Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft
File:                     2MIJbMDFVXy6tsENYdB30Hj-cX8.mft (raw, json)
Hash identifier:          333bVoKe6FqyWk5T2K0wROt86F2aEOYZj5VRb2ldLl4=
Subject key identifier:   32:C4:5D:12:10:5C:59:8A:60:2C:8B:89:8B:40:61:35:95:7A:0F:C8
Authority key identifier: D8:C2:09:6C:C0:C5:55:7C:BA:B6:C1:0D:61:D0:77:D0:78:FE:71:7F
Certificate issuer:       /CN=d8c2096cc0c5557cbab6c10d61d077d078fe717f
Certificate serial:       019747E7CB27AC78E88CF8FA667D95C8426B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2MIJbMDFVXy6tsENYdB30Hj-cX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft
Manifest number:          0711
Signing time:             Sat 07 Jun 2025 01:01:02 +0000
Manifest this update:     Sat 07 Jun 2025 01:01:02 +0000
Manifest next update:     Sun 08 Jun 2025 01:01:02 +0000
Files and hashes:         1: 2MIJbMDFVXy6tsENYdB30Hj-cX8.crl (hash: 451d1cDdFtluIqiW/pMv0l2kQOC4Wz3lvYLbmMiuzgc=)
                          2: v--QteSWi6tQPkHDzqMh-ib3Ea0.roa (hash: 4DKBaLEIdscFHQJRoeUgffvp/rQ3x54nPWPAJ4H+N0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2MIJbMDFVXy6tsENYdB30Hj-cX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:e7:cb:27:ac:78:e8:8c:f8:fa:66:7d:95:c8:42:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8c2096cc0c5557cbab6c10d61d077d078fe717f
        Validity
            Not Before: Jun  7 01:01:02 2025 GMT
            Not After : Jun  8 01:01:02 2025 GMT
        Subject: CN=32c45d12105c598a602c8b898b406135957a0fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:70:bd:a6:63:5f:c2:7a:3a:c6:75:b0:1c:7b:
                    fb:f1:1a:a9:e6:bc:56:01:6e:1e:69:cd:8f:65:b7:
                    f0:cd:bd:d4:79:14:45:c5:fd:b9:1e:c9:52:68:94:
                    5f:bc:04:81:b9:56:6d:cf:af:f1:2f:f4:3c:50:8e:
                    dc:9f:4b:67:ad:8d:62:59:83:ba:2d:54:65:10:63:
                    96:ef:76:f0:58:9b:7c:f6:24:44:f7:5e:9e:a0:94:
                    7e:03:7f:8d:e7:ea:42:a6:d2:f5:83:ef:b3:fb:2a:
                    be:2e:13:51:85:d8:a1:7d:f8:44:ca:84:59:ee:0e:
                    25:08:3b:40:83:b6:ed:e4:f1:71:ef:26:dd:37:e6:
                    55:f7:c1:3b:c8:c6:a3:9c:d9:6f:2d:0b:77:c4:f2:
                    77:5f:fb:46:92:8e:b7:61:b9:80:60:a5:a6:50:53:
                    15:1e:10:87:17:b5:e0:4d:7f:1d:ca:e0:44:9b:7d:
                    ff:88:68:6c:67:04:65:69:ac:8a:25:b1:56:f9:40:
                    91:18:da:0a:a9:07:57:bb:c7:d5:18:f6:fe:10:bf:
                    84:c5:c4:fa:eb:e1:46:b0:fa:22:8a:8a:5b:7d:60:
                    c5:60:ef:2f:ab:10:a9:0d:74:91:50:56:b5:05:ba:
                    7a:01:80:34:6e:92:48:03:6d:f0:2a:32:90:30:a4:
                    a1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C4:5D:12:10:5C:59:8A:60:2C:8B:89:8B:40:61:35:95:7A:0F:C8
            X509v3 Authority Key Identifier:
                keyid:D8:C2:09:6C:C0:C5:55:7C:BA:B6:C1:0D:61:D0:77:D0:78:FE:71:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MIJbMDFVXy6tsENYdB30Hj-cX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:62:54:7c:a2:54:d6:6f:4b:dd:f2:2b:e0:36:81:81:c0:44:
         57:c6:19:fc:88:ea:c7:40:47:a3:9d:c0:c5:d7:5b:67:66:bf:
         4a:cf:ee:84:09:03:05:c2:d2:92:e3:21:27:7e:02:ec:1e:6e:
         b3:f2:56:09:52:a8:83:1d:6a:29:50:25:f7:85:87:a5:b3:3f:
         d6:45:43:c5:f1:76:66:f9:c0:7f:d8:0a:6e:bc:65:a0:ed:21:
         72:e7:e0:d1:2f:4d:4a:3a:20:e8:49:a1:3a:84:96:01:c9:ac:
         37:13:d9:67:f9:7e:bc:cb:35:95:af:4d:19:5b:0b:30:cd:bb:
         72:55:1c:f0:37:0a:a2:6b:44:41:3b:5b:58:8a:2d:64:94:5a:
         c1:f1:2e:62:6a:e9:d7:75:4e:20:7f:67:c7:bd:0a:24:34:b0:
         e4:a2:02:bf:81:d7:49:57:c2:8b:4e:3d:66:2d:79:82:ef:67:
         da:3d:f2:81:6d:ce:ee:14:e2:49:a2:27:b5:5e:46:a3:5f:e7:
         f3:a8:41:d0:e7:74:99:5c:7c:b1:e4:ec:8b:b7:2f:f1:dc:71:
         f6:25:9b:b5:d0:78:aa:29:13:da:eb:20:18:ef:91:90:02:d5:
         f6:4d:d3:73:ab:77:01:e9:ae:6b:c5:3b:c7:57:5b:ec:9f:88:
         ac:37:e2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:08:24 2025 by rpki-client