Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
File:                     2j0-lJKxHEZpFVt8juTxR1S4UiI.mft (raw, json)
Hash identifier:          a3To2abEVGTqh66G3oS+MU0taCQ6EJo7/dDRzqpNsUc=
Subject key identifier:   00:36:30:4B:50:86:07:DA:D6:BB:44:97:BB:C2:12:17:15:37:18:F7
Authority key identifier: DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
Certificate issuer:       /CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
Certificate serial:       019775D2EA36E18F216576F717307A38B662
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
Manifest number:          0B6C
Signing time:             Sun 15 Jun 2025 23:00:46 +0000
Manifest this update:     Sun 15 Jun 2025 23:00:46 +0000
Manifest next update:     Mon 16 Jun 2025 23:00:46 +0000
Files and hashes:         1: 2j0-lJKxHEZpFVt8juTxR1S4UiI.crl (hash: mK2Oj3wMzpfi4XIbkRKYgoI49RKh8UUVTMzDaRbr/M8=)
                          2: 8A_vFBgMpFWglBEQF7o4I6LIqZI.roa (hash: RJK8dbnaebBPle7iamBGAEVJsY9JkiFkWcMwD2OIcfg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 23:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:75:d2:ea:36:e1:8f:21:65:76:f7:17:30:7a:38:b6:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
        Validity
            Not Before: Jun 15 23:00:46 2025 GMT
            Not After : Jun 16 23:00:46 2025 GMT
        Subject: CN=0036304b508607dad6bb4497bbc21217153718f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:87:77:98:9c:77:55:bd:bb:d9:f3:1f:94:de:
                    30:9c:41:b9:77:cb:81:ee:66:66:68:d6:a9:00:5f:
                    16:76:1e:7f:78:a2:0a:a7:af:57:d9:ed:00:94:87:
                    dd:40:49:78:74:bb:0c:fb:36:8b:92:b4:d9:ad:a7:
                    05:1c:05:5f:7c:c7:09:71:b9:8c:70:0b:4d:5c:8f:
                    25:0e:56:d6:e0:f3:34:12:59:eb:08:d8:ac:b6:26:
                    5c:29:19:f2:d1:b1:ae:6b:a7:31:97:ad:8c:2a:d0:
                    f7:46:41:a2:02:cf:a9:5c:fe:e6:f9:ed:c8:37:f8:
                    8e:32:9b:da:f9:9b:b9:30:54:5e:bb:b2:04:0f:68:
                    2f:4c:2f:60:bc:37:c3:30:a8:78:5a:2b:53:7b:a5:
                    94:1e:b8:95:00:f2:c4:33:07:7b:4c:75:00:71:30:
                    cb:7f:65:62:d8:41:11:8d:dd:27:0c:21:d3:d4:6b:
                    51:d3:e0:63:53:f9:d5:85:7f:ca:87:09:3b:2a:a8:
                    da:39:db:0d:25:6d:61:b2:5e:93:85:a2:72:ff:f1:
                    f4:92:49:43:6e:80:c8:1f:95:1a:7b:d3:6b:2d:0d:
                    88:e0:14:5a:a9:54:a6:63:e9:c6:33:5f:83:6a:53:
                    f1:69:63:43:d9:76:dc:a4:bd:a8:9a:cc:a2:fa:20:
                    9a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:36:30:4B:50:86:07:DA:D6:BB:44:97:BB:C2:12:17:15:37:18:F7
            X509v3 Authority Key Identifier:
                keyid:DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:0e:70:e1:b0:e3:43:21:21:99:3a:37:b0:f3:fa:a0:6e:e1:
         6a:02:9b:a4:8f:ff:b0:f9:26:90:33:1b:60:01:50:c8:f2:7b:
         f5:cf:a2:df:a1:6f:3f:0f:54:ed:af:12:81:a0:96:9f:83:a7:
         40:03:b9:73:11:b1:f6:a2:c9:57:a0:b3:58:6a:db:79:76:53:
         1f:3b:9f:3f:f7:93:38:21:35:2d:37:98:50:bc:b2:87:53:58:
         4d:92:9d:0d:85:65:7f:9d:fd:b5:54:44:0e:17:f1:32:9b:c9:
         3d:ac:a1:6d:e6:e5:4b:54:3b:08:39:f0:7e:4c:7d:fe:56:6b:
         74:34:c0:6e:25:11:b0:b7:c5:57:1a:d2:5c:81:43:6d:db:52:
         ef:35:01:16:39:8b:57:e9:0e:70:d1:4f:89:61:f3:1e:6c:c0:
         b0:d9:e7:e7:c3:6c:6c:a6:1f:28:bc:d4:33:fd:09:d3:86:16:
         70:ea:75:f0:06:30:5e:a2:b6:a3:d0:fa:d0:8b:9c:8d:78:1c:
         0e:37:88:c0:86:c3:5d:29:f8:89:57:3c:cb:94:7d:08:cb:a9:
         1b:c6:72:93:ee:4b:72:ad:7f:a1:d8:24:eb:93:c1:1f:e8:9f:
         21:81:3f:43:d6:5c:d6:f1:8f:75:a3:1a:c8:0d:6c:51:3a:11:
         7c:bf:9d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:59:33 2025 by rpki-client