Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
File:                     2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft (raw, json)
Hash identifier:          bL31eOZGFywymLE7Sji4bRzuAMmudjBB/ie5vfCKJgk=
Subject key identifier:   5B:BE:78:4A:E5:20:70:01:60:DB:18:6A:4D:82:CF:57:CB:D7:F5:74
Authority key identifier: DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE
Certificate issuer:       /CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
Certificate serial:       01978131FE2E246B9EDB26BE75FE78843E1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
Manifest number:          0962
Signing time:             Wed 18 Jun 2025 04:00:26 +0000
Manifest this update:     Wed 18 Jun 2025 04:00:26 +0000
Manifest next update:     Thu 19 Jun 2025 04:00:26 +0000
Files and hashes:         1: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl (hash: lrD9cxGF16M4m9vhVz4m+gcvT6j1omYScXSYdL5Bd+8=)
                          2: jOjUJYKoLHn0iKDz6xmlsGUntNA.roa (hash: dqARMuMMhdUxtBH/82mhr6b+TrmEh6Uv8dt27P0LcGo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:81:31:fe:2e:24:6b:9e:db:26:be:75:fe:78:84:3e:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
        Validity
            Not Before: Jun 18 04:00:26 2025 GMT
            Not After : Jun 19 04:00:26 2025 GMT
        Subject: CN=5bbe784ae520700160db186a4d82cf57cbd7f574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d3:da:25:4b:b7:37:df:4f:83:08:8d:fb:7c:
                    3e:00:78:5c:4f:c1:d1:a5:55:2f:53:cd:e5:f3:6d:
                    fe:53:93:f9:e8:8b:4a:30:35:db:03:c7:bc:27:c7:
                    8a:14:6e:1d:5a:26:bf:2a:74:a9:09:2e:af:c4:02:
                    68:b9:29:9c:d1:28:27:d8:a5:b2:33:eb:68:0e:09:
                    b6:1d:a7:5d:d9:1b:db:92:1f:53:0f:3a:1a:66:16:
                    58:f5:fc:f3:a5:2d:47:f3:b2:5f:f9:c2:7c:57:95:
                    9f:fd:f3:d6:87:e4:4d:08:dc:a9:10:e7:7e:05:72:
                    60:14:cd:d0:c1:15:31:b7:31:c8:b7:39:3a:fe:f1:
                    c9:ae:3b:10:a6:4e:06:2e:de:7d:a9:9a:56:d4:9f:
                    69:f6:99:6c:ad:09:df:04:db:49:b8:ce:32:44:4f:
                    da:fe:2c:7a:78:c1:1e:8a:a2:5c:3f:36:99:0a:43:
                    75:6f:7f:89:fa:31:c8:27:d1:33:d8:32:4c:ad:86:
                    8b:db:1f:cd:f3:87:db:83:39:a2:7c:73:0c:95:ae:
                    51:ba:1e:80:19:b2:6e:15:1f:e3:c6:1d:c8:2e:38:
                    8c:42:d5:32:ca:03:0f:e0:c6:5c:63:56:29:fc:21:
                    95:cf:a3:7d:ca:3a:77:0f:7c:40:83:4c:60:c2:9f:
                    1c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BE:78:4A:E5:20:70:01:60:DB:18:6A:4D:82:CF:57:CB:D7:F5:74
            X509v3 Authority Key Identifier:
                keyid:DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:2d:6d:5f:bf:bc:88:59:66:1c:f8:ab:1f:8c:99:f8:8d:3f:
         5f:bf:73:a4:81:79:28:02:b4:94:64:83:1a:c5:e8:6b:6f:c8:
         ed:c7:5c:6c:cb:6b:cc:4a:93:16:20:da:1b:53:92:67:10:b3:
         ad:cd:08:45:65:fe:6a:4c:6d:27:0b:0a:4e:f0:04:54:3f:c4:
         7f:45:80:5d:e6:75:71:8c:fa:1b:40:62:f5:b3:b7:71:f6:ea:
         92:90:1c:7b:0a:5f:65:3c:f4:7f:4d:61:61:45:25:46:29:a8:
         51:6a:f4:c4:f2:f2:b3:94:8b:a5:c0:42:fb:50:fb:32:81:9c:
         9c:83:b6:a3:39:35:72:1c:4d:a1:e6:0a:04:33:45:9d:6e:09:
         25:9c:5a:0e:29:33:4b:8b:b3:64:c5:a2:ab:d5:a3:41:4a:83:
         d2:fc:80:15:82:8d:22:97:d3:ff:f6:5f:5a:65:ef:e4:3c:48:
         93:e2:13:b4:c2:5d:58:3f:63:ff:b0:2b:93:57:80:f1:9a:5a:
         b3:d6:ca:76:0e:a5:3d:0a:c8:a8:94:7c:44:ab:9b:c2:5d:af:
         8b:f4:ac:97:ee:27:af:51:09:78:f3:a7:67:03:ae:f2:b9:ec:
         28:ca:8b:f2:a7:4f:fc:ef:0c:de:e0:51:c7:07:88:26:30:04:
         c7:6e:05:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:45:24 2025 by rpki-client