Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
File:                     2iTDCzw_6UYGKD_phemmuouP38s.mft (raw, json)
Hash identifier:          Vwg+0ORJdz4WByT20n7i69KZCwAl+yBNDl86PH1z/9E=
Subject key identifier:   92:B4:E6:C7:19:B9:D7:1B:48:3E:46:FB:6C:F4:7E:18:8C:5D:26:CD
Authority key identifier: DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB
Certificate issuer:       /CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb
Certificate serial:       01974FA11E7072494A1E85ACAD59EA8668F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
Manifest number:          078B
Signing time:             Sun 08 Jun 2025 13:00:48 +0000
Manifest this update:     Sun 08 Jun 2025 13:00:48 +0000
Manifest next update:     Mon 09 Jun 2025 13:00:48 +0000
Files and hashes:         1: 2iTDCzw_6UYGKD_phemmuouP38s.crl (hash: 8JzfU5EyAI/m8x9QWZdVLds5Gm6eXytqW0YUApOGtOI=)
                          2: 6Ln300RL4O58jHgSpUHDLRYbUKI.roa (hash: eofBUwCHK8t5JjW9bR8TUWY3oK3DcO6MrZsXbVO2VP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 11:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:a1:1e:70:72:49:4a:1e:85:ac:ad:59:ea:86:68:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb
        Validity
            Not Before: Jun  8 13:00:48 2025 GMT
            Not After : Jun  9 13:00:48 2025 GMT
        Subject: CN=92b4e6c719b9d71b483e46fb6cf47e188c5d26cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8c:fd:67:9b:3b:68:a5:0e:d2:5b:d3:4f:9f:
                    d1:d7:83:50:fc:ae:66:8b:13:2a:61:e4:12:04:60:
                    7f:7e:3e:b9:1b:94:1f:df:8c:0e:5c:43:ff:e4:55:
                    f5:5b:a4:85:60:cb:3d:8e:bb:d9:c5:e0:91:d3:53:
                    ec:44:28:9a:a4:5d:3b:24:d2:61:eb:31:97:18:d1:
                    53:93:67:aa:c4:be:4c:02:49:2b:9d:0b:bd:23:b7:
                    c3:ef:2e:32:03:94:7c:90:27:cc:59:99:d6:30:26:
                    b1:15:bc:b1:5e:1b:61:e8:bc:dd:4e:0f:de:41:2e:
                    fd:ee:ee:28:6f:3a:68:a7:1d:83:1d:33:f9:e3:46:
                    ed:be:e3:71:79:dc:6e:0d:7e:04:64:19:5b:5d:f1:
                    16:ed:b0:10:f8:6a:d0:2c:63:71:26:77:11:6a:3f:
                    b3:9e:a4:93:32:91:af:6c:af:a7:cd:6f:c0:33:e1:
                    2c:70:ae:42:2c:43:8d:f1:db:f5:0b:e3:bc:d1:bf:
                    31:83:80:58:bc:78:d9:0f:12:db:b5:bf:be:a8:40:
                    cb:3c:93:d8:16:f5:eb:52:60:3b:3f:9c:6f:f2:be:
                    1e:b0:9f:02:3d:99:41:fe:b5:60:67:bf:20:81:d1:
                    34:45:26:ff:06:67:e5:5d:1c:2d:70:7d:f2:89:ed:
                    d3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B4:E6:C7:19:B9:D7:1B:48:3E:46:FB:6C:F4:7E:18:8C:5D:26:CD
            X509v3 Authority Key Identifier:
                keyid:DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ef:96:77:c8:10:39:ac:35:41:66:97:80:c0:ac:20:a7:0b:
         37:7d:c5:c9:5d:10:f6:53:6c:e9:e8:d4:b0:0e:b2:b0:d3:55:
         78:6c:3c:6d:78:7d:0b:f7:b7:ac:9e:71:1c:db:2d:e5:a5:e3:
         09:fe:7d:1f:f7:77:8a:77:ca:86:de:dd:4a:cc:3b:d4:fb:22:
         fa:3d:13:b4:27:c0:de:18:a0:0b:b6:cf:7a:c9:59:83:36:99:
         d8:01:55:58:98:9a:a3:2c:8b:fc:44:a1:cc:08:c1:ca:b3:1d:
         51:46:a5:7e:97:d0:43:46:d5:41:5e:9a:d2:95:9a:67:52:c9:
         ed:21:4d:98:7e:92:2b:b2:2d:c1:46:16:bf:17:17:48:98:7b:
         37:6c:48:f6:02:c9:c7:74:fd:ae:90:d4:6d:f6:5f:ab:7e:18:
         a3:0f:3f:a6:5d:10:20:1b:db:4a:71:c6:e8:49:32:a8:53:d1:
         fa:d3:05:8c:fb:1b:3e:69:1b:bb:9a:a1:6b:29:a3:3c:82:3b:
         1c:ea:e2:7a:5a:71:c9:ad:ee:4c:f9:ec:58:c3:79:1f:e5:b0:
         48:72:cc:f1:69:9d:7c:9f:03:0e:fc:08:4a:63:9d:10:4d:28:
         e9:8c:83:06:83:c6:8e:68:7d:2b:77:85:3e:07:ce:41:37:7f:
         2c:d2:75:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:38:43 2025 by rpki-client