Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
File:                     b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft (raw, json)
Hash identifier:          +IDFqf/Y2eLTsSbPbzdlWviHDISG9rbUNBOM9t3pV5E=
Subject key identifier:   38:DC:49:8D:81:B2:4F:DA:27:B6:51:FD:D7:B4:C0:94:89:3F:21:48
Authority key identifier: 6F:65:54:C4:D8:5B:FD:86:F0:A7:49:C1:CA:0F:5D:0E:96:92:E6:55
Certificate issuer:       /CN=6f6554c4d85bfd86f0a749c1ca0f5d0e9692e655
Certificate serial:       0197B96B226C8C3808ACF1251011D240482B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b2VUxNhb_Ybwp0nByg9dDpaS5lU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
Manifest number:          025D
Signing time:             Sun 29 Jun 2025 02:01:35 +0000
Manifest this update:     Sun 29 Jun 2025 02:01:35 +0000
Manifest next update:     Mon 30 Jun 2025 02:01:35 +0000
Files and hashes:         1: b2VUxNhb_Ybwp0nByg9dDpaS5lU.crl (hash: dzms7+2GtE7mFsy81aEPh2EQ1T2VkTif/qJMRyhN2z4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b2VUxNhb_Ybwp0nByg9dDpaS5lU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 02:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:6b:22:6c:8c:38:08:ac:f1:25:10:11:d2:40:48:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f6554c4d85bfd86f0a749c1ca0f5d0e9692e655
        Validity
            Not Before: Jun 29 02:01:35 2025 GMT
            Not After : Jun 30 02:01:35 2025 GMT
        Subject: CN=38dc498d81b24fda27b651fdd7b4c094893f2148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8f:0a:94:7f:87:de:c8:25:6b:f5:10:00:f8:
                    72:95:28:15:b5:73:29:ef:04:bb:59:55:93:88:ba:
                    b9:f8:e8:1d:45:d6:84:02:26:62:5d:f5:b2:2e:95:
                    8c:79:a6:55:79:2f:ff:4d:d7:00:9d:43:51:75:c7:
                    0b:c9:4e:d9:18:fb:a6:93:24:56:54:70:55:df:41:
                    65:bd:76:ae:27:9e:cb:c3:aa:7c:f4:fb:47:e8:29:
                    f0:16:aa:1a:1d:1a:05:f2:59:cd:5c:82:21:d7:55:
                    53:d6:1e:c3:c8:b5:a3:07:4e:ad:43:16:aa:2a:52:
                    03:b7:50:a2:98:4b:cf:95:d4:21:76:52:61:79:bb:
                    09:df:dd:3a:3c:2d:ab:41:25:76:46:44:97:e4:51:
                    0d:ea:ba:42:47:a3:c8:67:69:3b:3e:d2:e8:68:83:
                    dd:27:75:6d:88:ba:d7:3f:37:f9:32:a3:18:d7:e7:
                    f7:d8:de:2b:48:96:91:74:4a:f6:14:42:46:34:21:
                    38:8d:45:3a:6d:8e:e8:39:1c:8a:4c:0a:8b:ce:10:
                    01:c1:34:6e:96:54:c4:5f:b2:c7:56:42:ef:24:7d:
                    bc:f6:91:c0:9e:a4:b3:cc:1b:c1:b2:8c:1c:95:b3:
                    7c:e3:93:79:ac:b8:d5:a5:ab:a9:ec:52:38:88:ec:
                    d0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DC:49:8D:81:B2:4F:DA:27:B6:51:FD:D7:B4:C0:94:89:3F:21:48
            X509v3 Authority Key Identifier:
                keyid:6F:65:54:C4:D8:5B:FD:86:F0:A7:49:C1:CA:0F:5D:0E:96:92:E6:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2VUxNhb_Ybwp0nByg9dDpaS5lU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:1b:d2:ef:ea:06:75:a6:6a:b4:85:02:90:47:c0:fc:b0:a8:
         f0:76:57:6a:12:33:69:22:69:92:c2:8d:51:8b:5c:bf:ec:27:
         fd:72:39:e5:dd:9f:4e:d5:27:9e:22:71:a2:a3:70:e2:35:16:
         55:4d:56:4f:e7:77:8b:ca:05:78:bb:a7:63:ed:a4:c5:c0:be:
         da:83:55:77:90:25:1c:8a:bb:26:90:92:41:d4:ae:c5:21:8d:
         d7:6b:e8:b7:69:d8:0a:d8:bd:3a:bc:b0:77:36:3c:2d:ee:3a:
         86:7b:23:65:1c:6c:21:3f:bb:0e:cd:88:99:58:a6:dc:6c:ec:
         bf:7b:d9:f4:1d:8a:30:f8:9d:9e:9e:37:03:18:f1:1c:a2:f4:
         dd:f9:63:e2:95:44:fa:97:56:52:c5:cd:64:41:40:d2:07:03:
         ab:90:18:a7:04:37:52:a8:b5:89:27:b4:40:a0:a9:b4:75:bd:
         8c:5a:d3:54:05:fc:f6:14:6d:87:12:7c:e3:97:de:36:28:fe:
         a5:d4:d0:48:4e:f3:4c:5c:7b:54:4a:77:b6:71:5a:94:88:a4:
         cb:39:e3:7f:ca:af:b0:80:e2:5a:d7:d2:e3:b1:2d:5b:de:06:
         61:f4:1b:f9:f6:be:49:b6:30:83:ed:92:25:91:d2:13:7c:ab:
         b5:f0:ed:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:10:47 2025 by rpki-client