Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
File:                     2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft (raw, json)
Hash identifier:          vIb695yHFqxeUYxsbUdtWun9rldZLHFddCUsTkeJr68=
Subject key identifier:   CA:1F:CC:2C:E4:A0:06:3B:76:4F:3F:1B:6B:62:F8:98:18:01:43:C0
Authority key identifier: DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70
Certificate issuer:       /CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
Certificate serial:       0197CB3A56555C0BA5A9F2CE193767FFE032
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
Manifest number:          02DF
Signing time:             Wed 02 Jul 2025 13:01:27 +0000
Manifest this update:     Wed 02 Jul 2025 13:01:27 +0000
Manifest next update:     Thu 03 Jul 2025 13:01:27 +0000
Files and hashes:         1: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl (hash: BmsliWqrBezJXoie34dICBi21UA0X/H3xe77YxAXUTY=)
                          2: pZjQfG12G_tUKYaEkvnLZUTVbws.roa (hash: dmPm4kVANU0TIQJn0Fmatq8TN1c2CZw4+USK4XmWGtU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cb:3a:56:55:5c:0b:a5:a9:f2:ce:19:37:67:ff:e0:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
        Validity
            Not Before: Jul  2 13:01:27 2025 GMT
            Not After : Jul  3 13:01:27 2025 GMT
        Subject: CN=ca1fcc2ce4a0063b764f3f1b6b62f898180143c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b3:90:55:4d:ae:66:a2:0e:5c:c9:10:2c:51:
                    13:37:e1:36:c3:6b:f7:b6:e4:69:7b:49:80:3b:fa:
                    f0:a5:b9:e2:04:19:48:59:90:5c:10:22:35:f9:ea:
                    64:5b:33:aa:e0:93:09:30:88:13:03:f5:a6:0c:06:
                    08:9f:9a:aa:f3:ff:9f:95:44:a3:3e:74:bc:bd:9d:
                    c6:fd:df:5a:5e:bf:f1:eb:df:e1:9c:c7:5b:91:c1:
                    6b:06:4c:a4:73:c6:eb:70:1b:0b:4a:80:52:8b:32:
                    36:a2:58:90:de:27:c2:7b:68:10:ee:33:4a:a7:4d:
                    5b:1e:d8:43:c7:47:e3:8a:8a:e4:04:82:1b:ff:12:
                    b8:41:e5:38:a7:b9:fc:f9:95:ee:fd:af:b4:3e:34:
                    39:58:53:b6:97:3d:26:1d:21:79:22:23:23:af:46:
                    62:01:14:b7:8b:24:bc:a5:a8:02:fb:e3:aa:e8:ed:
                    2d:cb:e7:7e:34:9d:79:e4:12:59:55:1f:f8:70:62:
                    93:fd:70:30:57:9f:58:14:b3:29:bd:0c:90:56:e7:
                    25:72:76:0a:c8:6f:12:05:d9:1d:38:ac:58:8e:e0:
                    69:e3:d6:5a:5c:c2:d5:b2:17:1f:94:e1:85:30:d4:
                    bf:c5:b5:30:c7:26:bf:29:fa:8b:e5:dd:df:12:82:
                    55:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:1F:CC:2C:E4:A0:06:3B:76:4F:3F:1B:6B:62:F8:98:18:01:43:C0
            X509v3 Authority Key Identifier:
                keyid:DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:83:50:ab:c7:99:6b:d4:ff:a0:6e:9c:1b:b0:fc:10:d3:8b:
         59:bb:ff:c8:75:a1:d0:1a:70:fd:c4:d5:b8:12:92:1f:50:b2:
         87:cb:00:9b:2b:2a:4a:8e:d9:d4:60:1a:ec:bc:11:4b:49:a1:
         fb:7c:9d:77:04:96:8a:0b:12:f2:ce:6a:80:d9:72:46:1f:8e:
         b2:dc:4a:2b:4e:6f:5c:84:21:6a:e9:ba:b4:32:6d:57:41:cf:
         8d:5c:7e:98:1b:ea:02:e4:ca:4a:ea:21:55:12:eb:77:ad:68:
         0e:be:dc:23:d3:49:0b:6d:34:e0:74:e6:aa:ed:7d:68:47:37:
         fa:c2:a1:90:b3:22:43:a9:09:5d:7b:32:06:d4:e4:88:68:1a:
         a2:f7:f7:98:d2:a7:1f:46:d6:f3:62:b3:b4:ec:22:c7:fc:9b:
         b8:9c:4e:b4:4e:1f:e1:e2:a3:d9:58:14:5d:43:41:94:33:ba:
         24:06:07:f8:68:56:cb:53:e3:3f:44:fd:61:0c:3a:43:a9:b0:
         93:c4:2a:3a:4c:73:d2:b0:37:da:bf:54:3a:42:c5:75:b4:9d:
         90:41:05:a4:c8:7b:da:bc:fa:3b:d0:47:5f:4f:87:d3:0a:48:
         03:f2:ed:b6:3b:1d:9b:70:dd:56:de:3f:55:91:0e:26:71:b8:
         c5:2b:7b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:18:41 2025 by rpki-client