:45:c8:73:fa:43:
                    f2:ca:4a:ff:2e:e1:0d:4a:44:75:5b:bf:56:90:17:
                    66:ba:ae:76:df:20:0a:14:4d:66:d3:4e:1f:f0:99:
                    3b:29:1f:33:e1:ed:21:5b:92:03:7b:70:93:00:1f:
                    12:c9:2e:2f:de:57:af:f8:04:91:3f:13:e4:5a:16:
                    e4:ce:37:e0:e1:82:8d:9c:31:b0:21:62:f9:93:6f:
                    9b:45:f0:4f:2f:68:26:ee:9e:fb:08:a5:b8:79:cd:
                    c5:ab:09:d9:d5:f0:87:61:ff:03:e7:03:69:c4:79:
                    30:f9:1f:5a:66:a4:2c:ab:84:d9:3b:f0:ea:dd:e8:
                    a4:2a:6a:72:4c:48:eb:48:cb:8f:f6:2c:c7:dc:b2:
                    ab:0c:d0:3d:f3:4e:fd:85:c0:69:04:f5:86:f8:8e:
                    ae:89:fa:24:14:1f:d2:80:c9:16:f8:3c:4a:e3:e1:
                    69:5a:58:b5:10:c8:5f:5f:48:c6:b2:65:f3:db:4c:
                    48:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:3E:97:4E:98:4B:D1:7D:C2:BC:D1:D2:72:8A:0C:8B:4C:E5:B6:6E
            X509v3 Authority Key Identifier:
                keyid:D8:76:63:C5:E1:4F:13:74:6C:80:F6:0B:A3:63:49:3D:9A:49:34:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HZjxeFPE3RsgPYLo2NJPZpJNMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:8e:a6:2f:58:9d:c0:20:9f:22:70:30:2e:7e:fe:31:af:3c:
         fe:c6:5c:ee:11:52:6f:b0:59:8e:df:80:ca:56:ab:b9:3c:c9:
         59:68:dd:41:cb:92:bb:70:6e:c6:72:91:c9:af:42:54:54:8b:
         96:91:a8:5d:5f:7d:58:b3:d1:70:78:4e:a3:93:b8:7a:50:7b:
         68:10:39:a5:ed:6e:c8:eb:67:b4:db:65:27:91:53:a2:ae:7d:
         fd:ce:19:90:72:ff:1f:cf:55:c6:5a:4b:5f:aa:7b:14:25:da:
         c5:b3:b9:e0:52:30:af:72:07:f2:cc:96:78:1c:28:3d:04:92:
         6a:c7:af:7c:0b:35:a6:57:1d:20:d6:e5:0f:3b:d1:fc:1a:01:
         17:87:cd:25:23:09:b6:62:9e:03:0b:b8:bb:9b:f2:97:8d:8c:
         35:ea:18:8d:23:dd:05:20:78:68:5e:f2:d2:b3:15:ee:f3:cf:
         f2:d1:ed:60:b9:fb:f3:1e:85:c0:0e:9b:7a:3f:b9:ac:86:57:
         a8:49:09:fa:b9:12:40:f7:5c:86:8b:01:db:5f:a3:67:04:f0:
         2f:d4:67:11:ba:fb:03:1d:6d:d2:22:20:de:13:f9:a5:57:82:
         7c:90:02:50:60:42:db:df:df:14:8b:64:89:3b:c9:6e:52:db:
         52:cb:32:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:30:37 2025 by rpki-client