Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
File:                     2SytEfEthtGJUcvXUe5RJPcYlR8.mft (raw, json)
Hash identifier:          fZwSxZE1brPecqYEhakByTenWzQdrzidcOZlbAZRoUA=
Subject key identifier:   B2:65:B2:73:1A:D5:12:A4:BB:84:A2:2E:0C:1E:51:85:9C:F8:D9:16
Authority key identifier: D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
Certificate issuer:       /CN=d92cad11f12d86d18951cbd751ee5124f718951f
Certificate serial:       01977C79D7CFC6856FEE09D15D1D6B48AB60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
Manifest number:          0F3B
Signing time:             Tue 17 Jun 2025 06:00:49 +0000
Manifest this update:     Tue 17 Jun 2025 06:00:49 +0000
Manifest next update:     Wed 18 Jun 2025 06:00:49 +0000
Files and hashes:         1: 2SytEfEthtGJUcvXUe5RJPcYlR8.crl (hash: srjae7OI0+PjR4Y3WXBPw7Uygd9JiTdpotrbs7j5lBQ=)
                          2: lh0r2c2rRWOg01uWo5CM03GyM1s.roa (hash: k3pD8AzqS8DbrBmJNcxRYtTDyImlclNux7CY8s079js=)
                          3: uTLyh0W8m68_V2bMQcHtyK_zdWA.roa (hash: 2XUbaOIwLIl96z8qId5rz9LYBuQvv5k3VK/Av3lKN20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 23:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7c:79:d7:cf:c6:85:6f:ee:09:d1:5d:1d:6b:48:ab:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d92cad11f12d86d18951cbd751ee5124f718951f
        Validity
            Not Before: Jun 17 06:00:49 2025 GMT
            Not After : Jun 18 06:00:49 2025 GMT
        Subject: CN=b265b2731ad512a4bb84a22e0c1e51859cf8d916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:42:e4:da:aa:06:85:c3:63:b4:1a:d0:3e:8a:
                    ed:27:d7:a9:3c:b7:07:0b:e5:52:a7:f9:66:bb:3c:
                    04:24:dc:1d:24:39:c5:83:eb:14:93:39:29:c2:33:
                    ac:ac:3d:1d:5d:1a:27:8d:dd:e7:3e:80:c3:91:de:
                    57:85:40:44:7f:42:65:fc:fd:e2:f7:29:8b:c0:f4:
                    e4:5b:69:e4:94:3b:d3:e2:ef:02:01:08:a1:18:33:
                    27:8d:16:58:4b:a6:27:b8:54:2e:a1:e6:7f:38:06:
                    d7:6f:93:35:b4:47:3d:16:8b:dd:f6:8f:00:ce:c2:
                    fa:2d:83:0a:f0:fc:78:71:cf:f1:29:8a:dc:c0:da:
                    b3:6b:8c:a3:3b:23:92:2f:44:ae:fc:b0:a1:86:48:
                    f6:d6:36:02:3b:f9:10:ac:02:ea:17:0a:7f:ed:7c:
                    59:68:12:3c:9b:52:84:d5:22:70:16:33:31:cc:05:
                    29:bf:e8:95:cf:55:56:3a:04:88:75:27:8d:d7:e3:
                    db:5d:c4:ea:3e:92:89:c2:fa:53:8e:58:06:1b:e7:
                    e3:1e:d6:68:65:36:3e:5b:28:78:a4:3d:5b:4e:bf:
                    cb:c2:54:53:6a:6e:7c:00:25:07:ca:6a:e6:5a:01:
                    5d:74:d9:dd:92:ef:3a:bc:b8:d5:e2:ee:cb:ec:5e:
                    86:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:65:B2:73:1A:D5:12:A4:BB:84:A2:2E:0C:1E:51:85:9C:F8:D9:16
            X509v3 Authority Key Identifier:
                keyid:D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:d6:a4:ed:c4:88:7a:cc:ef:e9:f3:97:2b:3d:85:5d:cb:e3:
         51:83:45:65:88:0e:6e:da:6a:f9:fe:56:4d:76:c3:ce:f8:b5:
         37:35:45:66:10:3d:c7:6d:75:f6:3c:27:7e:9b:5a:ad:8f:fb:
         52:7d:a6:f1:da:e2:8d:e3:a4:28:1e:de:ee:4e:8f:0d:44:16:
         7d:8c:31:c8:95:3b:fe:54:77:f3:3b:6f:da:40:25:97:3f:fc:
         81:85:d9:1e:da:4a:fe:bc:b9:54:0a:a3:fc:fd:22:96:d7:ba:
         f3:d8:d2:3b:70:e3:56:04:7c:d1:74:89:b0:1f:72:2e:a7:2e:
         c5:d0:2d:9a:23:86:a9:16:41:f6:a0:92:5a:ee:80:13:ec:bd:
         1d:6d:8e:2d:3a:32:85:f4:fb:f1:a2:44:68:56:02:19:bf:4c:
         fe:f2:cc:09:f3:75:77:10:ae:27:60:b5:f0:82:d4:e7:8c:d3:
         c8:53:1e:dc:31:0a:e2:f2:cd:f9:a0:c1:8d:a1:e5:ec:82:c6:
         00:f8:ec:2c:50:0f:20:01:84:8b:24:13:21:34:c7:48:a9:ed:
         9b:20:b5:c6:b2:99:a7:97:0b:15:98:b8:74:8e:f3:ae:b7:87:
         16:2d:23:c7:0f:ff:75:f9:12:10:6d:2f:ad:7c:de:7e:02:cc:
         62:63:61:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 09:17:04 2025 by rpki-client