Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
File:                     2lLDjwx_664TXV3d2UjPJr7O87w.mft (raw, json)
Hash identifier:          xydnlcsSFjK2HmoBtqEFy8Ku356f8w0b2gW1BeZYR40=
Subject key identifier:   AA:50:0D:93:53:83:D4:23:FF:44:E1:3E:09:1A:83:DE:E8:54:8B:6A
Authority key identifier: DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC
Certificate issuer:       /CN=da52c38f0c7febae135d5dddd948cf26becef3bc
Certificate serial:       0197B6A19473A38B4A132DAC4030D8612475
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
Manifest number:          0E32
Signing time:             Sat 28 Jun 2025 13:02:11 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:11 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:11 +0000
Files and hashes:         1: 2lLDjwx_664TXV3d2UjPJr7O87w.crl (hash: zy6/cYoQEWUQFJewYh7YwplaPObFMTiWKWnnNXK9eeI=)
                          2: ESp2P2qg1tcbnP0x2cOMAxJ9cfY.roa (hash: NXfX71EbjUbs5qPqJFV7lpPUd0bJOBkN6qOg1PkmUtM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:94:73:a3:8b:4a:13:2d:ac:40:30:d8:61:24:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da52c38f0c7febae135d5dddd948cf26becef3bc
        Validity
            Not Before: Jun 28 13:02:11 2025 GMT
            Not After : Jun 29 13:02:11 2025 GMT
        Subject: CN=aa500d935383d423ff44e13e091a83dee8548b6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e3:81:fa:6b:08:97:63:a9:e3:bc:78:cb:a5:
                    0c:d1:fe:5c:20:1f:db:ed:ca:e5:ef:ef:03:2c:26:
                    ad:5a:ae:7b:dd:b3:26:f6:2d:07:2a:3d:26:8b:d6:
                    9e:d2:e3:09:59:08:10:1e:25:68:a8:9c:53:89:6d:
                    67:24:6a:86:47:5f:03:7f:1d:16:e9:e2:cf:99:33:
                    27:5c:92:68:1a:3e:4f:ae:62:0f:3f:7c:a3:fd:52:
                    ab:92:5d:08:5a:28:33:f4:d7:d0:be:54:be:52:23:
                    7d:4b:38:1e:d8:96:da:c4:36:06:89:cf:b9:82:de:
                    48:42:37:4b:61:15:b5:d6:59:dc:b1:bd:ea:43:85:
                    30:0e:83:ed:b3:91:65:84:53:84:ce:d6:d5:09:a6:
                    8c:aa:91:62:7e:d4:ed:bd:35:81:1a:28:f9:e0:7b:
                    51:25:69:8d:75:29:4b:d1:4e:54:2d:10:95:e0:35:
                    3c:7d:c3:d3:4b:69:9d:36:cb:30:42:fa:98:e0:65:
                    e5:37:f2:c8:28:0d:02:95:c1:5a:5e:a1:29:7d:9d:
                    d1:24:78:78:00:d4:82:3f:e9:1e:d6:ec:e0:37:02:
                    62:d4:1e:54:0a:cd:a3:ee:81:a0:b7:39:e6:ba:5e:
                    1d:ee:91:e1:59:df:34:fa:d2:c6:3c:7c:82:5c:65:
                    ec:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:50:0D:93:53:83:D4:23:FF:44:E1:3E:09:1A:83:DE:E8:54:8B:6A
            X509v3 Authority Key Identifier:
                keyid:DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:bb:c7:08:0d:21:50:6e:49:10:51:af:e0:36:a9:88:7c:0f:
         1d:21:28:e9:a0:c9:e7:76:24:e3:dc:00:9c:8b:6a:81:76:2b:
         61:d6:a5:4a:59:3f:cd:bb:4c:c6:c8:70:65:4c:f3:b1:fc:58:
         af:3a:52:ed:a9:b8:47:ee:ff:8d:f0:b8:67:5a:7a:26:4a:64:
         f0:7c:db:f8:a2:47:61:21:a7:99:63:4d:fd:9d:29:48:b3:53:
         49:58:17:a8:c4:7b:0a:2b:2e:f1:ef:b5:ef:a0:cd:1e:78:04:
         e9:24:2f:4e:78:36:b0:51:7b:ad:7d:59:53:93:1c:c2:d2:45:
         f8:60:26:af:a4:11:23:00:fb:c1:6c:03:b2:48:a1:3d:6d:35:
         35:16:81:ec:61:74:d6:6b:03:c1:21:18:de:b2:d8:3f:93:8c:
         f9:1b:9c:d1:c0:2e:66:6d:fe:b6:ab:3d:03:ee:c0:0a:6c:c4:
         65:7b:f9:5c:86:dd:ac:ea:a4:38:66:78:67:72:09:b9:c9:00:
         2c:db:f4:53:f2:73:ae:e4:21:b1:5e:a9:0d:fa:49:4b:e5:1f:
         fb:4f:4d:f7:33:a4:c8:4c:60:96:8f:76:94:e9:af:bc:e4:2a:
         8a:84:b8:23:48:36:c7:1c:4c:e8:81:55:34:82:92:1f:d2:a2:
         72:54:d6:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oZRzo4tKEy2sQDDYYSR1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNTJjMzhmMGM3ZmViYWUxMzVkNWRkZGQ5NDhjZjI2YmVj
ZWYzYmMwHhcNMjUwNjI4MTMwMjExWhcNMjUwNjI5MTMwMjExWjAzMTEwLwYDVQQD
EyhhYTUwMGQ5MzUzODNkNDIzZmY0NGUxM2UwOTFhODNkZWU4NTQ4YjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOOB+msIl2Op47x4y6UM0f5cIB/b
7crl7+8DLCatWq573bMm9i0HKj0mi9ae0uMJWQgQHiVoqJxTiW1nJGqGR18Dfx0W
6eLPmTMnXJJoGj5PrmIPP3yj/VKrkl0IWigz9NfQvlS+UiN9Szge2JbaxDYGic+5
gt5IQjdLYRW11lncsb3qQ4UwDoPts5FlhFOEztbVCaaMqpFiftTtvTWBGij54HtR
JWmNdSlL0U5ULRCV4DU8fcPTS2mdNsswQvqY4GXlN/LIKA0ClcFaXqEpfZ3RJHh4
ANSCP+ke1uzgNwJi1B5UCs2j7oGgtznmul4d7pHhWd80+tLGPHyCXGXsjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpQDZNTg9Qj/0ThPgkag97oVItqMB8GA1UdIwQY
MBaAFNpSw48Mf+uuE11d3dlIzya+zvO8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmxMRGp3eF82NjRUWFYzZDJValBKcjdPODd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mMzFiZTAtMTBlMC00MGVkLWE2ZDct
NDFlY2RjN2EzNmY0LzEvMmxMRGp3eF82NjRUWFYzZDJValBKcjdPODd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9mMzFiZTAtMTBlMC00MGVkLWE2ZDctNDFlY2RjN2EzNmY0
LzEvMmxMRGp3eF82NjRUWFYzZDJValBKcjdPODd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV7vHCA0h
UG5JEFGv4DapiHwPHSEo6aDJ53Yk49wAnItqgXYrYdalSlk/zbtMxshwZUzzsfxY
rzpS7am4R+7/jfC4Z1p6Jkpk8Hzb+KJHYSGnmWNN/Z0pSLNTSVgXqMR7Cisu8e+1
76DNHngE6SQvTng2sFF7rX1ZU5McwtJF+GAmr6QRIwD7wWwDskihPW01NRaB7GF0
1msDwSEY3rLYP5OM+Ruc0cAuZm3+tqs9A+7ACmzEZXv5XIbdrOqkOGZ4Z3IJuckA
LNv0U/JzruQhsV6pDfpJS+Uf+09N9zOkyExglo92lOmvvOQqioS4I0g2xxxM6IFV
NIKSH9KiclTWEQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:06:31 2025 by rpki-client