Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
File:                     2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft (raw, json)
Hash identifier:          MpGAZO+lRwFUQMc//RwXZ2nsAm4ebyaNRk0YUKUuoL0=
Subject key identifier:   DD:34:97:68:F9:36:09:B1:D9:9E:27:09:F8:65:DE:DE:31:01:AC:8D
Authority key identifier: DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
Certificate issuer:       /CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Certificate serial:       01963FFA68CC3333B03A3F62293BAF27E6DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
Manifest number:          12C7
Signing time:             Wed 16 Apr 2025 19:01:37 +0000
Manifest this update:     Wed 16 Apr 2025 19:01:37 +0000
Manifest next update:     Thu 17 Apr 2025 19:01:37 +0000
Files and hashes:         1: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl (hash: nyNAFp4+EYes4RqoMy4558b0YfPMFfEce6wAd1jjvck=)
                          2: wHiz844bSnAZ4Nug3ceKjQdatmc.roa (hash: /mOXe5EHXrP0fFZ7gg8le5T3+NCaa6O//12eYo5yKX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:fa:68:cc:33:33:b0:3a:3f:62:29:3b:af:27:e6:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
        Validity
            Not Before: Apr 16 19:01:37 2025 GMT
            Not After : Apr 17 19:01:37 2025 GMT
        Subject: CN=dd349768f93609b1d99e2709f865dede3101ac8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:db:68:f4:d7:83:85:cd:40:15:b2:dc:fb:83:
                    d0:49:9b:d8:10:8b:db:ff:6c:6b:d5:f3:ca:60:8f:
                    62:85:55:5e:84:41:73:19:68:af:c3:0c:cc:26:bd:
                    18:06:9d:ca:8e:42:4d:9a:75:73:2d:24:88:e9:05:
                    a8:30:07:e1:87:9d:8b:5f:aa:ef:b0:33:92:ca:4f:
                    99:9f:d2:d8:bf:6c:86:db:eb:7a:13:1f:15:99:30:
                    7f:ac:22:61:f0:f7:88:a1:01:bd:a0:31:48:c1:fb:
                    10:c3:e8:4c:cf:21:f1:c9:33:55:bb:50:2a:37:49:
                    49:2b:bb:6b:31:ef:f2:f5:de:6d:8f:10:61:be:51:
                    61:91:03:ad:2a:fe:79:5a:48:53:fd:d0:ac:7a:19:
                    d7:15:8e:ff:d5:58:2d:55:ce:6c:78:10:ae:14:ef:
                    1a:fb:33:82:ae:0b:f2:39:b5:dd:5b:98:f9:73:84:
                    cc:1b:04:76:57:7e:f7:fe:b2:5c:af:07:47:be:14:
                    63:29:48:41:ae:1a:63:e2:38:84:07:5d:29:c8:0b:
                    06:a1:64:e5:68:89:0b:31:bf:a6:fd:bc:b4:18:a1:
                    eb:ef:50:12:3a:dd:36:62:e2:58:25:df:76:25:a2:
                    69:69:f2:25:80:f9:a1:21:05:78:76:ef:d1:eb:b3:
                    c4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:34:97:68:F9:36:09:B1:D9:9E:27:09:F8:65:DE:DE:31:01:AC:8D
            X509v3 Authority Key Identifier:
                keyid:DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:44:d8:d0:b5:30:60:d9:5a:bd:f3:42:e0:2a:90:1e:40:e8:
         32:48:4b:61:b9:9c:ad:2f:96:a6:fa:02:de:8c:70:ea:7e:0d:
         23:e2:43:9b:59:5b:50:05:2a:01:9b:f1:03:ca:c3:fa:30:29:
         fa:94:02:6f:21:36:a0:fa:c2:9c:b2:27:d3:01:26:8a:c5:46:
         64:d0:cb:4c:c3:2e:a7:95:9e:a4:46:65:c6:2e:0c:df:69:20:
         84:e8:29:56:4b:de:ff:5f:b2:8e:60:1f:3f:3b:7f:c5:cd:18:
         0e:01:e8:e4:3b:f3:88:bc:c6:59:2a:4d:d0:1f:0a:81:f4:f6:
         47:46:40:79:cc:05:47:43:50:d5:50:bf:6e:4c:30:2b:e2:a9:
         22:80:37:50:a9:73:48:25:33:c8:b5:38:91:0f:ee:2d:66:bb:
         89:59:75:42:a2:80:19:3b:65:9d:cb:b1:53:2a:61:73:02:d4:
         de:fb:06:c5:68:91:58:19:df:46:9c:bd:01:d9:db:25:aa:ce:
         0e:1e:90:aa:ad:21:e1:65:de:73:03:76:01:83:c0:50:ae:0c:
         c4:53:bf:a9:7e:30:ba:2c:74:65:fa:5d:c8:43:c2:fd:84:3a:
         c1:03:43:b1:ba:0a:60:27:ea:47:61:10:7d:ca:62:5e:40:72:
         9a:b8:55:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:24:42 2025 by rpki-client