Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
File:                     2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft (raw, json)
Hash identifier:          Xbr/SG9SHPSVKmri4raUXF7+qKNYMhG3hkYd6yOKaUw=
Subject key identifier:   18:10:5C:F8:19:D8:95:20:BE:1F:4D:74:B2:97:AE:EF:08:44:5D:48
Authority key identifier: DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
Certificate issuer:       /CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Certificate serial:       0196BB921944C266A24F565DBE2A8F6896E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
Manifest number:          1307
Signing time:             Sat 10 May 2025 19:00:36 +0000
Manifest this update:     Sat 10 May 2025 19:00:36 +0000
Manifest next update:     Sun 11 May 2025 19:00:36 +0000
Files and hashes:         1: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl (hash: toLQ3+zA36lgUbiSEOZyZcPoDQX86n2qhraJy8I/XUY=)
                          2: wHiz844bSnAZ4Nug3ceKjQdatmc.roa (hash: /mOXe5EHXrP0fFZ7gg8le5T3+NCaa6O//12eYo5yKX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:92:19:44:c2:66:a2:4f:56:5d:be:2a:8f:68:96:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
        Validity
            Not Before: May 10 19:00:36 2025 GMT
            Not After : May 11 19:00:36 2025 GMT
        Subject: CN=18105cf819d89520be1f4d74b297aeef08445d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:54:50:12:5a:1e:ac:41:2b:74:ca:05:0b:5d:
                    e2:1f:51:b7:5b:37:a4:42:52:d9:d3:b6:b3:ba:39:
                    4f:74:0c:80:15:ca:e6:46:92:ec:19:e7:11:4e:cd:
                    6d:0c:8d:af:5b:4e:b5:12:a9:f2:ee:d1:39:3c:eb:
                    1f:43:5b:16:12:32:8c:35:c5:85:66:e0:86:41:10:
                    67:c3:dc:eb:25:8c:4b:6b:64:d5:09:ec:3a:f5:ca:
                    1e:cb:92:36:30:2b:57:b3:20:62:df:9b:94:f2:2a:
                    af:a7:09:b9:42:85:98:81:d7:f3:e8:d1:c9:42:a6:
                    5b:cf:46:64:e8:43:b1:5c:39:8c:24:1b:8a:a2:05:
                    e4:a6:21:b5:67:d1:2e:b2:d6:e2:d0:1d:43:88:88:
                    df:c8:00:4c:37:d0:30:62:6c:16:08:fe:de:61:c5:
                    7c:16:1f:52:16:5e:07:ec:50:4e:ab:39:2c:af:db:
                    e4:79:92:67:66:08:eb:e8:ba:c9:cd:08:1a:97:c4:
                    fb:21:e5:68:cb:e8:ed:34:8d:43:d1:42:0f:af:80:
                    50:78:83:48:7e:00:30:70:a3:4c:cf:5e:fb:61:a7:
                    df:18:e2:0e:d3:2f:4f:14:71:07:42:91:b9:07:be:
                    aa:da:c2:5c:5e:b4:35:2e:09:99:0b:f2:ca:fa:f2:
                    86:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:10:5C:F8:19:D8:95:20:BE:1F:4D:74:B2:97:AE:EF:08:44:5D:48
            X509v3 Authority Key Identifier:
                keyid:DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:1b:05:29:f6:7b:a4:f8:33:cc:35:22:a5:48:fc:ba:b8:e0:
         16:2a:33:c4:e0:2b:14:82:90:a3:5a:7b:c9:31:8b:2f:5a:f0:
         9f:f6:35:d1:fd:cd:35:84:e8:a3:ae:da:56:1d:87:6e:4d:f6:
         80:58:8c:5c:9b:54:a2:c8:c1:c0:89:56:ce:52:da:4f:79:e0:
         04:53:f8:a2:7c:79:65:93:fb:72:8c:a4:2d:8c:e9:bc:39:85:
         06:bb:24:39:7b:b7:9d:36:95:15:53:8d:3f:43:17:2b:15:c1:
         5a:d9:37:cc:af:d7:68:50:f5:95:54:ef:fe:d2:a1:25:82:50:
         8c:d6:62:26:5d:bf:57:23:a6:d1:3c:85:59:80:43:5e:64:af:
         e6:9b:18:87:36:be:a5:be:13:a9:0d:fa:c2:89:0c:9e:f6:eb:
         e0:5f:09:27:ee:41:25:87:3c:d7:0b:ef:f8:fd:51:28:0e:10:
         cf:40:00:9e:f1:9e:5f:3b:5c:80:ee:d8:1b:51:af:6f:d0:35:
         ef:b3:c5:b2:2c:31:9e:b9:d3:e6:d8:30:5c:d5:d4:9e:8b:82:
         56:89:16:39:3d:dc:89:83:7d:56:9b:ed:27:fb:41:cb:40:e6:
         24:80:ca:c5:07:c7:3b:08:6c:a8:e8:be:f8:0d:0e:90:c1:fb:
         14:02:7a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:29:07 2025 by rpki-client