Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
File:                     2m3EGSZFyEKk-i-II08uWhhMdmQ.mft (raw, json)
Hash identifier:          GNzIT2fmmQ3/yRZ30Ki6ZePdIkbeQSuminKhJRbETVA=
Subject key identifier:   C9:70:0D:01:F0:6F:7E:48:83:B1:CC:6D:0A:69:E6:7B:4A:41:95:83
Authority key identifier: DA:6D:C4:19:26:45:C8:42:A4:FA:2F:88:23:4F:2E:5A:18:4C:76:64
Certificate issuer:       /CN=da6dc4192645c842a4fa2f88234f2e5a184c7664
Certificate serial:       01974A439F4A1F02B0D249DC71CC81A25F2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
Manifest number:          06DA
Signing time:             Sat 07 Jun 2025 12:00:34 +0000
Manifest this update:     Sat 07 Jun 2025 12:00:34 +0000
Manifest next update:     Sun 08 Jun 2025 12:00:34 +0000
Files and hashes:         1: 2m3EGSZFyEKk-i-II08uWhhMdmQ.crl (hash: ygrxtQFWlDikdemmwnIJEpsgBgKNUu/Ti83hYp0vNc8=)
                          2: JwOlXzHs1rdGVXlkVOqZWuxz-yI.roa (hash: PGrtrfZNHqKpdplaHtlzlb/8zTI8cEQQrTdbVPKqLz0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:43:9f:4a:1f:02:b0:d2:49:dc:71:cc:81:a2:5f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da6dc4192645c842a4fa2f88234f2e5a184c7664
        Validity
            Not Before: Jun  7 12:00:34 2025 GMT
            Not After : Jun  8 12:00:34 2025 GMT
        Subject: CN=c9700d01f06f7e4883b1cc6d0a69e67b4a419583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9a:ec:fc:ee:a0:94:d4:ed:52:13:22:87:40:
                    2c:57:a7:f6:f6:6a:18:72:4a:42:d5:e3:f7:b5:81:
                    ed:47:b3:ec:04:0f:0e:b7:04:d6:90:c4:51:2b:9b:
                    85:44:20:24:c3:57:5f:cd:83:c7:2f:f5:f2:48:5d:
                    5c:20:a4:45:09:d3:1a:bc:00:d3:64:1c:7e:48:0c:
                    06:88:5d:c0:6c:be:dd:1d:c2:16:fa:e4:c9:70:fd:
                    3f:7c:a6:4b:aa:5a:f8:33:16:78:14:0c:fd:2b:c4:
                    83:e8:36:e0:c4:43:ef:bc:88:a2:77:66:6c:59:6e:
                    62:f2:c0:52:39:75:b8:cc:1e:78:a9:d1:49:b2:cb:
                    7c:a6:16:cd:02:7b:c3:d9:1b:7d:4d:d5:7c:fb:50:
                    4b:7b:64:52:ff:8c:23:37:ce:13:21:97:a6:39:00:
                    4b:03:df:fb:45:f1:d2:2d:f6:e9:d1:b7:f2:ea:16:
                    95:59:db:3b:53:9b:38:e2:97:21:cc:38:76:b9:bf:
                    c1:dd:6e:14:f3:93:c1:0b:f9:9d:aa:63:e8:a9:7e:
                    9b:7d:b1:bd:ad:7e:68:02:a0:46:ee:db:0c:27:82:
                    38:b7:fe:a3:43:52:70:9c:df:6c:9e:e7:bd:3c:bd:
                    1e:43:90:d1:65:0f:c1:a3:54:e9:3c:26:a8:fc:85:
                    79:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:70:0D:01:F0:6F:7E:48:83:B1:CC:6D:0A:69:E6:7B:4A:41:95:83
            X509v3 Authority Key Identifier:
                keyid:DA:6D:C4:19:26:45:C8:42:A4:FA:2F:88:23:4F:2E:5A:18:4C:76:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:50:f5:33:5b:b0:d4:b3:1c:23:98:51:84:8a:70:d6:25:f6:
         80:dc:3b:1b:af:c3:3d:75:83:b6:a9:d8:fb:18:b9:ba:38:7d:
         96:93:d2:b6:07:e2:59:c7:6c:68:36:40:ad:81:94:f8:c9:35:
         ab:a4:ae:15:3e:53:ca:d2:85:f5:9c:07:b7:75:1d:0b:1a:8f:
         cb:d9:b7:3a:15:0f:03:cc:39:b7:1a:a8:50:21:4e:9f:76:18:
         a6:19:c1:98:71:98:d3:b7:ad:05:2d:29:6c:40:69:c2:c7:2b:
         5b:1e:ff:12:07:16:36:9f:34:c7:39:18:9d:78:75:ea:66:df:
         f6:cc:9f:f1:5e:8c:d8:8f:e9:ab:99:5e:a7:5a:66:7e:c6:ff:
         5d:bd:1a:74:09:42:fc:93:15:71:96:08:cd:c1:9e:f1:89:37:
         65:f7:78:86:d8:8d:45:6f:a5:be:ab:5b:7f:59:e6:d8:c1:ff:
         62:83:3e:d6:32:f7:32:37:43:43:5e:8c:7e:75:33:64:68:35:
         6e:a8:22:73:f4:dd:6b:70:96:cd:9f:4b:9c:84:3d:65:36:ab:
         da:8c:65:2d:98:9a:58:b6:6a:fb:cf:4c:02:91:86:eb:fe:00:
         7f:b6:b5:98:5f:be:15:06:b4:c1:ab:93:57:69:05:76:06:4b:
         ae:fd:ac:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:45:44 2025 by rpki-client