Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
File:                     2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft (raw, json)
Hash identifier:          SHgU22pO0TfSRx+s6bLgUGWTVxUE5pBLejsI5h8hLys=
Subject key identifier:   62:86:B4:54:3E:62:7A:0D:8C:6F:A5:EC:8A:A7:FF:59:97:D4:8E:D5
Authority key identifier: D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1
Certificate issuer:       /CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1
Certificate serial:       0197722D2771E5CE0625A9183C02B18DED49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
Manifest number:          0FEF
Signing time:             Sun 15 Jun 2025 06:00:51 +0000
Manifest this update:     Sun 15 Jun 2025 06:00:51 +0000
Manifest next update:     Mon 16 Jun 2025 06:00:51 +0000
Files and hashes:         1: 2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl (hash: YFBA70p3XDrLVOxaSL0Pscy53sL7D1KeaY5qX+HMdKQ=)
                          2: Tzki6iltnTfeWgXmhmNHdvTkXfw.roa (hash: BT59NYOurUOA8F73KnNlObUV8Me+wZDVlkZuurx7DMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:72:2d:27:71:e5:ce:06:25:a9:18:3c:02:b1:8d:ed:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1
        Validity
            Not Before: Jun 15 06:00:51 2025 GMT
            Not After : Jun 16 06:00:51 2025 GMT
        Subject: CN=6286b4543e627a0d8c6fa5ec8aa7ff5997d48ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cc:1f:b9:e9:73:69:9d:37:87:df:f2:46:49:
                    00:06:2a:75:23:fd:56:2b:aa:fd:90:8d:3a:62:94:
                    d4:e8:a7:1d:e8:88:8c:6a:00:d7:51:22:cf:30:c2:
                    86:8e:e2:77:d9:3d:29:78:b2:7f:e3:6d:6c:20:12:
                    53:dd:37:a7:f2:91:90:97:15:af:af:73:34:ba:17:
                    55:f6:31:0e:f7:95:0b:6d:81:99:20:41:cf:ae:31:
                    c6:4e:c8:ba:fa:48:18:95:2f:da:21:89:a7:6f:21:
                    56:0d:ee:2d:9f:7e:47:95:ba:1f:d1:ad:6c:d9:a9:
                    a2:be:bd:a3:48:1d:98:11:1f:2b:73:10:c5:6f:bf:
                    8c:ee:40:50:ac:ed:4d:4e:cc:50:5d:fe:9a:e5:95:
                    04:a0:f2:45:c9:90:ff:9d:2f:e3:d6:ff:94:47:0a:
                    20:f8:25:91:e1:b1:5d:43:b4:b5:a5:d0:75:ea:41:
                    ee:91:05:6e:17:45:d8:4b:88:5a:3e:3d:e4:9f:f4:
                    39:7c:79:00:13:b0:40:1c:c4:6a:24:e8:63:4c:ee:
                    05:ae:f9:0c:f0:70:8c:bd:72:59:1c:3a:98:ed:24:
                    36:01:69:34:76:79:3c:7e:cd:73:f1:79:cc:ce:91:
                    de:e9:8d:94:8a:ba:fe:49:bc:36:9a:26:0c:9f:3e:
                    8f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:86:B4:54:3E:62:7A:0D:8C:6F:A5:EC:8A:A7:FF:59:97:D4:8E:D5
            X509v3 Authority Key Identifier:
                keyid:D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:30:4a:06:7c:fc:5a:b0:c3:bb:a3:98:c0:f4:a2:5b:cf:ca:
         96:3b:ce:49:f7:eb:0a:e0:ca:58:95:a6:ae:cc:af:f5:39:d3:
         6a:c9:1d:69:3f:2a:35:c5:26:34:19:18:18:1e:a3:17:6f:4c:
         1f:6e:24:cb:1b:7f:54:2a:8b:ea:f8:aa:5c:3e:07:58:00:e1:
         f4:76:80:b6:64:bb:ae:aa:cd:74:9d:7d:38:d6:f8:51:47:23:
         f5:57:39:aa:23:d6:8d:b4:f7:a9:5a:6d:37:81:f8:46:77:6e:
         53:29:ad:95:3e:71:d8:c0:4e:e2:90:87:50:12:15:e3:cb:f5:
         ce:a1:a9:e8:d8:d7:16:fc:51:85:35:55:cc:7b:62:b5:8b:05:
         d0:21:c4:93:e2:77:bb:01:3e:03:ed:df:35:f7:5d:d3:72:a6:
         79:9a:a1:63:64:ae:fa:00:cd:f2:9c:c7:76:0c:40:04:98:3d:
         ea:e5:7f:48:de:93:31:5a:be:22:08:46:ff:ee:16:f6:58:41:
         ae:b4:82:e7:5c:cb:99:f3:38:b7:72:2f:ac:cd:ab:93:ff:56:
         b1:c7:3d:b1:43:ce:c5:0b:4b:e0:4e:5e:0e:1f:a3:32:ae:d5:
         83:46:cc:f2:ce:28:53:fc:29:52:51:97:aa:bb:1c:44:35:86:
         2a:ea:8b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:32:02 2025 by rpki-client