Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft
File:                     2MIJbMDFVXy6tsENYdB30Hj-cX8.mft (raw, json)
Hash identifier:          hFTlUmttQlpZ6bSL40Z/XLqhVtxO4D1tBRYSlqzci1k=
Subject key identifier:   53:B7:5F:3C:24:A1:73:35:0B:CA:FD:D8:FF:00:F7:9A:14:0C:75:58
Authority key identifier: D8:C2:09:6C:C0:C5:55:7C:BA:B6:C1:0D:61:D0:77:D0:78:FE:71:7F
Certificate issuer:       /CN=d8c2096cc0c5557cbab6c10d61d077d078fe717f
Certificate serial:       0197B9D921D7C94B497671CE0500D92AC2F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2MIJbMDFVXy6tsENYdB30Hj-cX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft
Manifest number:          074C
Signing time:             Sun 29 Jun 2025 04:01:44 +0000
Manifest this update:     Sun 29 Jun 2025 04:01:44 +0000
Manifest next update:     Mon 30 Jun 2025 04:01:44 +0000
Files and hashes:         1: 2MIJbMDFVXy6tsENYdB30Hj-cX8.crl (hash: oRPC2G5Xs6WiB4cvgcP5gx4L61sNOSDLkl4+RBQP0aA=)
                          2: v--QteSWi6tQPkHDzqMh-ib3Ea0.roa (hash: 4DKBaLEIdscFHQJRoeUgffvp/rQ3x54nPWPAJ4H+N0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2MIJbMDFVXy6tsENYdB30Hj-cX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:d9:21:d7:c9:4b:49:76:71:ce:05:00:d9:2a:c2:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8c2096cc0c5557cbab6c10d61d077d078fe717f
        Validity
            Not Before: Jun 29 04:01:44 2025 GMT
            Not After : Jun 30 04:01:44 2025 GMT
        Subject: CN=53b75f3c24a173350bcafdd8ff00f79a140c7558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d8:48:2f:ce:15:d8:26:60:a4:d6:eb:6d:16:
                    64:79:e7:03:ff:71:db:b4:b8:b6:ae:80:c3:e7:ec:
                    0f:1c:17:2a:5e:ff:e8:c4:af:8e:b5:82:d8:45:e5:
                    27:47:88:99:d4:46:e9:88:63:54:64:62:f7:c8:6f:
                    68:77:e1:2d:aa:71:69:ac:03:07:f6:a8:15:14:30:
                    92:b5:b0:09:89:b4:8d:f5:da:f8:35:82:d9:f8:49:
                    79:f8:4d:20:d3:fa:5c:a6:5c:2d:d6:27:29:c4:04:
                    41:73:2e:5a:d2:78:bc:05:bb:7d:b6:ca:c2:41:02:
                    32:e6:c9:14:40:52:14:9d:a8:35:8e:de:7f:bf:48:
                    10:73:bd:54:ef:8e:b8:45:28:b0:b3:da:ba:08:90:
                    e6:94:ec:bf:fd:a9:19:1a:a9:30:a5:91:f3:d1:11:
                    49:33:d9:5c:2f:50:36:bc:f2:15:12:ba:d4:0e:7b:
                    88:f6:cc:0a:3c:f8:e1:1d:c6:ee:56:b0:57:7e:28:
                    7a:64:ca:04:5b:0b:7c:db:4f:19:39:fc:76:9c:3f:
                    76:7d:51:06:3d:f9:37:36:d7:34:b5:80:e7:dd:9b:
                    96:95:a5:47:18:8d:84:1d:35:52:54:76:7c:c2:5e:
                    88:d5:07:e2:43:0e:f5:1f:24:6f:e2:1b:28:dd:91:
                    08:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B7:5F:3C:24:A1:73:35:0B:CA:FD:D8:FF:00:F7:9A:14:0C:75:58
            X509v3 Authority Key Identifier:
                keyid:D8:C2:09:6C:C0:C5:55:7C:BA:B6:C1:0D:61:D0:77:D0:78:FE:71:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MIJbMDFVXy6tsENYdB30Hj-cX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:e6:d6:5a:97:0f:92:ed:5c:1d:e7:96:70:89:4c:08:a4:7b:
         42:6e:c5:5e:bf:60:86:5a:ea:ab:52:52:49:fe:0b:1b:ed:ba:
         e4:8d:53:96:57:97:12:c0:06:9e:f7:02:d4:f5:70:7c:73:9c:
         fb:45:a3:cb:cb:c0:1d:57:71:f5:e0:3f:23:99:fd:53:87:cb:
         66:c4:8a:2c:0b:ec:18:96:76:78:5c:69:45:69:46:2e:fe:bc:
         33:0e:d2:19:41:ce:95:4c:fe:8f:6e:4f:93:f9:03:ba:86:b4:
         25:ea:61:91:93:83:7d:20:5e:60:3d:e2:77:c4:4e:b3:66:f5:
         6d:66:cc:a8:7b:dc:7e:f0:58:76:ca:0f:fb:a6:3d:16:73:d2:
         0d:71:2f:fb:aa:26:40:f3:dc:22:62:d5:75:ec:58:dc:04:ff:
         5f:6d:2e:a3:53:08:1b:b3:2e:21:e4:5e:97:f0:94:d7:da:d9:
         f6:5e:c0:82:83:9f:3f:bf:b0:26:cc:e1:70:77:b6:0a:e0:6c:
         77:5d:12:cc:ff:ce:f9:7a:db:b0:5b:2e:4d:4a:51:d2:33:f3:
         5c:41:c9:31:f2:88:d3:7a:5b:7f:32:ac:06:80:a8:c5:74:a3:
         8f:68:cb:a8:8a:2d:1c:7f:6c:02:b1:d6:da:db:75:cd:f1:79:
         c1:c9:bb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:29:57 2025 by rpki-client