Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
File:                     2xhkIiednYtOaOabEpblMtTaDD8.mft (raw, json)
Hash identifier:          ScmT7+ld/nf0w+gyxItoLFkGAaCgEDcn0usVPzmJJA0=
Subject key identifier:   44:6D:D5:4A:45:D6:7F:09:05:DA:A4:F1:1E:1E:76:9F:00:CD:73:9E
Authority key identifier: DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
Certificate issuer:       /CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Certificate serial:       01975A24C49A9331E731E20C96DAE6F7AB50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
Manifest number:          1584
Signing time:             Tue 10 Jun 2025 14:00:48 +0000
Manifest this update:     Tue 10 Jun 2025 14:00:48 +0000
Manifest next update:     Wed 11 Jun 2025 14:00:48 +0000
Files and hashes:         1: 2xhkIiednYtOaOabEpblMtTaDD8.crl (hash: zER6rKDkxhWlBVWHGG2T9lW/LwJE1mWgjZYoZwpzlbU=)
                          2: TtL1ROIX4qoe3FCQrbezbJvdiQE.roa (hash: EUtuOvVr+TGeDq+HxLBuoNhksrH6/dbzAs2zVkQm8sE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 14:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5a:24:c4:9a:93:31:e7:31:e2:0c:96:da:e6:f7:ab:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
        Validity
            Not Before: Jun 10 14:00:48 2025 GMT
            Not After : Jun 11 14:00:48 2025 GMT
        Subject: CN=446dd54a45d67f0905daa4f11e1e769f00cd739e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b3:5d:d1:fd:d9:07:cb:89:57:a9:41:b4:14:
                    91:e2:d1:13:e7:9b:3d:9f:f3:37:6e:06:02:8d:33:
                    79:f7:59:7f:52:85:9e:7f:2b:5a:25:47:06:08:22:
                    dd:7c:b6:fc:58:64:76:7f:9f:43:a0:22:6e:fb:6b:
                    55:38:d9:76:b1:51:98:26:db:f5:d8:dd:df:41:67:
                    45:08:26:77:f1:a5:00:da:14:0c:19:a3:3f:9c:91:
                    28:68:d9:46:c3:be:3b:c6:2d:c4:c4:67:66:29:5f:
                    51:f1:44:cc:e6:29:59:52:86:0e:1c:71:82:35:de:
                    33:77:b2:6e:17:b8:b6:b5:e4:ca:fb:b0:a8:ce:ba:
                    d9:ab:85:0d:36:de:84:01:98:a1:0b:30:bc:91:b3:
                    c1:f0:fe:29:70:c1:78:f6:7c:ae:bf:83:c0:9b:47:
                    08:4d:db:38:33:3f:bc:3f:6f:99:f1:f0:0d:48:41:
                    90:77:6a:be:e0:24:51:51:62:b9:1c:0e:76:f9:5a:
                    2b:f9:c6:6f:2f:42:98:0a:0e:3f:96:a0:e5:7c:49:
                    c4:f5:c5:91:39:af:71:59:11:49:8c:8d:56:11:19:
                    06:90:eb:a7:74:c6:e2:36:99:79:ae:5d:8b:be:34:
                    f9:98:67:1c:9a:b3:8d:1e:9c:fb:ee:2b:88:9a:ab:
                    d0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6D:D5:4A:45:D6:7F:09:05:DA:A4:F1:1E:1E:76:9F:00:CD:73:9E
            X509v3 Authority Key Identifier:
                keyid:DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:b8:1e:85:cd:dc:cf:ef:c7:bf:75:63:08:69:40:07:e4:86:
         37:60:8f:5a:a8:ae:c8:d7:7a:16:fd:74:9e:d9:cf:41:0c:0c:
         e3:e2:62:1a:59:7b:9c:bd:b4:c6:19:47:e7:79:3a:f1:3e:a2:
         10:39:a9:5a:d5:e9:85:ba:09:c9:3c:21:0c:f9:4a:c0:b5:0a:
         b4:c5:50:39:82:c5:36:34:15:0d:9a:70:05:5f:2b:0a:2b:cc:
         a7:00:59:28:88:cd:2a:21:16:c1:d5:a6:7e:a3:34:28:11:f2:
         2b:71:91:61:07:b9:52:b3:70:64:79:52:bf:f5:3b:a7:76:6c:
         c1:30:61:98:65:19:32:3f:4f:5d:77:79:9e:ef:b2:0f:42:a8:
         25:fc:8e:ec:2f:20:71:c2:de:19:3f:ab:b1:d7:ff:c1:54:f6:
         c1:d5:f7:17:9e:e7:a0:3d:66:73:9d:27:a0:1e:6c:f0:96:81:
         54:f3:61:82:fd:a2:41:67:01:13:be:f5:57:2f:8f:4e:29:ab:
         15:f8:f1:3f:b8:71:5f:70:77:2f:9d:9b:e5:f9:68:0e:ab:f5:
         a4:1e:e8:1c:01:08:04:cb:3a:90:05:80:24:48:0b:69:8d:1a:
         03:30:c1:f9:e6:ae:42:6d:ad:d9:35:f4:da:9d:cf:64:15:f2:
         2b:4a:e6:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdaJMSakzHnMeIMltrm96tQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMTg2NDIyMjc5ZDlkOGI0ZTY4ZTY5YjEyOTZlNTMyZDRk
YTBjM2YwHhcNMjUwNjEwMTQwMDQ4WhcNMjUwNjExMTQwMDQ4WjAzMTEwLwYDVQQD
Eyg0NDZkZDU0YTQ1ZDY3ZjA5MDVkYWE0ZjExZTFlNzY5ZjAwY2Q3MzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbNd0f3ZB8uJV6lBtBSR4tET55s9
n/M3bgYCjTN591l/UoWefytaJUcGCCLdfLb8WGR2f59DoCJu+2tVONl2sVGYJtv1
2N3fQWdFCCZ38aUA2hQMGaM/nJEoaNlGw747xi3ExGdmKV9R8UTM5ilZUoYOHHGC
Nd4zd7JuF7i2teTK+7CozrrZq4UNNt6EAZihCzC8kbPB8P4pcMF49nyuv4PAm0cI
Tds4Mz+8P2+Z8fANSEGQd2q+4CRRUWK5HA52+Vor+cZvL0KYCg4/lqDlfEnE9cWR
Oa9xWRFJjI1WERkGkOundMbiNpl5rl2LvjT5mGccmrONHpz77iuImqvQuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERt1UpF1n8JBdqk8R4edp8AzXOeMB8GA1UdIwQY
MBaAFNsYZCInnZ2LTmjmmxKW5TLU2gw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnhoa0lpZWRuWXRPYU9hYkVwYmxNdFRhREQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8wYzAxYzUtMTU3ZC00MGE3LThmY2Mt
NWM3NzIzNDYwMjIzLzEvMnhoa0lpZWRuWXRPYU9hYkVwYmxNdFRhREQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8wYzAxYzUtMTU3ZC00MGE3LThmY2MtNWM3NzIzNDYwMjIz
LzEvMnhoa0lpZWRuWXRPYU9hYkVwYmxNdFRhREQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7gehc3c
z+/Hv3VjCGlAB+SGN2CPWqiuyNd6Fv10ntnPQQwM4+JiGll7nL20xhlH53k68T6i
EDmpWtXphboJyTwhDPlKwLUKtMVQOYLFNjQVDZpwBV8rCivMpwBZKIjNKiEWwdWm
fqM0KBHyK3GRYQe5UrNwZHlSv/U7p3ZswTBhmGUZMj9PXXd5nu+yD0KoJfyO7C8g
ccLeGT+rsdf/wVT2wdX3F57noD1mc50noB5s8JaBVPNhgv2iQWcBE771Vy+PTimr
FfjxP7hxX3B3L52b5floDqv1pB7oHAEIBMs6kAWAJEgLaY0aAzDB+eauQm2t2TX0
2p3PZBXyK0rmaw==
-----END CERTIFICATE-----
Generated at Tue Jun 10 20:16:44 2025 by rpki-client