Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
File:                     g2Rixix_Y9L114enAdd5q2luIjY.mft (raw, json)
Hash identifier:          fhcXHBvqBPzWrd0/vm2X/VLI9bkiAdZPzEqqhxnAOLk=
Subject key identifier:   35:9C:46:8B:2E:3C:D9:7D:12:0F:24:76:38:BE:8D:4B:B7:04:E6:59
Authority key identifier: 83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36
Certificate issuer:       /CN=836462c62c7f63d2f5d787a701d779ab696e2236
Certificate serial:       01974A7ACF5456A622CFF96687F2F8F869B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
Manifest number:          068E
Signing time:             Sat 07 Jun 2025 13:00:51 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:51 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:51 +0000
Files and hashes:         1: g2Rixix_Y9L114enAdd5q2luIjY.crl (hash: nYpAZ4FSkNeKJ9jeoTTzaCpiusklA738wOMe8/eJ6Uo=)
                          2: uQEihKiuIl1rl-qFPqFxAyhOwfs.roa (hash: 741H2NNyRCld+680I0F2CoeAI6uDzCv+B0JzFOkmvnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 13:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:cf:54:56:a6:22:cf:f9:66:87:f2:f8:f8:69:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=836462c62c7f63d2f5d787a701d779ab696e2236
        Validity
            Not Before: Jun  7 13:00:51 2025 GMT
            Not After : Jun  8 13:00:51 2025 GMT
        Subject: CN=359c468b2e3cd97d120f247638be8d4bb704e659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ca:98:d4:da:d4:5a:9b:5b:4a:36:21:7f:52:
                    10:bc:04:46:6d:5f:56:c7:db:3f:e8:79:92:61:1d:
                    1d:aa:7c:a2:c2:79:de:b2:c0:cf:31:8f:65:d7:05:
                    83:b6:b1:9e:d4:e6:fd:1e:4d:14:d3:21:fc:fa:ff:
                    9e:43:93:c6:a9:5e:f4:03:d3:5e:9e:50:09:72:0e:
                    79:23:60:fb:07:2f:3e:bf:68:23:86:17:73:1d:d0:
                    22:63:04:1d:fa:60:55:4d:a8:7d:5a:c9:62:df:4f:
                    a0:84:50:9e:a4:0b:ae:af:08:ed:29:77:6b:15:c7:
                    eb:60:73:de:53:3d:2b:00:31:62:c1:b2:6e:07:4e:
                    3e:44:e7:42:8e:dc:39:7e:ea:e4:02:d8:02:39:35:
                    de:f4:3c:d7:a2:b9:b4:60:a7:58:cc:85:a5:ec:71:
                    22:ef:bf:29:b9:98:40:2f:d3:84:48:bb:6e:72:3d:
                    36:6c:35:99:1e:30:20:ef:16:9a:70:7c:ec:08:1a:
                    3f:dc:e1:66:1f:9f:8f:44:2d:b1:9d:e9:09:11:4c:
                    cf:32:f3:14:12:a8:17:13:57:29:d5:e9:5f:80:ef:
                    f5:20:57:ff:98:4c:93:38:18:ea:70:ba:6f:09:20:
                    61:a4:60:74:c1:30:be:db:e1:79:6d:01:27:05:73:
                    6c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9C:46:8B:2E:3C:D9:7D:12:0F:24:76:38:BE:8D:4B:B7:04:E6:59
            X509v3 Authority Key Identifier:
                keyid:83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:6c:aa:84:26:53:cc:4b:b8:77:6e:62:44:05:0a:ca:a7:a9:
         65:9a:70:78:1d:69:c5:12:36:0f:8d:df:f7:e1:9a:7d:21:c0:
         e4:97:f8:0e:d5:44:3a:f3:36:d7:91:b1:e3:78:7a:00:82:0a:
         1f:80:3b:da:22:f4:3f:08:38:39:05:2c:bd:91:e1:7c:cc:84:
         f9:47:14:be:9e:e1:d6:83:af:cb:cb:43:4b:a9:58:7b:dc:96:
         6e:80:ad:47:68:f5:d0:a0:a9:c3:26:92:31:6a:16:12:ad:bd:
         e2:38:98:1a:e8:60:c7:3b:a4:0f:56:c9:a7:de:00:0d:d1:70:
         a8:29:d7:cc:07:3e:df:28:af:b0:46:8e:88:99:9f:50:16:db:
         11:9c:2b:a6:52:ab:73:38:44:d3:43:c5:0d:0f:18:f6:91:f9:
         1a:8d:f1:4b:9e:f5:0a:0d:19:9c:d4:2a:67:fc:b0:d2:38:83:
         76:21:31:4c:88:18:66:ec:d5:9a:66:14:6c:79:35:21:3b:f7:
         c7:59:4e:95:d2:0b:a8:36:14:71:69:e0:d2:70:fd:33:83:30:
         16:1c:96:6e:85:4e:93:62:7a:79:99:cb:64:33:f6:b1:4d:0c:
         b8:e6:6a:cf:95:28:ee:fd:8b:7c:24:f8:b4:ee:f8:78:a8:dc:
         a9:14:d9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:16:15 2025 by rpki-client