Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
File:                     2VJzaCBuPppZJAgd9jiAJG5cVBo.mft (raw, json)
Hash identifier:          X0c1bDrKGCm3VEW2VuXba0oWxbIGjhctkVO8of9sSKA=
Subject key identifier:   B6:53:71:20:C8:AC:0A:CC:9A:FE:41:A9:0C:BC:AB:2E:DE:A2:AC:DB
Authority key identifier: D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A
Certificate issuer:       /CN=d9527368206e3e9a5924081df63880246e5c541a
Certificate serial:       01976BBD7C10B0854D4B9BC6B27F9A3E00E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
Manifest number:          1520
Signing time:             Sat 14 Jun 2025 00:01:09 +0000
Manifest this update:     Sat 14 Jun 2025 00:01:09 +0000
Manifest next update:     Sun 15 Jun 2025 00:01:09 +0000
Files and hashes:         1: 2VJzaCBuPppZJAgd9jiAJG5cVBo.crl (hash: 3ydeq+RxeVvXzGXPmAK3ak7Wor37vSX/6pBV4PspMqM=)
                          2: SIolq_1_WZM4Sl_jpV4PfGa787Q.roa (hash: j7Gukmt+3MRCWPVKoFNL04/tZ9Oo5sZf6Bgq4mKvIoA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:bd:7c:10:b0:85:4d:4b:9b:c6:b2:7f:9a:3e:00:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9527368206e3e9a5924081df63880246e5c541a
        Validity
            Not Before: Jun 14 00:01:09 2025 GMT
            Not After : Jun 15 00:01:09 2025 GMT
        Subject: CN=b6537120c8ac0acc9afe41a90cbcab2edea2acdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:32:c7:64:5d:be:3d:12:37:95:07:35:8d:75:
                    50:c8:a3:da:2a:00:f0:0b:89:b1:c3:50:13:e3:7d:
                    2c:04:50:fd:2c:76:8d:61:31:52:63:16:ae:49:42:
                    c2:a5:b7:1b:d8:98:0a:ab:e9:30:0f:a4:34:92:92:
                    33:33:82:62:f5:9b:02:cc:3b:8b:75:cd:5f:44:fd:
                    af:c0:bc:6c:6f:e5:bd:2c:52:76:06:6a:3a:5f:e7:
                    c6:b9:50:d5:93:bc:45:a6:b2:6a:c9:c5:21:11:31:
                    ee:37:3e:d2:2c:24:91:40:5b:7e:26:ad:e0:56:84:
                    dc:15:00:42:ab:1b:57:c8:f5:cc:de:f6:cf:4f:22:
                    7d:9e:03:c6:05:68:e5:38:0a:81:40:6d:b3:22:47:
                    10:27:a1:d4:2c:65:8a:a8:93:32:4b:8f:2e:67:0d:
                    39:05:b9:9c:92:7f:41:0a:37:6f:57:6a:2e:ef:73:
                    81:c5:49:d6:62:e8:e6:83:0a:54:8f:38:99:44:81:
                    27:07:f6:30:d9:46:4b:77:cf:c7:4e:c0:72:64:91:
                    af:91:9b:64:89:48:50:d2:90:3b:f6:c1:32:8b:10:
                    8b:ee:15:95:4c:6e:e0:a8:86:ed:9d:87:96:33:94:
                    8d:c8:13:77:e2:2c:0a:1a:31:1d:f2:c0:4b:db:e5:
                    6e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:53:71:20:C8:AC:0A:CC:9A:FE:41:A9:0C:BC:AB:2E:DE:A2:AC:DB
            X509v3 Authority Key Identifier:
                keyid:D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:a4:a1:6c:e3:45:f6:16:b3:4d:47:90:9a:5a:8a:c7:c1:b0:
         b9:1a:20:1c:b8:86:cd:2c:17:15:80:b6:a7:60:8f:3c:1b:21:
         91:6c:6c:5d:5c:7f:ff:2e:96:4c:4b:ee:83:42:9d:78:59:d2:
         05:8b:c5:ad:1b:c7:d9:08:c7:12:f5:4a:b0:d3:82:d7:bf:b6:
         57:09:ba:25:e0:2b:ec:b0:7f:73:02:81:4b:6d:37:91:a3:46:
         e7:0a:91:17:1c:4d:a2:2d:16:fb:b1:eb:60:e8:ac:5a:5b:46:
         78:01:d1:8a:d1:ca:65:23:13:0f:27:93:bd:dc:81:62:b8:b3:
         d9:98:1f:48:f9:03:55:83:69:ab:91:ac:9e:de:98:69:3b:04:
         ca:94:6f:1f:cc:4e:d9:1c:90:f8:b4:12:a7:61:0a:43:9f:89:
         4b:76:be:44:4a:6b:16:93:b5:6e:15:95:fb:bf:f7:4f:7a:a2:
         8c:a7:38:74:34:28:78:23:76:cd:8a:9a:03:f1:4e:fc:00:3f:
         a6:b1:78:7b:cf:3e:e8:53:79:89:a1:c3:fd:07:98:3b:c4:16:
         59:ce:36:59:51:ba:f7:95:50:7f:cf:67:b4:c4:1a:09:76:db:
         25:14:15:e0:a9:0b:17:8f:f8:70:32:ab:5c:2f:75:89:89:85:
         9d:06:ff:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:06:28 2025 by rpki-client