Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
File:                     2x2jIYQ_n60TjmEV2FvuipILjh0.mft (raw, json)
Hash identifier:          DQINsKE2xwJb4g2hjZk9MNeCu9yjazE8TEACP9IoGm8=
Subject key identifier:   B2:B0:A6:DA:9D:90:68:CB:9D:8B:94:18:55:BD:1E:E3:A3:E1:0C:F9
Authority key identifier: DB:1D:A3:21:84:3F:9F:AD:13:8E:61:15:D8:5B:EE:8A:92:0B:8E:1D
Certificate issuer:       /CN=db1da321843f9fad138e6115d85bee8a920b8e1d
Certificate serial:       0197507C96212A1F5D6256569A9EDB3F0EE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
Manifest number:          157F
Signing time:             Sun 08 Jun 2025 17:00:31 +0000
Manifest this update:     Sun 08 Jun 2025 17:00:31 +0000
Manifest next update:     Mon 09 Jun 2025 17:00:31 +0000
Files and hashes:         1: 2x2jIYQ_n60TjmEV2FvuipILjh0.crl (hash: 9Wkxw6Lw4wTiKJC2oqMv8TMW/69FvgsuktQISe2tk9w=)
                          2: gX7yqrsOZn21TglKYSwC7nvDyYU.roa (hash: OPLFwfaXc7vtj9ls4Hz8OLeHPQAJ08mEvbmGmH8DGlg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:7c:96:21:2a:1f:5d:62:56:56:9a:9e:db:3f:0e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db1da321843f9fad138e6115d85bee8a920b8e1d
        Validity
            Not Before: Jun  8 17:00:31 2025 GMT
            Not After : Jun  9 17:00:31 2025 GMT
        Subject: CN=b2b0a6da9d9068cb9d8b941855bd1ee3a3e10cf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e9:1d:41:26:d4:cb:70:57:ae:14:69:80:26:
                    f5:1d:81:de:4e:9c:66:7b:67:cd:00:d2:ea:ea:d4:
                    bf:a5:0a:b4:c2:82:4e:66:a8:52:e2:1e:90:fd:a9:
                    b5:3f:63:c9:6b:0f:f2:b7:88:69:89:c6:c0:94:c6:
                    72:3c:e0:f7:61:0f:2a:45:14:37:c7:57:93:ee:73:
                    95:9c:b4:95:22:d2:85:ef:20:ca:13:cf:e5:e0:56:
                    21:77:d5:ed:79:4a:a2:6c:35:a9:71:a9:28:94:5a:
                    2f:a7:95:63:12:4a:5d:60:90:5e:dd:73:5f:33:72:
                    3f:ef:fd:67:3d:dc:73:57:ac:ea:c5:d5:f3:46:75:
                    f7:3d:a9:87:12:9d:fa:5c:1e:a2:bb:ab:02:2b:5a:
                    04:6c:54:ca:52:95:0a:79:14:22:eb:28:1b:8e:17:
                    44:9d:ee:ef:59:58:bc:44:8a:58:3d:b6:11:d3:17:
                    c4:36:a9:90:b5:65:e3:54:8e:cd:71:49:4e:db:c5:
                    6d:18:a3:f7:39:8e:bf:10:41:e6:33:5b:22:6d:b1:
                    74:a8:3e:9a:ed:2a:c9:ab:4f:c6:4b:f0:9a:57:a3:
                    2a:75:5c:bb:2a:93:9e:59:f0:a9:33:98:f6:93:48:
                    9d:88:59:89:89:44:58:d5:19:58:d7:16:f2:c2:d9:
                    62:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B0:A6:DA:9D:90:68:CB:9D:8B:94:18:55:BD:1E:E3:A3:E1:0C:F9
            X509v3 Authority Key Identifier:
                keyid:DB:1D:A3:21:84:3F:9F:AD:13:8E:61:15:D8:5B:EE:8A:92:0B:8E:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:8b:fb:c8:b2:49:31:10:9c:8e:3b:39:e4:43:26:85:33:80:
         10:a8:86:dc:bf:05:1b:bc:b5:a3:14:50:b5:65:1e:ba:54:a7:
         2c:a2:30:6c:8d:c6:e6:07:4b:e3:f3:d9:6a:41:80:c7:34:52:
         c0:0c:eb:b8:08:19:58:9b:62:42:2e:84:a4:20:20:11:77:7c:
         9f:66:4f:7b:a9:cd:e0:81:ba:5b:5d:f8:ff:09:70:f2:29:08:
         81:59:13:14:0f:95:7f:eb:87:eb:1f:ed:79:07:a2:4b:4b:d5:
         b1:98:cf:f4:93:5a:20:24:bd:0a:ad:e0:ae:ff:ec:2d:90:97:
         d7:31:2b:90:4d:b9:fa:7d:f9:c3:e4:52:54:69:2e:e0:f4:f1:
         f0:a9:67:25:68:43:af:db:53:cc:f8:49:98:79:01:5d:13:d5:
         d7:80:80:e5:b1:ac:f4:6f:01:90:1e:12:d1:57:43:be:f7:da:
         82:b9:56:07:82:11:ed:f5:46:65:a3:b3:94:bd:da:3b:a6:a5:
         53:a6:d8:3f:bf:79:cf:cc:05:6a:d9:61:05:c2:aa:6a:26:a5:
         9a:46:26:8f:c8:4b:7e:8b:a0:8f:6a:a6:64:a9:6b:4b:81:1d:
         f3:96:10:bb:95:5f:43:a1:5f:9f:58:f9:ea:f2:a2:e8:66:5d:
         f3:9c:79:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:30:50 2025 by rpki-client