Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
File:                     R2Bl1x8emPmnynjmFOz19G1aZDw.mft (raw, json)
Hash identifier:          pyv6aFgVPVbRUAv1W7oGBqChlDn7SJZqLJRl8AZx0uc=
Subject key identifier:   6A:70:8E:F7:D7:EE:7E:48:33:E8:4F:DF:9E:00:DA:F1:9F:6D:B3:55
Authority key identifier: 47:60:65:D7:1F:1E:98:F9:A7:CA:78:E6:14:EC:F5:F4:6D:5A:64:3C
Certificate issuer:       /CN=476065d71f1e98f9a7ca78e614ecf5f46d5a643c
Certificate serial:       0197B88FB321B49D22181B22558B890C9E57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R2Bl1x8emPmnynjmFOz19G1aZDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
Manifest number:          54
Signing time:             Sat 28 Jun 2025 22:01:54 +0000
Manifest this update:     Sat 28 Jun 2025 22:01:54 +0000
Manifest next update:     Sun 29 Jun 2025 22:01:54 +0000
Files and hashes:         1: R2Bl1x8emPmnynjmFOz19G1aZDw.crl (hash: s2b/EiZcug/+GtkfJ/jobnHAMcycLEsI1RK3LxKyxZg=)
                          2: lASkSWhNSFerShHIOly6CM5etwY.roa (hash: eTZvYlddER+/7D2hoV0jNRxfkb0vM+l4ayTlpERiEYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R2Bl1x8emPmnynjmFOz19G1aZDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8f:b3:21:b4:9d:22:18:1b:22:55:8b:89:0c:9e:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=476065d71f1e98f9a7ca78e614ecf5f46d5a643c
        Validity
            Not Before: Jun 28 22:01:54 2025 GMT
            Not After : Jun 29 22:01:54 2025 GMT
        Subject: CN=6a708ef7d7ee7e4833e84fdf9e00daf19f6db355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:19:d2:58:ff:4c:86:8a:f8:ad:59:72:30:bf:
                    fb:29:ca:d4:ec:46:bd:2e:04:65:a6:99:e5:41:2e:
                    01:e0:d1:72:b9:f4:bf:6b:d0:0e:7f:61:16:ec:94:
                    cd:43:74:eb:d2:9f:c4:65:79:44:83:18:c9:97:ee:
                    d5:4f:41:4c:8a:f7:71:41:20:a6:1b:6a:7e:f2:95:
                    6c:fa:4a:59:39:76:b5:62:0a:a7:91:40:c8:0e:e3:
                    65:b7:c1:fd:1a:4d:37:a4:d6:8a:84:c4:dc:2b:a7:
                    16:c3:b9:45:a2:bc:28:f8:6e:45:f0:e6:83:2d:00:
                    77:71:1b:59:f8:d2:4a:d5:38:9e:aa:7c:ea:69:9d:
                    e0:e6:6a:2a:f2:77:40:18:47:1d:96:6e:98:d2:5f:
                    86:63:f1:b2:aa:ca:9b:51:22:c8:4f:6b:a8:ad:fe:
                    41:4c:84:7a:2a:fd:3b:6e:7c:08:21:00:81:95:85:
                    c5:0f:af:02:6f:f0:3c:b2:9b:c3:59:be:62:11:62:
                    ed:14:35:66:54:75:7d:81:ea:71:c2:f0:bf:1e:8b:
                    05:e9:dc:ea:ee:25:55:ae:1c:06:35:a7:de:13:4f:
                    79:51:19:16:e3:53:89:2c:64:d9:6c:5c:12:7a:3f:
                    f6:d5:be:0a:bf:fa:ea:77:0b:39:00:ef:6f:12:ec:
                    ef:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:70:8E:F7:D7:EE:7E:48:33:E8:4F:DF:9E:00:DA:F1:9F:6D:B3:55
            X509v3 Authority Key Identifier:
                keyid:47:60:65:D7:1F:1E:98:F9:A7:CA:78:E6:14:EC:F5:F4:6D:5A:64:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2Bl1x8emPmnynjmFOz19G1aZDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:07:11:7e:28:3f:ff:e5:ec:97:59:25:a2:d1:8a:5c:09:b1:
         2c:13:21:21:5a:50:1a:07:b4:7a:9d:31:f7:aa:a7:2b:38:c9:
         a4:a7:d6:71:e3:61:74:2a:95:2b:8d:09:ad:5d:3a:d5:3d:1e:
         3b:05:b6:7e:3f:28:ed:94:71:69:af:7c:12:b6:57:7d:5b:af:
         f3:b9:02:f5:5d:be:b2:84:1f:74:f3:c2:71:45:d1:e1:21:24:
         f3:04:96:c5:41:6a:68:1d:a5:aa:ab:11:da:4b:af:d2:fe:7a:
         36:a8:bd:6b:68:14:46:eb:35:24:18:42:bb:dd:81:92:9f:de:
         10:dd:c1:4c:6a:20:86:6c:b7:99:72:74:c0:18:4a:e9:2f:67:
         9f:c0:ce:03:d2:03:54:4e:d5:aa:88:bb:98:f6:64:07:48:fd:
         a6:33:72:ce:72:22:bc:5a:5c:b8:48:da:b2:35:27:71:f2:a8:
         da:5a:cb:02:b4:18:ce:71:51:9e:0c:2b:4e:53:a9:6b:d8:ff:
         dc:de:57:24:85:84:f9:01:12:91:9d:11:d0:4c:08:56:4f:a0:
         1f:9d:42:a0:d9:00:6f:67:e7:8b:00:e9:48:1d:32:29:5d:33:
         0a:c6:44:13:3e:35:f5:23:fb:1f:46:84:b4:cb:11:bc:14:27:
         24:e9:8c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:04 2025 by rpki-client