Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
File:                     2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft (raw, json)
Hash identifier:          s3fXYOyPEjyubI5OChlas67kf2ojFOCmet/MonIArck=
Subject key identifier:   B5:A0:F1:36:B8:83:01:E7:47:12:27:55:82:51:A3:FE:29:6B:50:2E
Authority key identifier: DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE
Certificate issuer:       /CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
Certificate serial:       019750EA70FE987B8F8D81A4DA9064369203
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
Manifest number:          0949
Signing time:             Sun 08 Jun 2025 19:00:30 +0000
Manifest this update:     Sun 08 Jun 2025 19:00:30 +0000
Manifest next update:     Mon 09 Jun 2025 19:00:30 +0000
Files and hashes:         1: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl (hash: AXjDrsoOiqZjeVt+pmzLyui32gY33z8en0IbVXa4a14=)
                          2: jOjUJYKoLHn0iKDz6xmlsGUntNA.roa (hash: dqARMuMMhdUxtBH/82mhr6b+TrmEh6Uv8dt27P0LcGo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:ea:70:fe:98:7b:8f:8d:81:a4:da:90:64:36:92:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
        Validity
            Not Before: Jun  8 19:00:30 2025 GMT
            Not After : Jun  9 19:00:30 2025 GMT
        Subject: CN=b5a0f136b88301e7471227558251a3fe296b502e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:eb:b8:4c:a6:9f:94:3b:78:39:7f:6b:8b:90:
                    a3:ea:69:18:7a:8b:7c:b3:c8:64:87:93:b9:2f:3c:
                    d8:89:84:4c:eb:95:db:4c:ac:e2:4c:05:4e:7a:02:
                    5a:09:15:41:09:b5:4c:e6:4b:59:12:21:96:01:4c:
                    75:19:bd:b1:0b:f9:ee:a3:d7:ae:71:48:d1:8b:d0:
                    ad:81:71:b8:5a:48:c3:7e:eb:40:ac:4f:b1:b7:f5:
                    47:72:00:ca:b1:ac:8a:0d:51:ec:46:d3:b7:5f:b1:
                    65:c1:e7:f7:89:44:58:19:40:ec:2d:ea:15:ff:53:
                    60:73:b2:15:9c:02:15:2c:ef:77:92:f1:fd:ff:f2:
                    02:2e:7b:01:fb:88:de:76:1e:4f:6a:13:d0:54:90:
                    f6:a5:f6:c8:d2:9d:6c:6a:c1:fa:18:50:31:34:12:
                    ea:49:b0:74:03:77:59:2d:39:33:93:81:cf:16:94:
                    52:1a:2f:01:3e:5f:47:9b:7f:47:03:c7:90:0d:98:
                    bb:84:15:26:cc:c6:72:dd:e7:cd:2a:3c:5e:48:85:
                    57:a5:f0:46:40:30:d6:b8:be:36:fd:eb:86:0e:48:
                    39:57:6a:40:97:67:4f:3a:0c:00:80:0c:89:f4:df:
                    4a:00:db:02:ef:17:ca:e1:d1:fc:83:35:3f:23:50:
                    cc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A0:F1:36:B8:83:01:E7:47:12:27:55:82:51:A3:FE:29:6B:50:2E
            X509v3 Authority Key Identifier:
                keyid:DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:d9:b9:ce:04:e7:b1:e9:13:47:7c:01:03:29:b1:a4:2d:de:
         e4:db:8b:10:c4:13:c0:bf:5e:f8:03:38:34:eb:2c:aa:1b:da:
         47:54:4a:44:0b:85:9b:f9:ec:e5:2c:86:dd:84:4d:04:69:7b:
         6b:61:66:8a:b9:04:ff:45:75:b3:c3:67:93:69:dc:1d:73:23:
         dc:62:d8:75:41:90:36:1d:97:be:8a:20:66:ea:0b:1e:c5:08:
         30:dc:ef:98:9c:06:99:6e:b8:4d:62:0e:5f:f5:91:70:2d:ab:
         4d:50:23:02:ad:68:97:94:eb:af:79:f2:be:43:29:b3:7c:ae:
         0c:06:2f:04:cb:ce:95:e5:5b:54:ad:6a:e3:ca:d8:43:9a:c3:
         32:41:c6:c3:48:b3:db:d6:e6:17:8b:ff:6b:78:ba:90:8f:08:
         56:ad:8c:70:16:6f:7f:e4:0c:10:22:6b:73:0c:96:6a:8b:81:
         0d:9c:b9:f1:2c:50:be:de:9c:02:5e:4c:ac:8d:6b:5e:df:cf:
         cf:cc:7e:cd:85:89:fa:8f:00:31:9e:15:4b:14:52:93:26:11:
         08:67:d2:d3:49:5e:84:30:bd:fc:13:69:07:0e:e4:59:6b:91:
         b3:80:62:c8:33:88:d2:37:02:20:cb:b1:91:35:49:ea:81:d0:
         02:77:19:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:36:00 2025 by rpki-client