Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft
File:                     2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft (raw, json)
Hash identifier:          3wL+x2wD0hMwH1hC7piRL16W3hLyOsZqz1XvWAL3YTo=
Subject key identifier:   CA:75:C8:9F:F2:F1:D2:58:02:91:10:A7:DD:81:71:6E:6E:06:33:CE
Authority key identifier: D9:54:13:EB:29:A4:3D:2E:45:FE:CD:D8:8E:E5:39:6C:96:BF:1C:B5
Certificate issuer:       /CN=d95413eb29a43d2e45fecdd88ee5396c96bf1cb5
Certificate serial:       0197696190F7A3C767741E015B375A603E7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2VQT6ymkPS5F_s3YjuU5bJa_HLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft
Manifest number:          0CC5
Signing time:             Fri 13 Jun 2025 13:01:31 +0000
Manifest this update:     Fri 13 Jun 2025 13:01:31 +0000
Manifest next update:     Sat 14 Jun 2025 13:01:31 +0000
Files and hashes:         1: 2VQT6ymkPS5F_s3YjuU5bJa_HLU.crl (hash: uwVrjaW9BfSurcP82DPnIf4DgPUja4Feu9ZfOMbOguI=)
                          2: NJJQIAvEDlH4wZu4zaM1fPZpVGI.roa (hash: zmrVvshEoDYlY+afA5JOHL7lyVYdqt5pXq3EABMgUFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2VQT6ymkPS5F_s3YjuU5bJa_HLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:61:90:f7:a3:c7:67:74:1e:01:5b:37:5a:60:3e:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d95413eb29a43d2e45fecdd88ee5396c96bf1cb5
        Validity
            Not Before: Jun 13 13:01:31 2025 GMT
            Not After : Jun 14 13:01:31 2025 GMT
        Subject: CN=ca75c89ff2f1d258029110a7dd81716e6e0633ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0e:e0:c4:d9:b8:f5:05:c2:55:09:02:b6:31:
                    11:29:a4:d0:98:1e:74:f3:e3:e7:ec:e3:f0:a4:91:
                    99:4d:d3:06:4c:6b:78:c3:9c:e5:68:a7:5c:26:4f:
                    98:ba:f5:42:0c:dc:01:5a:82:ed:a4:38:ea:12:ab:
                    44:33:c3:e1:8a:87:ae:5e:a7:9b:a1:47:d9:7d:0c:
                    4f:13:3b:ca:e0:77:b0:3e:a7:d2:37:62:64:7e:8b:
                    96:2a:a3:3f:3d:c0:e8:09:eb:6a:f8:1f:93:ec:39:
                    b1:06:1d:39:a5:9f:9f:41:ab:b5:ad:9c:dc:73:a7:
                    c3:0d:d5:66:61:b5:20:c9:59:40:32:d2:56:c8:29:
                    b6:6e:db:90:0d:0c:f8:13:03:0b:ae:64:ee:21:50:
                    cf:8f:eb:3b:55:d0:83:87:10:dc:14:ab:b8:96:4e:
                    15:eb:0b:73:da:a2:ad:42:d6:f7:ac:49:a4:cf:a4:
                    8e:80:98:af:72:4d:a7:6d:64:2c:f3:81:d2:6e:17:
                    e5:5d:09:8a:10:05:d9:f1:c9:33:a6:9d:0d:5e:69:
                    22:fe:71:5e:e7:ec:05:d0:52:df:0a:8a:2d:b5:09:
                    55:c0:78:77:e7:f2:dc:6d:21:94:72:6b:01:d3:5a:
                    ef:37:15:1d:1f:56:3c:e6:ef:1e:0c:34:57:05:60:
                    1f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:75:C8:9F:F2:F1:D2:58:02:91:10:A7:DD:81:71:6E:6E:06:33:CE
            X509v3 Authority Key Identifier:
                keyid:D9:54:13:EB:29:A4:3D:2E:45:FE:CD:D8:8E:E5:39:6C:96:BF:1C:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VQT6ymkPS5F_s3YjuU5bJa_HLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:e4:a9:f5:26:d3:5f:8e:c5:c7:d9:6b:e2:a9:1a:06:b2:dc:
         51:53:18:51:9d:88:d4:84:80:f2:5a:f9:c5:05:2d:c1:18:5b:
         13:f5:67:22:b2:10:54:20:6a:58:1d:3a:9f:1c:1f:3f:b8:36:
         1e:37:07:2e:f4:e1:e8:cc:76:8c:70:06:be:f6:33:17:c4:5d:
         1f:b5:cf:8e:b0:25:48:bc:8e:de:50:e3:69:32:76:76:c4:ce:
         de:86:5a:05:23:f6:41:f9:92:e1:f4:91:b8:fa:96:10:ec:65:
         9d:9c:fa:cd:8b:f9:9c:82:f1:ee:7e:55:0e:e1:c4:1d:ab:c1:
         bd:0c:1d:e1:6a:8e:6b:87:00:b6:b3:70:9d:c8:b5:90:a7:0f:
         e9:d9:59:79:68:37:86:b7:81:c1:00:f4:a9:e2:ba:78:36:6a:
         3f:cd:9b:da:88:7a:fd:7e:13:86:d7:22:c7:1c:75:02:b8:ce:
         e7:53:57:0b:23:23:99:79:c0:d2:d3:f2:1f:e7:20:da:14:2d:
         f1:24:bb:fe:cf:c5:7a:83:96:13:59:08:b9:b6:4b:8c:63:f8:
         c1:03:b0:42:7d:de:25:26:6d:20:62:b2:f8:56:33:3b:ff:9f:
         63:82:bf:3a:ef:77:bc:2e:ed:18:64:a4:8e:d6:37:e4:75:06:
         70:30:a5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:19:28 2025 by rpki-client