Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
File:                     2CsoRvCTvJQWBBvmiix4MWHrBN8.mft (raw, json)
Hash identifier:          GI7MAUlQ3CJr2BXw47ZTwlIANY5sfQO8Ycm408zcsnM=
Subject key identifier:   2E:7C:34:67:26:F7:02:A8:F1:A3:D6:21:20:39:1F:06:CE:E9:07:E0
Authority key identifier: D8:2B:28:46:F0:93:BC:94:16:04:1B:E6:8A:2C:78:31:61:EB:04:DF
Certificate issuer:       /CN=d82b2846f093bc9416041be68a2c783161eb04df
Certificate serial:       01989DF0A8BA96EF83C94C2F831025C224C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
Manifest number:          07D4
Signing time:             Tue 12 Aug 2025 11:00:51 +0000
Manifest this update:     Tue 12 Aug 2025 11:00:51 +0000
Manifest next update:     Wed 13 Aug 2025 11:00:51 +0000
Files and hashes:         1: 1tdaIrt9xypJtReKdxeXXdM964s.roa (hash: 2jF3CjF80ww6ITNBk+zVZgXhV0QGg1umOnc7I4ePaOY=)
                          2: 2CsoRvCTvJQWBBvmiix4MWHrBN8.crl (hash: vG4TiM7k//HT0COVzpfUhEfoDMAJq/OO9Px4Au4VhAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 11:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9d:f0:a8:ba:96:ef:83:c9:4c:2f:83:10:25:c2:24:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d82b2846f093bc9416041be68a2c783161eb04df
        Validity
            Not Before: Aug 12 11:00:51 2025 GMT
            Not After : Aug 13 11:00:51 2025 GMT
        Subject: CN=2e7c346726f702a8f1a3d62120391f06cee907e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cd:3d:67:1b:e5:18:d6:ae:a5:64:e2:f8:7d:
                    3f:ea:1f:a5:fd:f9:a0:b0:b2:b4:4e:c0:da:2b:fe:
                    29:3a:8d:af:9a:9d:e2:e3:b1:b4:03:3b:1d:ab:8b:
                    c6:7b:d6:37:df:f8:59:2d:bc:c4:93:cc:87:05:d6:
                    38:8d:4e:a5:ac:e9:9d:74:a5:db:b2:16:37:70:bd:
                    06:f1:09:36:09:bd:6e:44:32:e5:f6:88:bb:9e:26:
                    4e:f6:66:b3:a6:e5:fb:8f:67:18:19:73:96:87:31:
                    3a:07:a2:74:9b:5d:34:61:3e:43:a0:99:ab:8f:ac:
                    1a:5c:46:46:50:a0:43:18:49:75:df:47:77:b5:79:
                    8a:cb:c9:e2:6d:43:83:a3:ed:92:6a:75:5b:fd:ed:
                    dc:e2:b9:73:3f:1a:70:9e:ba:51:34:e7:8b:7f:d6:
                    9e:d5:9d:a4:4b:03:94:48:1e:98:ef:3a:c0:67:fe:
                    8c:a3:d1:02:ce:11:8f:1e:ef:1d:5d:25:ee:e9:81:
                    6d:ed:55:e7:d3:0d:d4:a3:49:06:5c:06:0e:64:ef:
                    40:1d:e6:a7:dc:11:a2:0d:b9:d8:30:40:9e:22:c0:
                    6f:01:83:87:7f:d5:9c:66:3e:43:68:4e:8e:81:62:
                    28:92:19:d7:c4:80:aa:ce:81:16:3e:f6:87:47:be:
                    cd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:7C:34:67:26:F7:02:A8:F1:A3:D6:21:20:39:1F:06:CE:E9:07:E0
            X509v3 Authority Key Identifier:
                keyid:D8:2B:28:46:F0:93:BC:94:16:04:1B:E6:8A:2C:78:31:61:EB:04:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:1b:6f:52:c1:74:99:9a:60:b9:e6:90:36:9f:ea:31:7f:af:
         c0:b5:6f:ed:e6:f6:5a:1a:4b:05:1b:b7:43:59:3c:18:58:aa:
         a7:c5:d9:0c:e0:3b:cb:4d:dd:6f:fa:77:b3:d4:97:38:00:62:
         a3:8f:ec:90:e2:f7:d8:7a:9c:a7:ca:50:b5:3f:f1:06:d2:53:
         ac:48:c4:af:d6:05:47:56:d8:60:5a:90:97:cd:8f:15:10:20:
         71:0a:9c:dc:60:70:17:d9:65:6c:df:41:d4:b5:4f:7b:ce:ba:
         50:e9:aa:2e:c1:2d:52:9e:45:3b:37:1d:e1:d0:ca:33:de:21:
         9b:78:59:1d:c2:86:a0:6a:df:8d:af:bc:36:42:c5:14:f7:cf:
         ba:88:96:e2:b5:51:3a:3d:5d:b8:d0:8a:de:b9:c3:a6:de:f2:
         ce:fd:f0:0c:5f:f2:be:00:17:e1:c8:95:83:38:fc:df:14:14:
         8e:0c:2d:5f:ff:98:8c:c1:b0:2c:11:9c:81:76:84:e8:33:b4:
         e3:83:7e:d8:bf:72:2f:fa:95:fd:6f:15:af:de:cc:91:41:42:
         5c:8a:93:b9:ad:c6:1f:f1:1f:59:0f:26:29:43:ca:1b:00:3b:
         06:42:bb:8c:44:a6:3f:ea:73:9e:33:15:1c:95:fb:6a:6b:dd:
         c2:fe:21:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZid8Ki6lu+DyUwvgxAlwiTHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MmIyODQ2ZjA5M2JjOTQxNjA0MWJlNjhhMmM3ODMxNjFl
YjA0ZGYwHhcNMjUwODEyMTEwMDUxWhcNMjUwODEzMTEwMDUxWjAzMTEwLwYDVQQD
EygyZTdjMzQ2NzI2ZjcwMmE4ZjFhM2Q2MjEyMDM5MWYwNmNlZTkwN2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzs09ZxvlGNaupWTi+H0/6h+l/fmg
sLK0TsDaK/4pOo2vmp3i47G0Azsdq4vGe9Y33/hZLbzEk8yHBdY4jU6lrOmddKXb
shY3cL0G8Qk2Cb1uRDLl9oi7niZO9mazpuX7j2cYGXOWhzE6B6J0m100YT5DoJmr
j6waXEZGUKBDGEl130d3tXmKy8nibUODo+2SanVb/e3c4rlzPxpwnrpRNOeLf9ae
1Z2kSwOUSB6Y7zrAZ/6Mo9ECzhGPHu8dXSXu6YFt7VXn0w3Uo0kGXAYOZO9AHean
3BGiDbnYMECeIsBvAYOHf9WcZj5DaE6OgWIokhnXxICqzoEWPvaHR77NjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC58NGcm9wKo8aPWISA5HwbO6QfgMB8GA1UdIwQY
MBaAFNgrKEbwk7yUFgQb5ooseDFh6wTfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkNzb1J2Q1R2SlFXQkJ2bWlpeDRNV0hyQk44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy81YjJkNmUtODI0Ny00NDhmLWEzNTgt
NTQ3M2VlMWRhYTliLzEvMkNzb1J2Q1R2SlFXQkJ2bWlpeDRNV0hyQk44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy81YjJkNmUtODI0Ny00NDhmLWEzNTgtNTQ3M2VlMWRhYTli
LzEvMkNzb1J2Q1R2SlFXQkJ2bWlpeDRNV0hyQk44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALhtvUsF0
mZpgueaQNp/qMX+vwLVv7eb2WhpLBRu3Q1k8GFiqp8XZDOA7y03db/p3s9SXOABi
o4/skOL32Hqcp8pQtT/xBtJTrEjEr9YFR1bYYFqQl82PFRAgcQqc3GBwF9llbN9B
1LVPe866UOmqLsEtUp5FOzcd4dDKM94hm3hZHcKGoGrfja+8NkLFFPfPuoiW4rVR
Oj1duNCK3rnDpt7yzv3wDF/yvgAX4ciVgzj83xQUjgwtX/+YjMGwLBGcgXaE6DO0
44N+2L9yL/qV/W8Vr97MkUFCXIqTua3GH/EfWQ8mKUPKGwA7BkK7jESmP+pznjMV
HJX7amvdwv4hDA==
-----END CERTIFICATE-----
Generated at Tue Aug 12 14:35:01 2025 by rpki-client