Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
File:                     2CsoRvCTvJQWBBvmiix4MWHrBN8.mft (raw, json)
Hash identifier:          3jQPmU48yJZZKQ8RUL6dJ0aFJzFrPJA0K7/vJGFCyho=
Subject key identifier:   19:7E:A8:88:F5:CA:C6:62:15:1A:48:6C:48:FA:C3:4E:29:F7:EE:60
Authority key identifier: D8:2B:28:46:F0:93:BC:94:16:04:1B:E6:8A:2C:78:31:61:EB:04:DF
Certificate issuer:       /CN=d82b2846f093bc9416041be68a2c783161eb04df
Certificate serial:       01975F4AE62E7BF856EE7D7EDB321A66634B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
Manifest number:          072F
Signing time:             Wed 11 Jun 2025 14:00:33 +0000
Manifest this update:     Wed 11 Jun 2025 14:00:33 +0000
Manifest next update:     Thu 12 Jun 2025 14:00:33 +0000
Files and hashes:         1: 1tdaIrt9xypJtReKdxeXXdM964s.roa (hash: 2jF3CjF80ww6ITNBk+zVZgXhV0QGg1umOnc7I4ePaOY=)
                          2: 2CsoRvCTvJQWBBvmiix4MWHrBN8.crl (hash: iKhw4YY9V4EpczRMyf1mZpgZ60y5bCm7fZKzkkqccrA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 14:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5f:4a:e6:2e:7b:f8:56:ee:7d:7e:db:32:1a:66:63:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d82b2846f093bc9416041be68a2c783161eb04df
        Validity
            Not Before: Jun 11 14:00:33 2025 GMT
            Not After : Jun 12 14:00:33 2025 GMT
        Subject: CN=197ea888f5cac662151a486c48fac34e29f7ee60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b3:3b:b5:f2:d6:fa:ce:35:67:b2:8c:f4:10:
                    d6:d0:fc:b3:c8:c4:17:9f:26:56:5e:50:5b:6a:d7:
                    ef:ae:95:d1:94:b8:8a:fb:ff:45:83:bb:29:b0:f6:
                    b4:ca:24:d4:5a:5b:a4:6f:53:3d:ef:df:f4:3f:3a:
                    3d:f1:b4:ce:5d:89:19:d9:65:a3:ae:ed:7a:91:23:
                    e7:92:84:2a:c8:f1:bf:09:c5:d1:35:bb:5f:09:37:
                    a2:5f:65:da:bf:44:94:a0:4d:c1:6e:71:cc:b3:e8:
                    2c:5e:79:da:b1:63:6f:0a:8b:4b:e9:e1:ee:b0:3f:
                    f5:f8:34:bb:e5:ee:39:fb:94:3c:9d:01:d4:79:71:
                    05:00:aa:31:b5:aa:79:4d:f5:20:18:03:56:25:68:
                    a6:a5:59:a0:4c:64:51:1c:bb:a1:a6:b4:5a:44:cc:
                    26:78:52:cd:14:be:cb:e7:8d:8e:c4:00:ac:b1:1d:
                    bb:64:37:4a:5a:a1:f0:3b:9b:79:35:d2:56:fc:37:
                    6f:07:96:b9:67:c3:8a:3b:e9:f6:8f:bb:71:e4:4c:
                    d6:10:73:84:45:c0:d3:bc:33:1a:94:76:95:77:76:
                    a9:1d:13:f3:53:4e:a4:e6:02:3c:2a:aa:dd:6e:47:
                    f4:6b:e9:1e:71:a0:bd:fc:67:e2:5e:c1:18:73:5c:
                    df:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:7E:A8:88:F5:CA:C6:62:15:1A:48:6C:48:FA:C3:4E:29:F7:EE:60
            X509v3 Authority Key Identifier:
                keyid:D8:2B:28:46:F0:93:BC:94:16:04:1B:E6:8A:2C:78:31:61:EB:04:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:cd:d5:f8:2d:ac:a3:32:df:f7:e9:ed:04:00:e4:a4:54:4e:
         b0:28:03:59:24:c4:c6:9d:3d:c1:a5:aa:e9:b7:36:f7:ff:28:
         1d:a6:06:73:a5:c1:6a:c0:7a:d2:ea:d4:03:37:40:6e:91:5e:
         aa:5f:cc:1e:7f:c8:f9:ac:c9:9c:ea:eb:09:30:c6:21:59:ac:
         74:28:7d:11:a9:79:11:69:4a:f3:09:5e:a7:02:6a:62:e9:45:
         07:05:7e:fa:6d:8b:43:95:93:8c:da:06:fa:99:54:42:c9:a2:
         4a:f4:b1:08:db:ba:c5:76:ef:2f:18:2a:95:be:fc:66:be:5a:
         fa:45:3b:56:e6:1a:98:ae:46:3a:0c:06:d7:98:5a:fd:51:03:
         5b:37:ff:4c:22:af:8a:76:71:3a:5b:26:ff:2a:64:96:82:18:
         6a:b3:6e:29:c5:6f:f9:7d:43:19:e9:e2:d3:6f:5d:0e:50:c2:
         6a:9d:1b:3a:30:59:d3:2c:26:b9:d0:10:00:85:21:14:a6:75:
         16:71:07:35:0b:98:da:5c:76:83:8f:5f:d9:a6:a0:f6:ad:0c:
         f7:66:60:e6:b2:41:48:fc:96:4f:dc:d5:5c:a8:c7:86:6c:b7:
         f9:d8:3c:93:73:ba:de:b4:35:4a:ef:5c:86:19:9f:e8:cd:6d:
         c2:12:c0:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdfSuYue/hW7n1+2zIaZmNLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MmIyODQ2ZjA5M2JjOTQxNjA0MWJlNjhhMmM3ODMxNjFl
YjA0ZGYwHhcNMjUwNjExMTQwMDMzWhcNMjUwNjEyMTQwMDMzWjAzMTEwLwYDVQQD
EygxOTdlYTg4OGY1Y2FjNjYyMTUxYTQ4NmM0OGZhYzM0ZTI5ZjdlZTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrM7tfLW+s41Z7KM9BDW0PyzyMQX
nyZWXlBbatfvrpXRlLiK+/9Fg7spsPa0yiTUWlukb1M979/0Pzo98bTOXYkZ2WWj
ru16kSPnkoQqyPG/CcXRNbtfCTeiX2Xav0SUoE3BbnHMs+gsXnnasWNvCotL6eHu
sD/1+DS75e45+5Q8nQHUeXEFAKoxtap5TfUgGANWJWimpVmgTGRRHLuhprRaRMwm
eFLNFL7L542OxACssR27ZDdKWqHwO5t5NdJW/DdvB5a5Z8OKO+n2j7tx5EzWEHOE
RcDTvDMalHaVd3apHRPzU06k5gI8Kqrdbkf0a+kecaC9/GfiXsEYc1zfdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBl+qIj1ysZiFRpIbEj6w04p9+5gMB8GA1UdIwQY
MBaAFNgrKEbwk7yUFgQb5ooseDFh6wTfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkNzb1J2Q1R2SlFXQkJ2bWlpeDRNV0hyQk44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy81YjJkNmUtODI0Ny00NDhmLWEzNTgt
NTQ3M2VlMWRhYTliLzEvMkNzb1J2Q1R2SlFXQkJ2bWlpeDRNV0hyQk44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy81YjJkNmUtODI0Ny00NDhmLWEzNTgtNTQ3M2VlMWRhYTli
LzEvMkNzb1J2Q1R2SlFXQkJ2bWlpeDRNV0hyQk44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbc3V+C2s
ozLf9+ntBADkpFROsCgDWSTExp09waWq6bc29/8oHaYGc6XBasB60urUAzdAbpFe
ql/MHn/I+azJnOrrCTDGIVmsdCh9Eal5EWlK8wlepwJqYulFBwV++m2LQ5WTjNoG
+plUQsmiSvSxCNu6xXbvLxgqlb78Zr5a+kU7VuYamK5GOgwG15ha/VEDWzf/TCKv
inZxOlsm/ypkloIYarNuKcVv+X1DGeni029dDlDCap0bOjBZ0ywmudAQAIUhFKZ1
FnEHNQuY2lx2g49f2aag9q0M92Zg5rJBSPyWT9zVXKjHhmy3+dg8k3O63rQ1Su9c
hhmf6M1twhLABQ==
-----END CERTIFICATE-----
Generated at Wed Jun 11 21:56:35 2025 by rpki-client