Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
File:                     2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft (raw, json)
Hash identifier:          hGVY3Qt/jCBmB0hsfJ8tpZ/XEn8Z02lfM175lSoCGGc=
Subject key identifier:   48:3A:C0:20:C4:D2:03:93:56:08:2B:31:CB:2D:9D:92:98:EF:16:85
Authority key identifier: DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
Certificate issuer:       /CN=daaec597d1b379ea83236312c6f8b2bce7439773
Certificate serial:       0197775307D461D31C635EED6F5D9D63DD36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
Manifest number:          062F
Signing time:             Mon 16 Jun 2025 06:00:19 +0000
Manifest this update:     Mon 16 Jun 2025 06:00:19 +0000
Manifest next update:     Tue 17 Jun 2025 06:00:19 +0000
Files and hashes:         1: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl (hash: CcE9KkKQSs8ed+vyYMLE5S1gD4N/S25/Bdh6TeSWvH8=)
                          2: g6X_lRYXDJRZnC8lMpbRmD7fpGU.roa (hash: hq/bivbA56Qmzu+4HRNaps/x/ti0y7YbNHmOsoCnEhw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:77:53:07:d4:61:d3:1c:63:5e:ed:6f:5d:9d:63:dd:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daaec597d1b379ea83236312c6f8b2bce7439773
        Validity
            Not Before: Jun 16 06:00:19 2025 GMT
            Not After : Jun 17 06:00:19 2025 GMT
        Subject: CN=483ac020c4d2039356082b31cb2d9d9298ef1685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b1:2c:f1:77:8b:a4:95:eb:a6:f5:f8:58:cc:
                    be:de:0c:69:a7:62:b0:6e:48:55:14:36:f1:60:4f:
                    2a:44:06:0f:29:03:de:f7:b2:a1:00:de:13:28:ae:
                    44:3b:b4:3a:99:b9:ef:e5:ce:a5:3b:8c:9e:29:21:
                    8e:d6:1e:1b:2e:f4:76:1c:49:ce:d8:39:05:e9:37:
                    c7:4f:31:43:ee:65:35:e2:c5:eb:97:3d:21:46:8f:
                    89:ba:26:70:4e:a9:e8:e4:63:34:20:d0:ae:56:f5:
                    26:ef:d9:75:b1:30:88:80:f1:c6:f3:11:66:1e:c8:
                    7b:9c:6e:3d:86:9c:2d:ec:6d:64:3b:42:04:e1:ee:
                    8c:b7:63:37:de:84:18:da:96:88:bc:c8:a1:41:5d:
                    98:6b:39:79:bb:98:6f:8a:03:ca:95:e0:2a:27:3a:
                    a9:36:f5:4c:29:a8:fb:e9:16:e4:5e:96:39:c2:a0:
                    da:b7:83:4c:9b:96:c0:49:ef:06:db:8f:ec:7f:96:
                    98:79:f1:20:36:00:0f:0a:76:28:fa:71:55:30:93:
                    b5:ca:8d:81:0c:c5:ae:6d:0b:19:6b:24:d0:d8:51:
                    78:6b:c4:db:31:54:35:ad:0d:17:8a:73:32:ee:ae:
                    68:04:c3:09:ea:7a:ee:a3:0e:f9:f1:75:89:d8:c9:
                    2e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:3A:C0:20:C4:D2:03:93:56:08:2B:31:CB:2D:9D:92:98:EF:16:85
            X509v3 Authority Key Identifier:
                keyid:DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:c1:a2:c3:c7:75:94:aa:61:8b:eb:c1:fb:41:fd:bd:16:35:
         b1:18:be:54:0e:71:60:b8:aa:9b:04:03:13:c8:39:c6:9f:96:
         5f:ea:6f:ee:a0:c3:56:58:29:cc:c9:07:61:06:d1:53:02:44:
         a8:fc:4a:de:05:65:15:b7:19:8f:db:44:11:17:7b:e9:6c:7b:
         04:da:38:3c:ff:cb:7f:00:85:c8:85:0a:06:56:c8:2a:43:cb:
         4f:54:14:d2:04:66:78:e6:b8:a8:5a:09:8d:87:5d:0b:e2:7c:
         cb:0f:68:e1:0d:d0:55:ca:29:d2:48:09:56:ad:53:74:5c:65:
         5a:d8:74:a1:ff:99:1f:e6:1c:32:78:0f:f1:31:d3:d3:6f:98:
         13:13:75:f3:01:6c:72:30:4d:87:9b:7a:24:68:cc:72:6d:57:
         ca:68:b9:a7:5f:5d:07:79:43:80:8a:af:22:08:a6:e5:9e:f2:
         70:c5:10:c5:80:55:01:80:a5:af:0d:aa:33:5d:6e:87:c2:03:
         93:ab:88:6a:48:6f:74:00:4f:40:d1:7e:cb:29:71:bb:83:24:
         02:cc:71:3c:2f:97:f7:f9:23:0a:65:e2:e3:46:8f:72:31:3c:
         bc:ea:72:4a:bf:0e:cb:b1:5b:69:41:c9:2c:4c:7b:c5:06:39:
         0b:11:01:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:44:00 2025 by rpki-client