Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
File:                     2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft (raw, json)
Hash identifier:          2H7y1+VD/cSO58yAgooxd7cZxbN31Of6BgrZ7ZJlocI=
Subject key identifier:   97:59:BE:F5:B4:BA:8E:98:06:AA:67:4A:5A:14:D5:49:35:54:59:F5
Authority key identifier: DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
Certificate issuer:       /CN=da980a45fe487366e386b6064c2c652519f9fc93
Certificate serial:       019847AD87F27A095C527B93BD59D9554944
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
Manifest number:          1600
Signing time:             Sat 26 Jul 2025 17:00:11 +0000
Manifest this update:     Sat 26 Jul 2025 17:00:11 +0000
Manifest next update:     Sun 27 Jul 2025 17:00:11 +0000
Files and hashes:         1: 2k5YbACJ4Q7zlHJcdzXXQdWQyLo.roa (hash: ejnRPYJcqos1VPRlPS0gL7ngl0unaEAz9tOL/KDHo48=)
                          2: 2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl (hash: u8wnS83fUG7p/BG4yiaZL5LEaZcyuFV4VsJXyZMzVlA=)
                          3: F-T6XFqFnI_sbUUjNxNcNd87BhY.roa (hash: 6o0pvXXHkL7jKBhk4FmzhB8YNuZ27KgrcAM6QK83Qb4=)
                          4: F1ShlRrx5ZPQmtQlj2ftFMW353w.roa (hash: Xetg03+rB7SCygrrXAn/7tOc08cqxoGNbraAHZ0gKtM=)
                          5: IPUd7GCIW2gsU9xakT1oNUwSIio.roa (hash: dGuEAfVSkLkoM8KnSMOWFIaomaZjWrbWxTVDngrHaFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:ad:87:f2:7a:09:5c:52:7b:93:bd:59:d9:55:49:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da980a45fe487366e386b6064c2c652519f9fc93
        Validity
            Not Before: Jul 26 17:00:11 2025 GMT
            Not After : Jul 27 17:00:11 2025 GMT
        Subject: CN=9759bef5b4ba8e9806aa674a5a14d549355459f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ae:dd:36:1d:14:cc:24:52:28:2a:06:1e:25:
                    c2:33:ac:7f:ed:24:40:bd:c7:70:9e:52:f3:80:b7:
                    fd:e1:b8:20:18:7f:3a:b8:2c:8e:fa:de:54:29:bf:
                    c2:ee:8a:f5:a8:0d:58:0e:b9:73:52:59:a7:31:2d:
                    7b:c2:72:8b:37:be:68:54:90:43:a8:ac:60:f0:e9:
                    44:35:4f:1e:5c:f4:2f:5e:d9:48:b5:43:80:a6:1b:
                    25:59:49:2d:ce:03:89:99:64:6d:7f:fa:38:05:96:
                    1b:7e:2f:e9:fb:22:28:f4:30:be:ff:7f:0a:dd:61:
                    f6:9a:80:a4:27:d6:3b:00:8b:aa:6e:f4:45:ec:e1:
                    9d:57:a8:fa:3a:b6:1c:d1:2f:c8:7c:a5:1e:a3:5a:
                    47:97:8d:7e:08:d6:69:4d:8d:3a:b5:68:83:d7:07:
                    29:a3:9a:7a:35:09:09:f4:e5:31:9f:20:6d:84:2d:
                    df:8d:53:22:e0:83:27:32:e5:4e:79:f4:b5:61:20:
                    63:98:8a:37:cb:a5:73:64:52:61:fc:60:82:b7:57:
                    ec:4c:99:bd:b8:82:b5:16:b0:f2:62:65:97:66:fe:
                    4e:6a:79:b6:2e:cd:ad:71:59:6d:37:57:3c:ff:c5:
                    4e:5b:dd:04:bf:08:be:32:9d:89:73:e4:eb:0b:17:
                    aa:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:59:BE:F5:B4:BA:8E:98:06:AA:67:4A:5A:14:D5:49:35:54:59:F5
            X509v3 Authority Key Identifier:
                keyid:DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:2d:dc:8c:47:3f:19:8f:5a:b0:ac:83:a8:a4:6c:3c:9d:94:
         69:2e:98:23:8b:ed:3b:60:77:f1:2a:1d:27:75:56:62:7b:c6:
         bb:75:19:94:be:7b:a9:2e:04:d7:e6:ea:95:55:51:57:33:2e:
         5d:76:ba:78:36:de:38:d9:d2:0c:58:09:2b:c6:53:aa:91:d5:
         a4:54:07:43:2b:59:b6:40:85:94:db:39:44:06:b8:de:08:8b:
         dd:8b:81:c3:8a:e4:99:e0:02:5c:6f:23:fb:51:da:27:ce:9f:
         28:b3:b4:4a:d5:63:28:16:e6:b6:a8:dd:1a:06:d2:ef:66:e6:
         40:d6:53:00:6d:70:78:56:35:dc:df:93:b5:a7:57:d7:47:ba:
         7f:ce:05:7d:67:2e:b3:bf:c6:ae:f6:76:e3:ea:62:ef:0c:55:
         9d:bb:74:2a:86:3c:39:c4:3e:5d:f7:52:33:1c:33:b6:d4:99:
         42:20:02:52:f8:94:ee:81:2a:a3:60:ab:f1:43:8e:be:fd:33:
         40:f8:9d:59:bf:c5:2f:de:fe:05:84:a2:cd:5e:83:62:7a:9d:
         c2:87:35:93:6f:3a:bf:28:f4:f3:ba:e8:c8:0b:f1:bc:d4:6a:
         1f:44:88:6d:7f:3b:4b:38:d4:1c:e0:9c:af:f2:3a:1a:46:c8:
         40:cb:b5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:34:31 2025 by rpki-client