Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
File:                     g2Uo4VK23LoVcSQaxVvlvOARGLc.mft (raw, json)
Hash identifier:          zvlBttAJWkwwWAf1u+Z0a8OGiI7yT/q2t2J+VcuU+Yw=
Subject key identifier:   26:2E:B6:21:6B:D4:C7:5B:BF:94:4D:16:D5:9E:B8:C0:20:AC:4E:2B
Authority key identifier: 83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7
Certificate issuer:       /CN=836528e152b6dcba1571241ac55be5bce01118b7
Certificate serial:       0198458987564238056C421F08C3588D4D01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
Manifest number:          1602
Signing time:             Sat 26 Jul 2025 07:01:37 +0000
Manifest this update:     Sat 26 Jul 2025 07:01:37 +0000
Manifest next update:     Sun 27 Jul 2025 07:01:37 +0000
Files and hashes:         1: CvGHepAgyhQF29vgwO5RLU27Tig.roa (hash: MTqSAP2ijcRiLN3/AxskccxaBqUIlze/F2fZZstIpd0=)
                          2: LG2MEPQP4SA0RYNet0_i-TbLVOA.roa (hash: Q0AqpzK5pnfc1Ye6ZvO737eSRCPhdfmTWDd+EoGA7/k=)
                          3: g2Uo4VK23LoVcSQaxVvlvOARGLc.crl (hash: a6qe4kZ9zKPuADC/OB8WmIudyNdB7ERtm8FCQ8DJBzc=)
                          4: mM8VTopJZmHymxZODgrdAS9tCB0.roa (hash: xbQXqlIoaX+7utbFJ34rZdlVmArTuhCKQpdLZlu7I7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:89:87:56:42:38:05:6c:42:1f:08:c3:58:8d:4d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=836528e152b6dcba1571241ac55be5bce01118b7
        Validity
            Not Before: Jul 26 07:01:37 2025 GMT
            Not After : Jul 27 07:01:37 2025 GMT
        Subject: CN=262eb6216bd4c75bbf944d16d59eb8c020ac4e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c1:31:4a:fd:8d:c6:c2:cf:f3:fc:d9:9b:34:
                    54:78:58:4a:a0:c2:22:49:40:bd:23:00:bf:cd:e4:
                    33:a5:39:82:50:99:3b:16:03:fb:bf:3f:4d:c2:9c:
                    a0:f1:97:7f:54:ee:2e:5e:37:06:91:a1:53:a2:3a:
                    e6:59:50:99:a4:a2:5b:36:d6:9e:a6:5f:8e:db:ad:
                    d8:39:43:56:82:43:b9:9f:c8:e8:ca:b5:ca:05:50:
                    0a:41:39:d4:25:c2:5b:32:4d:e5:44:08:a5:7f:3a:
                    ab:dc:ac:21:a9:85:13:ed:6f:a8:e1:88:a0:48:5e:
                    81:81:d8:21:30:29:0b:d3:3f:37:2f:75:9e:14:e3:
                    59:ac:7b:c0:21:f4:cf:14:ae:01:39:eb:b2:c4:5e:
                    a2:b5:20:70:cf:e2:39:eb:39:e4:c2:36:0c:31:9e:
                    1a:5e:e2:72:ba:ed:36:1f:f4:71:90:1a:26:92:83:
                    98:8b:cb:9f:fb:b4:12:78:5f:a4:f2:f0:ef:ba:19:
                    da:c2:a6:ab:95:4e:f2:cd:a5:69:bc:6f:9e:e9:cb:
                    ce:c2:a0:94:2b:94:e9:96:fb:81:03:fa:f2:00:2d:
                    08:d4:7f:95:ee:ac:46:33:79:72:9e:10:31:f3:14:
                    f3:c1:f8:b4:46:21:db:82:e1:ad:24:a4:25:a3:24:
                    99:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2E:B6:21:6B:D4:C7:5B:BF:94:4D:16:D5:9E:B8:C0:20:AC:4E:2B
            X509v3 Authority Key Identifier:
                keyid:83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:19:76:51:d7:3e:21:a2:d9:c8:9c:fd:d1:ab:8c:84:40:16:
         41:dc:eb:e6:58:c0:ce:2b:c0:83:fc:0c:97:80:05:3b:35:5f:
         e6:76:8b:7c:aa:b3:9d:00:a9:f3:68:aa:3d:9f:75:32:a2:28:
         f1:46:de:96:87:d5:90:eb:82:16:9c:f7:f0:bc:b5:ad:d5:3f:
         6e:e8:7c:8c:81:ea:fa:22:0c:17:60:51:fd:2c:c2:61:ae:51:
         50:f7:5d:63:eb:ab:55:bd:dd:9a:9a:07:79:e1:d5:e1:55:ed:
         77:13:47:0b:9a:22:bb:0a:b9:c8:ec:47:90:f0:e9:9a:57:19:
         5c:b6:df:b3:f9:ab:8d:83:0c:53:a8:0b:33:09:84:eb:d4:b5:
         38:d0:be:b4:03:7e:5c:5b:93:d5:74:cf:05:74:4b:32:50:5b:
         5e:b5:44:b9:2c:db:54:44:de:79:ed:c1:98:0e:9e:b1:50:db:
         56:29:bd:78:69:c9:d5:65:67:80:62:04:bc:ab:61:e1:c3:8e:
         37:5f:07:b2:88:64:ac:40:88:84:b5:59:98:98:fb:52:4d:11:
         ed:a7:ef:ea:61:3a:86:be:aa:9c:de:27:40:ee:e2:04:c9:eb:
         30:02:11:73:d8:59:d8:47:e4:29:e0:75:cd:64:26:ef:b4:3d:
         3f:98:1a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:30:26 2025 by rpki-client