Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
File:                     2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft (raw, json)
Hash identifier:          EBU6HR4rVxVe5Fd/BFwuFJa2PdvTdE5oiNZ7/3wKC4E=
Subject key identifier:   69:84:51:6A:BD:E4:5F:E0:B6:98:75:94:0F:8C:79:33:35:B1:31:B3
Authority key identifier: DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
Certificate issuer:       /CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Certificate serial:       0196A389C88CD862A89EE6DB04B3C861808A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
Manifest number:          03D7
Signing time:             Tue 06 May 2025 03:00:37 +0000
Manifest this update:     Tue 06 May 2025 03:00:37 +0000
Manifest next update:     Wed 07 May 2025 03:00:37 +0000
Files and hashes:         1: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl (hash: P8D96InH8VaaulmS8T3Zm+5Cy1NuejTaXT78ue3SbDs=)
                          2: dVwX-cCmOxrn9_gsdwOdsiWFkY0.roa (hash: Vs+r4/uqJb40X1RP1KHDHIrHsJL+2YTLULkN+N2HJCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 03:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a3:89:c8:8c:d8:62:a8:9e:e6:db:04:b3:c8:61:80:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
        Validity
            Not Before: May  6 03:00:37 2025 GMT
            Not After : May  7 03:00:37 2025 GMT
        Subject: CN=6984516abde45fe0b69875940f8c793335b131b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5f:8d:62:12:5f:39:92:15:76:95:28:a7:f8:
                    fe:8a:82:4f:11:47:4a:e1:50:37:e2:57:42:9c:a5:
                    c7:1f:f7:8d:74:74:4c:66:2f:3c:6d:b3:17:b5:09:
                    4a:76:ab:b7:bd:1f:be:5d:0f:22:5b:6f:6f:32:0f:
                    e9:8e:84:3c:f6:f5:b9:7a:76:2a:90:4f:0e:30:7d:
                    24:84:7f:46:e4:6f:db:e0:ac:62:62:23:4e:66:c7:
                    88:bb:79:68:c1:ca:a1:4c:f4:24:58:61:a6:1c:69:
                    a8:c2:e4:6f:2a:a1:e1:13:e8:e7:c2:a4:f6:7e:53:
                    ce:14:bd:cb:29:6b:8b:df:62:3d:02:24:99:3d:f0:
                    9e:97:f3:41:ed:57:ba:88:4a:04:e8:7f:d8:13:d3:
                    2e:a1:7c:26:55:94:34:e8:1d:b8:2f:26:6e:be:b9:
                    9a:9d:5e:8f:88:5a:4b:23:ee:05:41:d4:b6:ac:27:
                    e1:40:00:cf:68:2a:d9:41:61:4a:37:a9:a3:21:10:
                    85:95:87:53:e3:93:f4:49:67:f2:ab:92:d8:3a:79:
                    aa:50:61:31:32:2d:67:03:b1:71:81:40:0a:0d:3e:
                    e2:98:aa:ad:5e:8c:93:3f:d9:04:df:aa:42:8f:23:
                    58:7a:c1:a1:29:42:52:67:b9:ba:af:35:bd:47:7c:
                    b2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:84:51:6A:BD:E4:5F:E0:B6:98:75:94:0F:8C:79:33:35:B1:31:B3
            X509v3 Authority Key Identifier:
                keyid:DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:6f:4f:2c:9d:de:c7:5c:74:69:41:d4:de:50:95:13:57:f1:
         cd:01:91:56:25:8a:f8:82:45:53:36:6d:c3:4f:71:14:cf:7e:
         bf:0b:1b:42:b5:a1:ef:75:41:6d:0c:07:53:49:cc:ab:f6:ca:
         90:31:88:b6:d1:1d:a5:8a:45:03:5a:e9:3b:f2:3f:aa:e8:a3:
         c7:44:c2:15:44:d3:68:4a:32:50:67:60:d3:a8:0c:74:38:54:
         30:bc:2a:1a:d7:11:2b:09:1d:9a:2f:e4:30:62:56:00:8c:a2:
         50:1a:23:f0:f5:8c:91:21:83:2f:07:7c:22:0d:7e:3e:ad:f7:
         69:04:fc:53:4c:01:ab:f2:2a:fb:f5:ff:a2:c4:d9:42:f5:e6:
         62:b5:df:b0:a3:0d:88:e8:c2:00:29:2f:51:00:fb:36:db:6b:
         58:0e:99:85:95:e4:61:41:b9:af:0e:17:9b:90:39:d3:66:b5:
         ad:98:b6:01:c6:4f:34:77:9b:ce:93:06:fc:a5:51:36:c4:66:
         4c:a9:7d:c2:6e:5c:de:d0:de:b3:3a:15:78:61:12:f5:c5:96:
         8f:19:c7:3c:19:05:77:7c:da:79:bb:10:68:dc:8f:81:d5:10:
         fa:ef:64:6f:ec:80:f6:e8:97:45:59:1e:90:f4:13:2f:6a:a2:
         4f:c4:c9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:20:58 2025 by rpki-client