Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
File:                     H2_gB5F-tjJ74wYamvbsVI01MGY.mft (raw, json)
Hash identifier:          eGZoiiNJoHTJD2EJG6qeFEOFfCKdv8A22i8GFSa4IF8=
Subject key identifier:   1D:5A:15:82:D8:C5:72:2F:B6:AC:F9:D3:46:3F:A1:4B:D9:6A:E6:FE
Authority key identifier: 1F:6F:E0:07:91:7E:B6:32:7B:E3:06:1A:9A:F6:EC:54:8D:35:30:66
Certificate issuer:       /CN=1f6fe007917eb6327be3061a9af6ec548d353066
Certificate serial:       0197B7B30B045F5D5BC0CA7877C04D256356
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
Manifest number:          0673
Signing time:             Sat 28 Jun 2025 18:00:53 +0000
Manifest this update:     Sat 28 Jun 2025 18:00:53 +0000
Manifest next update:     Sun 29 Jun 2025 18:00:53 +0000
Files and hashes:         1: H2_gB5F-tjJ74wYamvbsVI01MGY.crl (hash: uC4WlxKQxnyMSOoHbriCZB635t2V39iYYkJ2YtWM9J8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:0b:04:5f:5d:5b:c0:ca:78:77:c0:4d:25:63:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f6fe007917eb6327be3061a9af6ec548d353066
        Validity
            Not Before: Jun 28 18:00:53 2025 GMT
            Not After : Jun 29 18:00:53 2025 GMT
        Subject: CN=1d5a1582d8c5722fb6acf9d3463fa14bd96ae6fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7c:c0:70:dc:7e:13:39:ae:99:a8:9a:8e:85:
                    e2:c5:6f:e3:9a:1a:fa:8a:e4:b2:69:42:4a:cd:c6:
                    91:56:30:2a:26:21:14:97:8b:59:b2:e0:da:c0:1b:
                    7a:a6:cc:31:fb:a3:3c:29:91:b9:ee:c8:52:6a:1c:
                    1e:b4:3e:e5:5c:70:1f:d0:c4:35:3c:78:1e:70:52:
                    d4:9a:c3:2a:62:9e:0d:1e:10:c1:cb:c7:a4:34:aa:
                    82:53:6c:34:6a:37:36:39:e6:23:ff:21:a0:92:b1:
                    7d:f6:f7:c0:7d:db:18:22:a1:7a:0e:5f:ea:95:c7:
                    3e:fa:35:61:d1:7a:8f:1d:86:ee:15:4e:d6:6d:25:
                    b5:1e:16:e3:10:80:cf:6e:06:52:d8:00:07:c4:2b:
                    25:f4:40:65:5a:71:c9:09:1a:f2:e4:3c:4c:48:85:
                    a0:82:2a:61:9f:a0:9c:c2:79:f4:32:e2:65:9a:07:
                    f1:18:f1:95:9f:43:46:4f:cb:77:61:02:d9:6f:8e:
                    e2:4d:ea:19:de:de:b0:f4:a0:46:04:84:ee:42:4f:
                    62:a2:ec:43:76:0c:99:dd:c0:05:85:f0:4e:9e:58:
                    86:89:a0:62:ba:e9:db:66:1b:31:bb:79:6f:08:1a:
                    74:e1:bd:86:50:8c:05:e9:20:87:1e:01:a8:34:ea:
                    2d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:5A:15:82:D8:C5:72:2F:B6:AC:F9:D3:46:3F:A1:4B:D9:6A:E6:FE
            X509v3 Authority Key Identifier:
                keyid:1F:6F:E0:07:91:7E:B6:32:7B:E3:06:1A:9A:F6:EC:54:8D:35:30:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:7f:90:b2:bd:1a:11:3b:95:18:58:30:a2:fa:85:a0:ed:c2:
         96:b7:92:0b:45:fd:ff:d8:b7:3a:f7:31:51:c1:12:51:17:2b:
         89:56:13:a0:49:d3:d8:b1:ff:86:b3:d5:64:43:9f:de:ab:ce:
         ae:16:a9:7b:54:4c:35:a2:a8:b4:83:8a:be:a0:40:ac:9e:ea:
         02:41:98:f1:45:fa:47:3d:4b:32:a2:40:3f:cd:cf:10:5d:16:
         09:38:00:96:81:56:93:37:52:83:a5:48:84:23:80:d7:4c:67:
         43:ff:d2:c3:6c:4f:4f:56:01:62:f8:33:1e:13:05:24:6a:ac:
         33:3d:f2:dc:e0:01:a2:47:09:26:66:de:0a:15:d7:39:dd:31:
         0c:aa:a4:97:98:e7:03:62:59:bf:41:ba:ac:f5:61:d4:8d:15:
         42:ce:69:c7:fe:fe:a3:23:35:44:54:2c:ec:0c:e5:1c:20:a5:
         04:04:2e:c8:b4:76:c5:c7:7b:c9:07:43:d2:8a:17:b8:f8:e9:
         f0:8d:54:45:fd:84:31:ab:cb:ba:fa:c6:dc:50:5c:a6:65:28:
         99:2e:64:0e:5a:a8:9d:f3:db:b2:a6:28:44:76:34:a3:ed:be:
         f8:69:54:26:09:4c:c8:c4:ec:30:2e:c7:cf:68:93:5d:be:20:
         ad:4b:f4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:35:51 2025 by rpki-client