Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
File:                     2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft (raw, json)
Hash identifier:          2mw5FNmC7Qzqko3Qck2qG3gUZ26gpwOcgppNZJe8PyI=
Subject key identifier:   33:0D:35:2B:36:4F:84:89:13:B2:A2:06:E4:4C:EE:6F:06:8A:FD:1F
Authority key identifier: DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE
Certificate issuer:       /CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
Certificate serial:       0198481BA33345C05B83AC5581D897A90466
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
Manifest number:          09C9
Signing time:             Sat 26 Jul 2025 19:00:27 +0000
Manifest this update:     Sat 26 Jul 2025 19:00:27 +0000
Manifest next update:     Sun 27 Jul 2025 19:00:27 +0000
Files and hashes:         1: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl (hash: /lkrCVpcnQo3tS9C3Cha7l9pvm7F6FY2LKG0r8FwQbg=)
                          2: jOjUJYKoLHn0iKDz6xmlsGUntNA.roa (hash: dqARMuMMhdUxtBH/82mhr6b+TrmEh6Uv8dt27P0LcGo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:1b:a3:33:45:c0:5b:83:ac:55:81:d8:97:a9:04:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
        Validity
            Not Before: Jul 26 19:00:27 2025 GMT
            Not After : Jul 27 19:00:27 2025 GMT
        Subject: CN=330d352b364f848913b2a206e44cee6f068afd1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d7:14:15:39:a4:09:5f:66:5e:c1:0c:19:51:
                    f8:73:01:98:bc:73:f6:69:a4:4d:f9:47:5a:a2:d4:
                    ed:56:7e:78:77:1a:13:4c:b5:33:31:bb:5d:15:ac:
                    25:d2:ed:fc:e1:f1:92:38:48:6c:86:b2:40:d2:06:
                    4a:24:91:44:88:c2:2c:0b:b3:47:3c:47:03:ae:ae:
                    e8:dc:8c:89:2f:2b:54:51:5a:5c:62:54:d5:60:64:
                    58:a1:cc:c7:35:30:98:79:d8:00:97:74:d2:8f:f0:
                    59:3c:92:b3:d4:f7:91:db:3c:83:dd:82:c0:bc:3a:
                    3d:eb:f0:75:e8:5e:07:15:ae:66:e5:a0:c6:02:ed:
                    69:fd:4e:ff:79:7f:60:87:38:bd:f2:b6:bb:93:78:
                    3f:e4:a9:d7:f5:27:fe:c4:2f:69:8f:69:10:90:52:
                    bf:07:e1:8d:e2:52:e2:3b:cf:73:43:9e:f0:40:57:
                    1c:21:8e:5b:01:d7:92:a9:23:60:7f:29:a6:58:d3:
                    f1:bc:ff:45:2b:75:4f:6a:51:bf:39:c8:81:00:c4:
                    bb:23:f3:a3:e3:9a:46:b4:d5:eb:81:60:92:d2:1d:
                    98:3a:76:ad:ce:f2:47:7b:b8:21:87:69:47:15:42:
                    9a:f6:bc:88:66:13:55:e9:b6:48:ad:ab:59:f1:93:
                    7f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0D:35:2B:36:4F:84:89:13:B2:A2:06:E4:4C:EE:6F:06:8A:FD:1F
            X509v3 Authority Key Identifier:
                keyid:DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:84:1c:36:0e:15:99:fa:0f:7e:5b:1f:12:c9:7f:11:ac:5b:
         a8:5b:ab:6f:2a:32:1b:46:82:35:fb:52:86:5e:d9:c4:c6:24:
         1b:67:e7:49:b5:a4:f1:c7:3f:30:46:3b:e6:62:62:50:51:03:
         d1:2a:a3:09:fe:6d:72:f8:33:12:29:03:2f:0b:78:6b:1e:f6:
         a5:64:18:60:50:ba:1b:3f:3d:ef:46:d6:0f:4b:35:9c:fa:11:
         23:dd:22:ca:b3:46:3e:b6:c9:fd:7d:a4:66:39:93:0b:7e:e9:
         c9:a1:d9:f9:85:50:c8:a5:22:47:aa:d2:cc:49:10:58:7d:2c:
         73:ca:52:70:f1:02:48:6c:dc:2c:2d:d9:8e:f9:89:17:ca:7e:
         83:87:f7:86:c4:a1:93:92:c4:2c:3b:30:40:34:45:3a:61:e7:
         34:93:e6:df:26:43:ad:2f:a9:8c:d9:73:6d:cc:c2:22:3b:5a:
         b7:d3:20:05:cd:a2:54:1e:42:55:bd:85:60:28:10:ec:5e:26:
         4c:5a:c2:9e:ef:19:e2:a7:e0:a5:cf:de:ef:10:04:0b:a7:8c:
         80:f4:d6:30:3b:eb:da:c1:c1:76:63:d0:e4:48:cd:10:5e:2b:
         c7:4c:c9:18:4d:6f:fd:49:e0:84:3a:77:63:a6:c3:1d:68:7f:
         cf:7e:6e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:07:24 2025 by rpki-client