Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
File:                     K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft (raw, json)
Hash identifier:          JjtBxYXqaREtS0xbagLRsuQbe1y0OO0lulvnR0F+zjg=
Subject key identifier:   F5:22:B0:7E:20:21:6E:8F:5F:D4:7A:CD:7E:63:FC:A5:7A:2E:51:DE
Authority key identifier: 2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3
Certificate issuer:       /CN=2bf7ef33dd19690d94941c92fb31479550a917b3
Certificate serial:       019750B376F44179D9DE557A400208FDCD55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
Manifest number:          032E
Signing time:             Sun 08 Jun 2025 18:00:28 +0000
Manifest this update:     Sun 08 Jun 2025 18:00:28 +0000
Manifest next update:     Mon 09 Jun 2025 18:00:28 +0000
Files and hashes:         1: K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl (hash: +lQuA2H2ygjxJfMZ8gPkESeXu3Ei9J4ADStH0mbYqT4=)
                          2: TOPYw7YFWEAu7oYT1AfYZdgQtaE.roa (hash: qOIyQIvyLn/Q2C2VwhGhnpqFg11I5FE5kKtTCYisDKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:b3:76:f4:41:79:d9:de:55:7a:40:02:08:fd:cd:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf7ef33dd19690d94941c92fb31479550a917b3
        Validity
            Not Before: Jun  8 18:00:28 2025 GMT
            Not After : Jun  9 18:00:28 2025 GMT
        Subject: CN=f522b07e20216e8f5fd47acd7e63fca57a2e51de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:33:43:cb:82:4b:e0:ac:9e:3f:b0:09:6c:d7:
                    cb:d4:ad:1d:f5:f2:48:a6:9d:1f:b6:5e:aa:37:93:
                    4a:8b:ac:3d:ea:bf:58:e5:eb:f3:70:93:48:f6:3a:
                    c8:50:4f:f7:53:d2:f5:5c:93:ee:a5:42:8c:de:c6:
                    df:e2:ac:93:f3:c3:0b:af:80:2d:b7:d1:d4:fe:ab:
                    d1:f4:ca:33:9c:85:f4:71:71:01:e5:e2:0e:b2:54:
                    37:63:82:28:8a:cc:2d:9a:d7:19:3e:3a:30:c0:c5:
                    e0:1a:2c:ea:be:ea:57:bf:ec:30:0a:24:36:8b:bd:
                    e0:e9:9b:cc:68:83:52:00:c6:12:26:1d:ef:41:82:
                    1c:7c:b4:d7:17:ec:d7:9a:ae:4c:63:78:5d:c7:fe:
                    21:70:1e:1b:8c:16:68:15:7c:5b:b3:0e:41:eb:78:
                    b6:b7:48:3f:85:ca:43:07:41:d9:b0:b8:43:fa:2c:
                    12:cd:cd:f2:d3:65:d3:4e:8c:83:6b:ac:2a:f7:1d:
                    81:5a:77:66:15:4d:46:8c:27:80:4e:2a:d0:91:5d:
                    3d:24:c2:13:e1:44:96:82:9a:ca:5b:ee:c5:6e:bc:
                    25:bd:20:55:80:a0:76:e9:35:c9:4e:25:77:2d:b9:
                    c2:11:e3:a2:63:8d:97:b7:f8:aa:d3:74:8c:58:8a:
                    6e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:22:B0:7E:20:21:6E:8F:5F:D4:7A:CD:7E:63:FC:A5:7A:2E:51:DE
            X509v3 Authority Key Identifier:
                keyid:2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:27:df:ef:d9:18:0e:0a:68:f2:57:14:b1:88:67:d8:71:a0:
         bf:8b:f1:e1:d3:84:e6:34:23:66:c4:97:c6:48:45:c2:69:88:
         32:33:21:fe:94:60:f9:f2:2a:0f:8c:e4:f0:b8:ba:48:a0:46:
         95:03:95:55:6a:32:f6:78:4a:08:12:59:75:01:94:07:06:bd:
         06:15:13:cf:1c:4a:54:e9:a9:73:ea:e3:f4:bc:be:db:dd:b9:
         6d:8e:4f:23:7c:cf:3f:f9:44:41:5b:fa:06:88:06:96:a0:ae:
         f7:42:0d:19:6c:91:2b:13:56:0f:81:f9:2d:1d:f5:e1:89:cc:
         19:c0:3d:1e:00:4c:c2:30:16:00:b0:a5:87:d0:e9:97:a2:e6:
         67:b6:9b:2b:70:91:da:2c:35:b5:2b:ec:7f:1a:ef:f4:b1:c8:
         55:5e:68:ba:f9:aa:e9:a3:9a:98:61:fe:eb:5e:51:ad:5a:6c:
         37:70:b9:a1:a2:4b:79:9f:9e:61:82:2f:ea:f3:37:2f:10:f5:
         6c:b1:cc:ea:91:13:e0:da:6e:0a:b7:79:0e:93:4f:a4:b5:f4:
         39:24:54:f1:ae:f6:f5:d1:12:cb:b5:1f:07:b6:db:64:c2:f1:
         f7:a9:5e:1e:7e:fb:5a:20:ce:c3:24:86:3d:25:df:2a:96:34:
         f0:02:42:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:10:13 2025 by rpki-client