Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
File:                     H2_gB5F-tjJ74wYamvbsVI01MGY.mft (raw, json)
Hash identifier:          tCIV+10Rp+eHbRb37AMN9ivuojZrsqzmVbA+7jV4xMQ=
Subject key identifier:   75:7D:96:1E:22:68:0F:79:C8:0D:2C:AA:E9:B6:C5:19:20:4F:6C:A8
Authority key identifier: 1F:6F:E0:07:91:7E:B6:32:7B:E3:06:1A:9A:F6:EC:54:8D:35:30:66
Certificate issuer:       /CN=1f6fe007917eb6327be3061a9af6ec548d353066
Certificate serial:       0197819FFCA67538A5736F5550DFF2BBCF66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
Manifest number:          0657
Signing time:             Wed 18 Jun 2025 06:00:35 +0000
Manifest this update:     Wed 18 Jun 2025 06:00:35 +0000
Manifest next update:     Thu 19 Jun 2025 06:00:35 +0000
Files and hashes:         1: H2_gB5F-tjJ74wYamvbsVI01MGY.crl (hash: 13AhvvrtH1J6w7ygzSV2OFb5TzrACzrhFQGWyrw39oU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:81:9f:fc:a6:75:38:a5:73:6f:55:50:df:f2:bb:cf:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f6fe007917eb6327be3061a9af6ec548d353066
        Validity
            Not Before: Jun 18 06:00:35 2025 GMT
            Not After : Jun 19 06:00:35 2025 GMT
        Subject: CN=757d961e22680f79c80d2caae9b6c519204f6ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fc:63:eb:20:24:a7:ac:37:c1:d3:24:4e:3b:
                    92:3f:54:44:3b:cd:e3:26:50:f4:2e:45:0f:5b:68:
                    16:83:ed:62:bb:10:57:6b:36:78:4c:e0:18:24:a5:
                    20:9f:5e:a0:d8:71:e7:c7:08:99:94:27:cd:b4:27:
                    2f:6b:92:29:d2:d8:54:a3:aa:c8:e1:cc:f3:4b:af:
                    78:57:d2:66:9a:43:58:50:f4:57:68:7b:b0:01:37:
                    ff:23:67:af:a3:cf:02:0a:8a:a2:38:cd:5d:f9:94:
                    34:b3:b4:fc:a8:6d:15:3c:1f:1f:dd:b2:cc:8b:0c:
                    88:87:7d:7b:8c:7f:b3:60:0c:ec:eb:d7:32:76:ed:
                    13:ae:02:fb:d2:87:6d:2a:92:76:e3:5b:2b:62:82:
                    c4:f1:c4:a4:92:71:cf:53:d8:08:87:44:46:78:f2:
                    2c:6c:61:92:00:8c:fa:06:c8:85:54:cc:1e:dc:62:
                    c9:69:2b:7e:05:cf:27:80:fa:23:29:16:3f:49:48:
                    f4:bd:e5:95:9a:12:08:3d:ef:e3:d9:4d:fe:0f:d8:
                    73:4f:ab:13:c1:d4:f6:3e:d6:60:f1:f5:e5:69:28:
                    de:5f:e3:1c:fa:40:cd:c2:99:e2:01:8f:5f:ac:a5:
                    68:db:24:15:a1:14:1c:4c:2d:12:87:18:cc:53:67:
                    dd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:7D:96:1E:22:68:0F:79:C8:0D:2C:AA:E9:B6:C5:19:20:4F:6C:A8
            X509v3 Authority Key Identifier:
                keyid:1F:6F:E0:07:91:7E:B6:32:7B:E3:06:1A:9A:F6:EC:54:8D:35:30:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:14:f1:1f:96:d6:6c:8c:7f:1b:11:9e:8b:60:f7:5a:04:74:
         ae:95:e6:b1:93:e7:91:da:62:38:b2:1e:94:33:d8:1d:29:14:
         98:b7:7c:ff:09:85:33:80:dc:df:5d:5e:7a:d5:81:c6:19:e9:
         d1:2b:62:b4:50:05:c3:e9:28:5d:5b:d6:18:37:a6:a4:b6:fd:
         36:c3:93:b8:f6:8f:cd:ff:31:36:92:d9:06:c2:77:67:37:a1:
         2e:9c:a1:7f:a4:40:20:75:c1:ff:a7:86:08:c1:45:e7:ef:7a:
         28:03:96:6b:94:d5:7b:45:cc:1c:0c:83:0f:e0:30:77:0b:9a:
         43:2b:46:5f:6c:35:1e:66:b7:3c:36:b0:93:12:0f:10:35:a3:
         6a:9f:eb:2c:24:55:cb:9c:04:96:a8:90:12:4b:c8:a9:ab:fa:
         4d:42:22:ee:92:e4:c4:f7:f0:af:86:b4:cc:1a:c1:23:e9:fd:
         d9:fc:f1:23:90:fc:cd:48:40:ca:37:01:26:8a:3b:36:db:43:
         4d:fd:9c:59:63:55:f7:b9:9f:60:b0:b0:e1:3e:15:b9:2a:d8:
         59:a7:2a:96:69:8b:a1:f2:01:88:ba:42:00:bb:84:0f:f6:9e:
         fd:01:24:d2:0f:bd:b2:9b:2a:28:21:0e:84:fa:8a:33:9f:2c:
         8f:b3:5a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 09:18:13 2025 by rpki-client