Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft
File:                     2MIJbMDFVXy6tsENYdB30Hj-cX8.mft (raw, json)
Hash identifier:          LatvImxjhKm6Q1bjgOn6UgolTllPt91ld6X8TMeQ/FQ=
Subject key identifier:   9B:20:4B:F5:68:E0:4F:AE:0C:A5:61:95:D5:BC:26:93:96:AF:BA:98
Authority key identifier: D8:C2:09:6C:C0:C5:55:7C:BA:B6:C1:0D:61:D0:77:D0:78:FE:71:7F
Certificate issuer:       /CN=d8c2096cc0c5557cbab6c10d61d077d078fe717f
Certificate serial:       019774523C5083862C0B97147618E231E560
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2MIJbMDFVXy6tsENYdB30Hj-cX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft
Manifest number:          0728
Signing time:             Sun 15 Jun 2025 16:00:35 +0000
Manifest this update:     Sun 15 Jun 2025 16:00:35 +0000
Manifest next update:     Mon 16 Jun 2025 16:00:35 +0000
Files and hashes:         1: 2MIJbMDFVXy6tsENYdB30Hj-cX8.crl (hash: 0JJl0aZl11e/UqMl6wz9Miw2xVuFkyBxRRsfm3FTDhc=)
                          2: v--QteSWi6tQPkHDzqMh-ib3Ea0.roa (hash: 4DKBaLEIdscFHQJRoeUgffvp/rQ3x54nPWPAJ4H+N0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2MIJbMDFVXy6tsENYdB30Hj-cX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:74:52:3c:50:83:86:2c:0b:97:14:76:18:e2:31:e5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8c2096cc0c5557cbab6c10d61d077d078fe717f
        Validity
            Not Before: Jun 15 16:00:35 2025 GMT
            Not After : Jun 16 16:00:35 2025 GMT
        Subject: CN=9b204bf568e04fae0ca56195d5bc269396afba98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d4:11:36:28:29:91:22:01:ae:1a:08:5d:e6:
                    b2:34:7c:95:56:f8:e3:ac:28:f4:b7:72:86:e1:51:
                    e6:48:eb:bd:4c:01:8a:5f:29:8e:b6:15:9f:85:56:
                    f6:c3:ba:6e:7b:e8:3a:2e:54:63:45:86:b5:24:04:
                    f2:84:ea:97:98:d2:11:92:1a:81:cc:a5:8d:91:77:
                    5b:2a:00:fa:12:14:ba:20:77:f3:a3:95:59:a1:85:
                    38:a7:1c:74:a9:4f:b6:9c:d0:42:0e:59:4e:12:f8:
                    89:3a:e3:ad:09:39:ca:f5:60:73:ee:b1:55:72:38:
                    e5:ad:64:5f:84:f9:de:35:12:eb:d2:41:05:d0:31:
                    7a:9b:f2:b1:3b:ce:27:6e:4c:1a:20:36:c6:9e:ab:
                    73:8d:f1:dc:99:06:29:00:27:f0:07:98:36:b7:c6:
                    f1:6f:e4:b6:ab:7c:79:78:cf:b4:54:bd:ba:5c:b2:
                    4d:d8:49:8b:bd:1a:15:d5:a6:99:e1:65:38:d5:cf:
                    ed:87:a1:71:41:9d:7f:b1:3b:7b:0c:d1:31:89:f7:
                    75:3c:a8:5f:4b:82:5d:1e:43:28:8a:12:3c:0c:93:
                    ec:72:02:9e:05:7a:56:6b:cd:5f:7a:83:7b:8a:71:
                    12:2d:77:33:d6:2d:52:f5:66:04:9a:34:0a:b2:65:
                    97:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:20:4B:F5:68:E0:4F:AE:0C:A5:61:95:D5:BC:26:93:96:AF:BA:98
            X509v3 Authority Key Identifier:
                keyid:D8:C2:09:6C:C0:C5:55:7C:BA:B6:C1:0D:61:D0:77:D0:78:FE:71:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MIJbMDFVXy6tsENYdB30Hj-cX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:fe:7a:34:85:a5:68:e0:fa:53:75:9b:ca:bc:a9:0e:1a:c2:
         e1:31:7c:5b:66:82:82:7d:0d:7b:4b:fe:83:3d:c7:60:5a:d4:
         ab:ad:00:8e:59:6a:29:71:a9:e1:3a:0d:e5:0e:ee:67:18:35:
         1d:e7:47:8c:83:dc:fb:db:b7:9c:80:f9:30:76:30:e9:3e:49:
         76:65:60:77:11:39:a5:73:06:be:d6:a3:03:d9:f1:c4:33:9b:
         e1:65:6c:85:02:af:5a:fa:3d:18:8c:31:ae:68:23:f7:cb:03:
         3f:cc:63:4f:50:59:84:0e:01:a3:fb:87:b3:1b:62:8f:57:c6:
         ce:b5:56:0b:e6:5b:42:b9:f6:5e:2b:66:c6:b0:d5:f2:e8:6a:
         ea:67:36:84:f8:ce:99:cd:7f:3b:ce:c9:68:05:66:59:22:93:
         29:ba:2c:82:9a:cb:94:bb:9f:77:0e:84:95:3a:60:68:90:93:
         94:f5:21:6a:8e:c2:f6:dd:c1:31:fe:c8:8b:11:27:1c:95:b2:
         f0:43:c7:ac:07:d7:14:0e:da:a0:4f:b7:02:41:eb:75:79:e9:
         78:a4:bf:d4:77:3a:d3:51:73:e4:68:cd:1c:47:cf:1a:9a:7a:
         e8:28:0c:c6:80:af:76:88:91:db:98:37:fa:d8:c4:d0:9b:4c:
         75:2f:b8:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd0UjxQg4YsC5cUdhjiMeVgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YzIwOTZjYzBjNTU1N2NiYWI2YzEwZDYxZDA3N2QwNzhm
ZTcxN2YwHhcNMjUwNjE1MTYwMDM1WhcNMjUwNjE2MTYwMDM1WjAzMTEwLwYDVQQD
Eyg5YjIwNGJmNTY4ZTA0ZmFlMGNhNTYxOTVkNWJjMjY5Mzk2YWZiYTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNQRNigpkSIBrhoIXeayNHyVVvjj
rCj0t3KG4VHmSOu9TAGKXymOthWfhVb2w7pue+g6LlRjRYa1JATyhOqXmNIRkhqB
zKWNkXdbKgD6EhS6IHfzo5VZoYU4pxx0qU+2nNBCDllOEviJOuOtCTnK9WBz7rFV
cjjlrWRfhPneNRLr0kEF0DF6m/KxO84nbkwaIDbGnqtzjfHcmQYpACfwB5g2t8bx
b+S2q3x5eM+0VL26XLJN2EmLvRoV1aaZ4WU41c/th6FxQZ1/sTt7DNExifd1PKhf
S4JdHkMoihI8DJPscgKeBXpWa81feoN7inESLXcz1i1S9WYEmjQKsmWX+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsgS/Vo4E+uDKVhldW8JpOWr7qYMB8GA1UdIwQY
MBaAFNjCCWzAxVV8urbBDWHQd9B4/nF/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk1JSmJNREZWWHk2dHNFTllkQjMwSGotY1g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy81ZTUxYmEtNTA4Zi00ZjIzLWE3OWYt
NDMyODNiMzcxOGRjLzEvMk1JSmJNREZWWHk2dHNFTllkQjMwSGotY1g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy81ZTUxYmEtNTA4Zi00ZjIzLWE3OWYtNDMyODNiMzcxOGRj
LzEvMk1JSmJNREZWWHk2dHNFTllkQjMwSGotY1g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArv56NIWl
aOD6U3WbyrypDhrC4TF8W2aCgn0Ne0v+gz3HYFrUq60AjllqKXGp4ToN5Q7uZxg1
HedHjIPc+9u3nID5MHYw6T5JdmVgdxE5pXMGvtajA9nxxDOb4WVshQKvWvo9GIwx
rmgj98sDP8xjT1BZhA4Bo/uHsxtij1fGzrVWC+ZbQrn2XitmxrDV8uhq6mc2hPjO
mc1/O87JaAVmWSKTKbosgprLlLufdw6ElTpgaJCTlPUhao7C9t3BMf7IixEnHJWy
8EPHrAfXFA7aoE+3AkHrdXnpeKS/1Hc601Fz5GjNHEfPGpp66CgMxoCvdoiR25g3
+tjE0JtMdS+40g==
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:10:39 2025 by rpki-client