Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
File:                     g2pzvtdapO-ld-2QrTVi4hlR0bI.mft (raw, json)
Hash identifier:          lENhghmCb5K9fjW9i8h4tlFVqpvtQtYMyPaBBngFlbo=
Subject key identifier:   4F:D6:0B:CE:28:DD:44:7C:D0:A5:AE:36:91:31:27:1C:7B:23:86:43
Authority key identifier: 83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2
Certificate issuer:       /CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
Certificate serial:       0197632782E10A3790BA7BAD13B86FEC0F1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
Manifest number:          1390
Signing time:             Thu 12 Jun 2025 08:00:23 +0000
Manifest this update:     Thu 12 Jun 2025 08:00:23 +0000
Manifest next update:     Fri 13 Jun 2025 08:00:23 +0000
Files and hashes:         1: g2pzvtdapO-ld-2QrTVi4hlR0bI.crl (hash: MWlOaz89YHAfAe2UJdxmceElSGdANEkufDlxE2LD7/s=)
                          2: pCExSDuPpylceZEh-3ghVJcWtXU.roa (hash: EmDT0awECjqFFQZyEcdl/Y2PrhZj4pSyXOCLhHqwv2c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 08:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:63:27:82:e1:0a:37:90:ba:7b:ad:13:b8:6f:ec:0f:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
        Validity
            Not Before: Jun 12 08:00:23 2025 GMT
            Not After : Jun 13 08:00:23 2025 GMT
        Subject: CN=4fd60bce28dd447cd0a5ae369131271c7b238643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:08:63:c5:39:09:bf:f4:07:27:7c:61:e3:6b:
                    94:62:8a:68:a3:21:9a:2e:df:1c:d3:fa:ab:a5:05:
                    b3:a8:fc:02:c1:16:40:6a:66:b0:ef:17:39:46:bd:
                    24:03:cf:19:74:74:80:b5:37:8a:36:5e:e3:6e:25:
                    7f:02:cb:a8:fc:e0:1a:23:e4:bd:6f:73:9d:cb:23:
                    2c:f1:1b:c0:f2:c8:df:60:4d:e8:2d:33:31:3d:4e:
                    19:14:c4:ec:3f:d2:28:41:63:75:35:22:74:26:48:
                    24:4c:31:40:da:e8:84:63:65:f1:07:ef:6e:65:a4:
                    6b:1c:06:ed:ee:48:09:85:c5:d9:2f:90:28:e9:b8:
                    00:e9:d2:2c:bb:77:12:a4:40:cb:68:3d:16:6b:ff:
                    60:67:ac:c1:ca:e0:c0:fb:11:d5:51:a3:db:c1:5c:
                    51:8f:db:f2:0d:81:85:df:69:98:4f:c6:6e:e2:16:
                    a4:8f:3f:50:ee:c0:ef:ef:67:7d:2d:23:87:3b:14:
                    b2:12:1c:c6:69:09:11:15:80:98:0d:76:7f:31:17:
                    9d:22:c8:ee:f1:b6:60:d6:68:b2:b3:f5:10:d6:78:
                    d3:33:63:c8:ab:3b:4e:27:f7:50:71:8f:32:42:09:
                    af:09:27:fb:7e:45:f2:e6:ed:1c:e4:e2:98:cb:6b:
                    af:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D6:0B:CE:28:DD:44:7C:D0:A5:AE:36:91:31:27:1C:7B:23:86:43
            X509v3 Authority Key Identifier:
                keyid:83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:a1:2c:94:30:92:aa:59:06:50:93:e7:73:ab:1a:19:63:2e:
         25:c7:14:9e:da:e9:55:92:04:ae:82:b0:5b:4b:83:93:d3:87:
         59:16:3b:24:c9:d5:dc:a4:04:96:15:7c:c2:32:9f:f7:24:27:
         d1:d6:25:40:a4:58:f4:73:ad:31:43:00:85:24:db:e3:37:a0:
         67:f7:ac:b6:56:be:3f:2b:c2:48:9c:58:0a:7d:44:cb:62:18:
         67:61:7f:6a:ce:d7:d1:ea:88:57:cc:f5:83:73:b0:ae:dc:55:
         36:12:6f:b5:db:20:0a:23:89:48:f2:30:b7:66:ec:7a:08:ca:
         fe:09:54:05:0f:b7:1b:7c:d1:ea:7c:92:5d:61:d1:d6:e3:c8:
         23:52:7c:5b:85:f3:f0:4c:58:9f:bd:f7:7b:e7:26:bc:aa:0f:
         47:e2:c6:2e:f3:90:fa:04:cc:00:3d:ba:cd:af:35:84:7c:6d:
         f9:53:b0:9f:8c:43:f2:4f:6c:1e:fd:15:ec:99:1e:0a:16:68:
         77:8e:a4:43:69:36:0d:f5:f4:c7:d2:b4:60:c0:d7:ff:ae:30:
         72:8d:5e:3e:28:e1:53:fa:ec:02:dc:4b:26:ce:33:80:fb:e8:
         4e:f9:f5:b5:93:48:f8:49:ab:18:a0:13:e2:31:8a:d1:fe:57:
         49:6a:da:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 16:06:47 2025 by rpki-client