Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft
File:                     2MIJbMDFVXy6tsENYdB30Hj-cX8.mft (raw, json)
Hash identifier:          WocVo0FdPkskqAvdoKrYuEzUvi8ttz7IegOgjlrzR6c=
Subject key identifier:   4F:EA:57:2D:72:C9:32:AC:9D:18:CD:C5:C4:A5:7F:2E:02:48:6A:CC
Authority key identifier: D8:C2:09:6C:C0:C5:55:7C:BA:B6:C1:0D:61:D0:77:D0:78:FE:71:7F
Certificate issuer:       /CN=d8c2096cc0c5557cbab6c10d61d077d078fe717f
Certificate serial:       01969FE407140F46DF2F3631907884905180
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2MIJbMDFVXy6tsENYdB30Hj-cX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft
Manifest number:          06BA
Signing time:             Mon 05 May 2025 10:00:43 +0000
Manifest this update:     Mon 05 May 2025 10:00:43 +0000
Manifest next update:     Tue 06 May 2025 10:00:43 +0000
Files and hashes:         1: 2MIJbMDFVXy6tsENYdB30Hj-cX8.crl (hash: h4NqOIsaO7NdCbpUneUMu8enLTgIahIEpy16MhqToIc=)
                          2: v--QteSWi6tQPkHDzqMh-ib3Ea0.roa (hash: 4DKBaLEIdscFHQJRoeUgffvp/rQ3x54nPWPAJ4H+N0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2MIJbMDFVXy6tsENYdB30Hj-cX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9f:e4:07:14:0f:46:df:2f:36:31:90:78:84:90:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8c2096cc0c5557cbab6c10d61d077d078fe717f
        Validity
            Not Before: May  5 10:00:43 2025 GMT
            Not After : May  6 10:00:43 2025 GMT
        Subject: CN=4fea572d72c932ac9d18cdc5c4a57f2e02486acc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:88:d1:c8:dd:09:b1:ef:8f:3d:45:d5:68:ea:
                    dd:bd:b9:c7:f6:9e:6c:0c:f6:90:f0:ff:86:d6:76:
                    4c:4f:58:69:29:93:bb:f4:b4:5e:77:cb:1e:10:64:
                    8c:13:ab:79:35:95:6d:bf:74:84:fd:65:64:9c:eb:
                    24:54:ed:ab:14:a8:1a:23:1e:cb:9a:aa:ef:45:b7:
                    7f:4a:b3:f5:56:e0:54:58:4a:66:05:82:49:f0:8f:
                    16:fe:b8:63:0d:07:30:bd:b4:1f:0b:58:34:26:25:
                    33:a7:f3:3f:bd:ad:93:ca:16:63:1f:18:a2:d9:1b:
                    b8:89:2f:1e:77:85:9e:b4:59:4f:e3:97:ea:4f:bf:
                    8f:d3:dc:e7:a9:e0:a0:1b:3e:24:4c:fc:e1:a5:a8:
                    df:e5:a9:0e:59:0b:6f:95:34:f8:0c:e6:b2:b8:a9:
                    0d:ae:a1:8d:5d:3d:b5:5c:01:b5:9a:bf:2c:8c:47:
                    fe:48:23:cc:30:26:1e:ce:c1:0e:ad:09:04:2c:8c:
                    8e:53:1b:86:ac:ad:b0:07:78:52:d0:21:5a:d2:5c:
                    23:0a:5e:c5:f3:ff:00:80:9d:f1:43:a2:77:6c:c2:
                    b7:c4:9c:2f:5d:e2:10:a4:11:b6:f6:aa:fb:0a:d7:
                    6f:e1:20:59:29:ad:1b:93:1b:8b:f6:bb:05:2c:34:
                    2e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:EA:57:2D:72:C9:32:AC:9D:18:CD:C5:C4:A5:7F:2E:02:48:6A:CC
            X509v3 Authority Key Identifier:
                keyid:D8:C2:09:6C:C0:C5:55:7C:BA:B6:C1:0D:61:D0:77:D0:78:FE:71:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MIJbMDFVXy6tsENYdB30Hj-cX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:36:67:b3:03:e7:67:ee:d8:d1:82:b8:3e:c1:9d:9e:c6:d0:
         ef:22:de:c3:fe:37:71:4e:f2:e9:5c:d0:04:61:cf:8e:b6:85:
         8e:af:5c:c2:e5:dd:fa:ac:aa:d2:99:87:34:dc:ae:c8:e7:30:
         7b:e9:a9:41:a7:14:ef:c2:02:b9:d1:96:97:a7:a6:83:de:10:
         29:8f:ce:a7:99:ef:53:ca:02:30:99:2a:80:66:93:3d:5d:d6:
         fd:ab:90:3b:76:3b:91:9b:09:26:50:bf:da:f4:8c:c2:ec:19:
         45:8c:5e:12:f1:64:8a:16:10:96:be:6b:5a:8d:e3:9d:54:9e:
         af:49:8b:d5:9a:bf:08:2b:d7:34:ec:43:8c:08:d6:f4:f8:df:
         1d:1e:ec:1f:bd:22:11:81:38:2a:a7:1d:6f:39:0a:5c:87:32:
         e5:cf:3d:64:06:f5:39:36:3b:8a:91:de:61:a4:bb:12:3c:f5:
         a6:65:09:14:d7:8a:60:85:7b:37:04:6c:c3:1a:ba:d8:1b:b7:
         41:6d:b3:36:1a:f9:b0:d9:30:5c:18:39:62:1c:d8:1a:d2:57:
         c0:e0:1d:32:2f:d7:d6:17:d4:92:16:61:98:eb:55:32:a3:3a:
         ca:60:f6:58:4e:47:4e:f3:48:2c:30:fb:71:43:92:20:43:ca:
         e4:f3:7a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:39:07 2025 by rpki-client