Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
File:                     2c-g5Eir4w0msGZanClNKcl7fr8.mft (raw, json)
Hash identifier:          nQ7Z8ktA++7N1E4LZQELBhJOBM6hSg0/XkuV7WdgJvk=
Subject key identifier:   FC:70:88:9E:B5:07:D8:63:75:48:0D:2A:83:7D:89:ED:07:52:F1:01
Authority key identifier: D9:CF:A0:E4:48:AB:E3:0D:26:B0:66:5A:9C:29:4D:29:C9:7B:7E:BF
Certificate issuer:       /CN=d9cfa0e448abe30d26b0665a9c294d29c97b7ebf
Certificate serial:       0197B5FBB9ADD4F33368F2C0CED650D6D24E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
Manifest number:          15B1
Signing time:             Sat 28 Jun 2025 10:01:02 +0000
Manifest this update:     Sat 28 Jun 2025 10:01:02 +0000
Manifest next update:     Sun 29 Jun 2025 10:01:02 +0000
Files and hashes:         1: 2c-g5Eir4w0msGZanClNKcl7fr8.crl (hash: 7zryYTrt+Rkf4ht0cqkJ0KpSKwOag2RONb3eLERdxXQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:fb:b9:ad:d4:f3:33:68:f2:c0:ce:d6:50:d6:d2:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9cfa0e448abe30d26b0665a9c294d29c97b7ebf
        Validity
            Not Before: Jun 28 10:01:02 2025 GMT
            Not After : Jun 29 10:01:02 2025 GMT
        Subject: CN=fc70889eb507d86375480d2a837d89ed0752f101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0c:30:21:5a:63:14:c7:ef:34:8f:aa:94:27:
                    4d:29:82:5b:73:5c:ac:1d:16:78:b6:75:4a:3f:40:
                    e5:34:bd:bc:62:bc:4e:cd:0e:82:75:3c:ac:39:cb:
                    42:16:28:36:52:93:1e:fc:83:b5:62:15:ec:d5:d5:
                    09:5e:a1:52:35:32:0f:cc:19:a7:6d:dc:76:00:39:
                    97:c3:0b:3b:31:c3:7a:4d:e0:fc:17:0a:e3:7c:4c:
                    a2:bd:0c:5b:d5:0d:98:a9:25:25:1d:c5:cb:eb:90:
                    e8:88:02:47:49:3b:c1:08:ef:82:28:9a:b3:1d:38:
                    71:f8:78:e4:44:39:b8:07:b8:e4:a9:fa:9c:bc:1f:
                    a9:26:41:f8:ca:2a:14:f9:23:ea:f5:a0:f4:d5:81:
                    51:38:97:cf:7c:42:e5:55:71:da:9d:ca:4a:5e:d9:
                    c3:09:1f:cc:2c:b5:f4:69:01:a6:6b:30:92:04:05:
                    ba:bd:c7:6a:8a:07:4e:bb:6a:55:b9:2d:24:0b:42:
                    b5:3d:2c:ea:59:2f:45:10:4d:7f:d4:67:cc:6b:4a:
                    88:8f:b1:83:9c:72:fd:a5:4d:41:f7:cd:e6:f6:82:
                    d8:66:1f:66:25:0d:00:7a:1c:c7:5a:49:48:40:d1:
                    b9:dd:53:b9:2f:b1:2e:3e:11:47:1c:0b:9b:59:a9:
                    45:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:70:88:9E:B5:07:D8:63:75:48:0D:2A:83:7D:89:ED:07:52:F1:01
            X509v3 Authority Key Identifier:
                keyid:D9:CF:A0:E4:48:AB:E3:0D:26:B0:66:5A:9C:29:4D:29:C9:7B:7E:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:8f:f7:5d:81:ef:48:a8:19:c3:b2:53:81:46:d0:a5:78:76:
         78:4f:a4:c8:1b:08:05:c7:fd:78:ea:3b:86:50:fe:30:cf:ec:
         9d:48:bb:51:29:f3:47:19:18:25:95:14:f8:1c:4b:d8:ad:66:
         8b:9d:a6:a3:d5:2a:58:dc:2f:30:8d:4d:88:13:d6:b1:6f:79:
         65:50:3b:bc:17:92:e5:7e:fd:e0:b5:f6:bd:52:d3:db:3c:04:
         d7:da:8f:36:1b:0a:ad:70:0b:9e:87:06:7f:5b:6b:c7:2d:9c:
         30:be:f3:54:44:29:24:55:94:2d:f0:67:ea:79:05:6a:41:4c:
         db:d2:24:2a:72:29:d5:5d:83:bd:cb:d1:3c:fa:55:b9:57:f6:
         4c:ea:5e:5c:65:a1:8c:93:ca:56:6a:d7:f0:86:b0:0e:09:72:
         16:5c:de:9f:c9:24:19:86:ba:5f:c0:50:19:56:6f:46:23:f0:
         08:87:c1:58:fc:c9:88:a1:e9:95:a8:1f:56:7e:d2:63:f7:6e:
         34:1c:af:42:02:f8:d5:a2:7f:25:86:df:e4:9e:ba:04:ad:9f:
         8e:f9:ca:19:84:b3:4f:d0:31:8f:64:f9:6c:20:22:27:25:c1:
         d8:9e:5c:9a:2e:b8:fe:60:c3:31:06:5b:68:32:3d:a2:d7:94:
         a4:ba:a1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:20 2025 by rpki-client