Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft
File:                     R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft (raw, json)
Hash identifier:          nK1QywQIIa+R206ypj38hbtb14l/fsCOmboILobxmb0=
Subject key identifier:   46:AB:09:45:41:0A:29:13:19:1E:3D:E1:E4:4A:2F:EB:F3:B3:E1:A2
Authority key identifier: 47:66:2F:9F:F6:B6:43:C4:67:A2:B4:34:B7:6F:82:5E:BB:66:FE:D4
Certificate issuer:       /CN=47662f9ff6b643c467a2b434b76f825ebb66fed4
Certificate serial:       0197488C689E2C408487C35194F622A280D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft
Manifest number:          053B
Signing time:             Sat 07 Jun 2025 04:00:50 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:50 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:50 +0000
Files and hashes:         1: KwW0a13v-16rO2m-BTqCxx8rpAo.roa (hash: krFsjsEBadu6bDJqG1OXIARdZJq+ewHj8q4uQfOufeM=)
                          2: R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.crl (hash: gHNcpAXCltPfHlJGsaXcYOA8UzAe0mJJHe7jigbcJVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:68:9e:2c:40:84:87:c3:51:94:f6:22:a2:80:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47662f9ff6b643c467a2b434b76f825ebb66fed4
        Validity
            Not Before: Jun  7 04:00:50 2025 GMT
            Not After : Jun  8 04:00:50 2025 GMT
        Subject: CN=46ab0945410a2913191e3de1e44a2febf3b3e1a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:32:f7:30:07:f6:84:22:50:ba:10:0f:56:17:
                    f1:d6:1e:53:22:a8:bc:79:ca:36:91:94:e1:e8:a2:
                    a0:fe:4a:c3:71:3b:90:71:d8:c0:ab:ef:8a:0e:f3:
                    06:00:c8:53:16:38:b9:b8:38:af:7c:a8:19:66:d1:
                    9c:b1:3a:66:64:28:b1:97:12:7c:31:3d:9f:61:55:
                    9b:b7:ed:72:7c:c3:ca:2d:f5:c3:97:85:9c:fe:05:
                    aa:a0:f2:c2:e1:ab:67:c6:8b:16:96:ee:f1:23:bf:
                    85:f8:02:c5:67:6d:28:a6:97:7e:14:38:91:23:94:
                    93:17:84:62:82:c5:7b:da:50:b8:8c:98:56:b5:ba:
                    6a:3d:26:e8:7d:aa:88:d9:3e:c5:89:17:9a:f5:77:
                    ec:a6:09:dd:71:ec:02:2f:df:f4:cc:a3:27:11:30:
                    31:a3:22:48:2f:ea:85:ee:9b:05:29:6a:56:21:b3:
                    9c:91:d5:7b:c6:aa:62:66:fb:27:40:71:2d:1e:68:
                    1e:7f:00:4b:81:eb:ae:54:47:0a:de:2e:4c:b4:73:
                    53:e5:b0:e3:d6:e3:e5:08:4e:b0:61:8e:5d:08:74:
                    c9:26:31:29:4b:20:17:75:cd:ce:66:1d:8a:ed:2a:
                    cd:95:ca:03:63:f3:fd:47:d3:e8:68:d3:85:6b:56:
                    62:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:AB:09:45:41:0A:29:13:19:1E:3D:E1:E4:4A:2F:EB:F3:B3:E1:A2
            X509v3 Authority Key Identifier:
                keyid:47:66:2F:9F:F6:B6:43:C4:67:A2:B4:34:B7:6F:82:5E:BB:66:FE:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:57:b1:3e:12:7e:ec:35:3d:f4:8b:d5:fa:27:72:ff:7d:36:
         45:28:a4:18:0e:fe:09:99:a6:bf:59:af:8b:73:b6:28:4d:98:
         85:84:30:25:37:86:9e:d9:a9:37:51:6b:33:be:d4:8c:c1:20:
         91:0c:00:77:97:16:c9:54:f0:00:df:72:ec:54:80:d3:d6:f9:
         03:e2:bc:9d:c8:44:b8:bb:09:f7:57:6e:be:46:8d:4e:0d:e9:
         86:f6:8e:85:6c:94:fe:46:66:f8:5f:53:80:d8:41:4a:a3:38:
         da:30:10:d9:c6:00:5b:aa:f4:12:7e:e7:86:65:c8:47:a5:eb:
         59:9b:39:fd:22:26:03:47:4b:a7:9f:98:2f:4a:e6:cb:4f:2d:
         39:e2:9c:56:46:40:ea:9c:0c:27:7a:81:78:cb:04:fc:cf:f3:
         ec:fb:9b:c6:f4:dd:63:d1:8d:39:48:35:4b:11:66:0f:ca:cd:
         cc:da:d8:41:50:5a:aa:ea:bc:6e:a6:62:ce:5b:6f:5a:30:7f:
         39:41:50:36:d1:12:af:80:ba:c4:61:c3:32:06:51:c9:62:81:
         21:17:c4:b9:ec:d7:eb:7f:1c:04:a0:94:96:88:47:2d:55:40:
         19:96:a3:81:f3:b9:5c:cc:e6:bc:2e:bc:0e:81:57:ef:33:19:
         30:08:3f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:27:32 2025 by rpki-client