Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
File:                     2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft (raw, json)
Hash identifier:          YiF0yMHPz8ao0Y0pewmh4kRzUwnzt9nTs194W2HfOLk=
Subject key identifier:   01:1B:9E:64:FF:C9:CF:01:8D:7C:71:7D:3D:25:F6:33:E6:9B:E8:53
Authority key identifier: D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1
Certificate issuer:       /CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1
Certificate serial:       0198353A19106EA957FCF9671AC868E4B744
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
Manifest number:          1054
Signing time:             Wed 23 Jul 2025 03:00:56 +0000
Manifest this update:     Wed 23 Jul 2025 03:00:56 +0000
Manifest next update:     Thu 24 Jul 2025 03:00:56 +0000
Files and hashes:         1: 2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl (hash: Rd5jKC3MTbriHQvw2QB7CorSHD0OL8pqp4JYTWJ6QeU=)
                          2: Tzki6iltnTfeWgXmhmNHdvTkXfw.roa (hash: BT59NYOurUOA8F73KnNlObUV8Me+wZDVlkZuurx7DMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 03:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:35:3a:19:10:6e:a9:57:fc:f9:67:1a:c8:68:e4:b7:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1
        Validity
            Not Before: Jul 23 03:00:56 2025 GMT
            Not After : Jul 24 03:00:56 2025 GMT
        Subject: CN=011b9e64ffc9cf018d7c717d3d25f633e69be853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:42:03:da:9a:a3:c5:79:eb:0a:00:ea:28:65:
                    1f:80:71:54:31:a6:f1:82:a5:fd:e3:53:45:31:e8:
                    68:23:8e:ab:ff:c5:6b:61:2a:2c:59:05:b7:e7:be:
                    31:59:e7:f5:f3:8c:94:e3:a1:3c:56:f4:64:e9:02:
                    5d:71:5e:69:7f:13:72:1f:fa:f3:64:4a:83:0c:74:
                    91:65:a3:bf:5f:90:ed:0b:13:fd:ce:9a:a5:2c:2b:
                    03:62:1b:ea:34:a1:3f:9b:8b:52:9e:e2:33:e2:a5:
                    98:d4:9d:0e:69:89:1a:af:18:8a:98:97:cc:67:e9:
                    78:d8:60:99:52:28:42:d9:cb:4d:0c:54:b6:3f:a6:
                    7a:f8:ff:4d:ca:78:57:e0:af:85:58:44:b4:7e:c3:
                    5b:40:ec:1f:ad:f3:72:8a:fd:ab:25:4d:e8:47:99:
                    3c:8d:9b:5f:7d:c1:b3:38:1e:84:e2:10:50:d7:cf:
                    d0:40:0f:b5:b4:55:ad:2c:c7:ef:ab:b0:78:9e:f3:
                    cc:55:df:21:7d:1b:41:21:3e:0d:69:fe:29:d6:9a:
                    34:47:1b:87:65:71:cf:3c:fe:d7:0b:7c:7b:e9:43:
                    08:52:5a:7f:c5:6f:99:1a:61:dd:30:e1:4a:49:ec:
                    df:57:74:a4:0f:34:fb:41:56:16:37:89:dc:32:96:
                    c0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:1B:9E:64:FF:C9:CF:01:8D:7C:71:7D:3D:25:F6:33:E6:9B:E8:53
            X509v3 Authority Key Identifier:
                keyid:D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:df:f6:ab:6b:f0:77:57:da:62:34:78:f8:dd:ab:f3:05:eb:
         45:70:63:3a:a3:18:2c:41:90:b7:7c:ce:b0:b2:9c:e1:fd:c8:
         4d:63:ec:84:f0:d6:16:fa:21:54:04:5d:c6:d7:40:c3:32:51:
         65:9a:82:5a:33:ba:c9:ae:c3:f2:c9:ca:7f:2c:b7:7e:d3:43:
         c0:30:38:c5:f3:46:44:64:e9:50:29:3d:9b:42:a6:c7:d1:12:
         e0:ae:a8:a6:db:1f:a0:50:f8:fc:38:46:fb:3f:49:7a:76:f5:
         46:cb:af:e2:a5:4e:c9:26:b2:af:20:00:85:84:77:5e:b2:32:
         6c:35:d2:6b:30:57:81:26:0d:73:c9:a5:e3:c4:99:e0:ef:e7:
         85:db:d0:91:57:ec:e8:e5:a5:65:f9:ae:af:76:65:73:32:04:
         1b:e5:c2:73:76:92:3e:6c:43:8a:97:a0:56:c1:e4:8d:46:e7:
         3a:69:e9:b5:30:7b:1c:8f:78:8a:de:2e:eb:98:7a:90:40:40:
         2e:0a:ec:e5:2b:18:72:6b:0f:cf:75:1b:ef:59:d9:ae:90:7f:
         6d:63:88:39:ae:3a:ad:ef:dc:0e:c7:3b:a5:b9:34:35:bb:ba:
         0c:2a:12:f8:81:d2:0c:fb:30:81:fb:ab:3d:c1:b6:f7:1b:46:
         49:74:1d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:24:29 2025 by rpki-client