Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
File:                     g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft (raw, json)
Hash identifier:          A4JYxJA37xr8j6t5nQ7VOuzUa4kFjxoT7Hnm6fFteX0=
Subject key identifier:   9E:67:A7:38:B4:B4:2C:1A:43:DC:08:E5:7E:B8:B3:8E:F1:97:54:BF
Authority key identifier: 83:64:6A:B7:06:21:48:ED:B8:FA:9B:60:A8:31:C8:24:0D:CA:B8:04
Certificate issuer:       /CN=83646ab7062148edb8fa9b60a831c8240dcab804
Certificate serial:       0197857D223A1E1AE9A9A37C188C6061335B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g2RqtwYhSO24-ptgqDHIJA3KuAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
Manifest number:          0C71
Signing time:             Thu 19 Jun 2025 00:00:59 +0000
Manifest this update:     Thu 19 Jun 2025 00:00:59 +0000
Manifest next update:     Fri 20 Jun 2025 00:00:59 +0000
Files and hashes:         1: 20epV1j0HCMZ-uCYpk_kUZek4Go.roa (hash: 0IJbxaBTBJrWj2eiqCnd7zV+Z0NBZxwRizr0fkaGu8A=)
                          2: g2RqtwYhSO24-ptgqDHIJA3KuAQ.crl (hash: x8WXKnyfwhW58ogyKCZXI/AfxC0F6ynLy8bQ7FGAJ1M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g2RqtwYhSO24-ptgqDHIJA3KuAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 23:47:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:85:7d:22:3a:1e:1a:e9:a9:a3:7c:18:8c:60:61:33:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83646ab7062148edb8fa9b60a831c8240dcab804
        Validity
            Not Before: Jun 19 00:00:59 2025 GMT
            Not After : Jun 20 00:00:59 2025 GMT
        Subject: CN=9e67a738b4b42c1a43dc08e57eb8b38ef19754bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0b:70:cd:ab:d4:a7:0d:6a:53:2c:8d:5f:d8:
                    6b:4a:e9:87:16:76:4c:7b:82:9b:ef:54:b7:a2:ff:
                    72:df:99:cb:75:54:77:3f:8a:7e:68:28:38:f3:16:
                    18:d1:9c:56:59:dd:8b:34:7e:8f:be:bc:08:77:60:
                    54:3e:a5:85:07:32:5d:71:c1:32:34:6f:bb:41:70:
                    cc:03:f7:93:c6:d8:cd:5e:12:45:65:0a:ca:7d:1d:
                    48:84:4d:a2:fc:e1:4e:c5:c8:9c:17:40:ca:d4:f2:
                    40:c1:b9:97:cb:4c:68:aa:a5:84:2e:d6:cd:71:4d:
                    5a:e3:6c:ec:c2:19:f1:3e:e6:e5:57:2f:f5:86:f0:
                    e8:54:53:38:ba:ae:bf:8d:ac:3e:aa:ba:08:29:83:
                    51:ba:17:96:43:9a:b9:20:74:16:6d:d2:e6:4a:03:
                    ba:e9:0f:0c:eb:84:e9:4b:70:73:86:6c:a8:75:83:
                    6e:1c:64:ea:da:ec:f3:7b:da:38:00:8c:af:2a:40:
                    ef:80:89:4b:a9:20:1c:2c:4d:88:6b:94:13:e0:58:
                    90:37:68:5d:1c:ec:50:31:82:3e:4f:ef:40:10:d0:
                    14:58:fc:3e:42:56:fe:f6:d4:2e:99:9e:8c:34:33:
                    42:f3:91:e5:8c:f3:ba:28:40:e2:aa:46:e2:5b:42:
                    d3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:67:A7:38:B4:B4:2C:1A:43:DC:08:E5:7E:B8:B3:8E:F1:97:54:BF
            X509v3 Authority Key Identifier:
                keyid:83:64:6A:B7:06:21:48:ED:B8:FA:9B:60:A8:31:C8:24:0D:CA:B8:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2RqtwYhSO24-ptgqDHIJA3KuAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:5a:91:03:7f:21:b9:3b:41:d3:c8:59:8f:cd:28:a7:f3:e3:
         3e:20:a9:07:e3:55:62:38:82:c5:f5:a3:55:86:22:36:e2:a8:
         87:9c:fd:54:80:6b:89:c2:df:de:6e:70:5b:90:08:9e:e7:df:
         38:d6:93:fb:af:b9:cb:67:48:15:4f:9d:4c:f9:ca:70:92:60:
         37:ac:01:07:4a:b4:93:60:7a:9a:7f:42:78:fa:06:95:2f:05:
         ea:2a:42:9a:2b:35:85:21:97:1e:7c:0d:d3:bf:ef:85:36:be:
         e0:32:51:ae:76:36:33:b3:2c:07:8d:cc:b8:13:02:17:95:38:
         d7:07:2a:68:e0:cf:f3:da:6b:d0:96:31:ca:af:9e:09:57:79:
         39:68:2d:97:d0:59:41:e8:d5:41:8e:63:41:2e:53:cd:43:e4:
         97:94:6a:15:a8:93:51:54:f2:7a:21:73:43:31:d0:9b:a5:b0:
         2b:15:09:f5:80:24:c7:a4:be:89:70:69:dc:ea:69:8f:6e:f3:
         12:b6:9e:6d:f5:b0:84:1e:2c:5c:d8:32:ab:71:3e:4c:f0:c9:
         e5:68:b8:c9:f2:e0:d9:17:3a:b0:5d:e4:a4:6d:f4:c8:62:12:
         af:49:8a:7c:93:e2:1d:b4:d1:85:60:df:4b:2b:c1:0f:7b:25:
         5a:89:7a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:13:39 2025 by rpki-client