Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft
File:                     C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft (raw, json)
Hash identifier:          l5BP34/7zF7uh0w3qAkHLWP9vtp4dCeUzltI6Z8CFvE=
Subject key identifier:   29:B6:C9:E3:DB:CE:40:13:3F:BF:B5:63:12:A5:8B:A5:12:CB:7F:C6
Authority key identifier: 0B:69:08:7C:EF:60:03:58:EF:98:C1:C9:7D:A0:72:34:DF:D0:E0:37
Certificate issuer:       /CN=0b69087cef600358ef98c1c97da07234dfd0e037
Certificate serial:       0197CB02C9CDE5FFAFC55EEE7B9F1FA8DF66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft
Manifest number:          30
Signing time:             Wed 02 Jul 2025 12:00:46 +0000
Manifest this update:     Wed 02 Jul 2025 12:00:46 +0000
Manifest next update:     Thu 03 Jul 2025 12:00:46 +0000
Files and hashes:         1: B9IzXLL2ixuUY8NCctMry3Z9SSY.roa (hash: LgY0TUvH+7Vh/0iBbmvFVKw12ZRzdi35NQADfuagyL0=)
                          2: C2kIfO9gA1jvmMHJfaByNN_Q4Dc.crl (hash: OyGGC7lS9DFK+hOQzAu75vPbAzs184OZvhW0HHfB96s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cb:02:c9:cd:e5:ff:af:c5:5e:ee:7b:9f:1f:a8:df:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b69087cef600358ef98c1c97da07234dfd0e037
        Validity
            Not Before: Jul  2 12:00:46 2025 GMT
            Not After : Jul  3 12:00:46 2025 GMT
        Subject: CN=29b6c9e3dbce40133fbfb56312a58ba512cb7fc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:19:57:6f:ea:44:4c:66:0c:6e:29:83:78:b8:
                    45:6b:1f:be:e1:e9:14:70:8a:f8:a1:43:23:54:24:
                    25:ef:75:86:1d:28:ff:42:9b:51:6e:c9:0d:07:d0:
                    ce:d8:85:ba:47:6a:ed:72:73:34:25:1e:ac:93:ff:
                    03:b5:17:70:fb:28:ab:63:ca:84:f2:e3:bf:00:74:
                    e9:bd:35:0f:d4:4f:98:be:22:90:32:66:81:5a:bb:
                    05:20:29:dc:32:04:8b:43:5d:0c:a5:aa:b1:47:4e:
                    7a:1d:d2:52:42:19:72:4a:3f:8b:ca:1f:b0:66:18:
                    0e:81:9a:4d:de:e8:2b:95:2d:e7:71:9c:6c:a0:fa:
                    2e:1b:32:29:02:49:48:ee:08:21:a3:cc:be:3e:f3:
                    bb:4e:e8:54:b3:47:9c:b3:55:74:7c:cb:2a:f7:16:
                    20:9f:2e:64:5b:d3:18:02:ec:4e:41:b8:e8:5d:87:
                    b3:25:87:ea:3b:a8:81:30:cd:51:31:cf:6d:da:c8:
                    8f:57:ce:ed:e7:1d:57:73:56:53:0c:fa:90:a8:53:
                    97:f0:f3:f5:6b:59:68:b6:5b:65:f3:91:38:a0:df:
                    a5:51:bd:26:08:92:05:ab:5a:61:0e:8d:62:15:5c:
                    41:45:96:5a:9d:5a:d0:2a:2e:7a:a2:eb:c3:e8:4a:
                    1a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B6:C9:E3:DB:CE:40:13:3F:BF:B5:63:12:A5:8B:A5:12:CB:7F:C6
            X509v3 Authority Key Identifier:
                keyid:0B:69:08:7C:EF:60:03:58:EF:98:C1:C9:7D:A0:72:34:DF:D0:E0:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:e3:0c:87:6b:43:b4:c9:35:d8:c4:b8:99:8e:b6:39:3e:1d:
         8f:15:23:76:82:67:5c:d5:66:a1:35:28:9d:0d:ee:a1:8a:98:
         f8:25:50:69:f1:3a:30:f9:c6:f9:82:9a:f1:ec:16:59:98:ee:
         17:b7:68:56:42:f8:5d:9a:a5:23:40:66:9f:80:e7:47:3b:c0:
         61:da:6b:18:95:71:a5:ea:ff:1a:69:37:03:7a:44:70:2a:a1:
         1b:f3:d1:67:67:fe:cd:c9:f5:97:3b:a3:7e:d4:8a:dc:4b:c6:
         16:6a:3e:b6:45:65:3b:cc:f6:fe:f1:c7:80:d7:10:75:0c:dd:
         20:38:35:53:34:e4:cc:12:a6:13:18:04:b6:6b:c7:81:24:2a:
         8e:37:e7:f5:79:43:f2:11:ed:73:4d:24:4a:a7:7a:68:ce:36:
         ba:71:e9:39:62:32:f2:6b:f4:72:64:b8:ee:60:af:af:57:37:
         b6:d6:3f:5c:10:19:b4:bc:f1:7d:f8:fa:a6:c8:12:c9:fe:a7:
         9c:cd:ef:5c:17:e3:78:c0:c2:3a:d8:64:d6:57:5b:3b:16:b3:
         0a:42:0c:75:33:d3:88:25:f3:b3:5a:e6:9c:73:2c:02:06:5a:
         4d:6e:c4:3d:b8:17:c2:c2:83:11:ca:7a:9f:4e:48:6b:ce:b1:
         3e:fb:fe:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:36:07 2025 by rpki-client