Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
File:                     2yXQP8GPL0LNpQOGneGU_YzCGqk.mft (raw, json)
Hash identifier:          Ot1SI4UwmGiGVye4gSXt+asL6dAHpZIAczppNSjVYLY=
Subject key identifier:   7E:3D:C4:CA:DA:5B:73:38:37:6A:95:07:C1:04:D7:53:82:71:6A:A6
Authority key identifier: DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9
Certificate issuer:       /CN=db25d03fc18f2f42cda503869de194fd8cc21aa9
Certificate serial:       019853E92A59985A3BEEF3A6AA3AF4609A4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
Manifest number:          1607
Signing time:             Tue 29 Jul 2025 02:00:46 +0000
Manifest this update:     Tue 29 Jul 2025 02:00:46 +0000
Manifest next update:     Wed 30 Jul 2025 02:00:46 +0000
Files and hashes:         1: 2yXQP8GPL0LNpQOGneGU_YzCGqk.crl (hash: 97AKq9XJbpq2X6458zVhH9IA4dYJu0QlKyznPObIzF8=)
                          2: p23wwYN_BcdLiJY0vIjxBTg9FfA.roa (hash: BpBe3bEGzQ2vJJNcd5ELYkyQlNL9ofFCJ83jKn6lQFw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:e9:2a:59:98:5a:3b:ee:f3:a6:aa:3a:f4:60:9a:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db25d03fc18f2f42cda503869de194fd8cc21aa9
        Validity
            Not Before: Jul 29 02:00:46 2025 GMT
            Not After : Jul 30 02:00:46 2025 GMT
        Subject: CN=7e3dc4cada5b7338376a9507c104d75382716aa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9e:93:1d:b8:97:74:a3:c2:aa:2f:49:69:f2:
                    55:d5:f7:fd:1f:3a:19:87:91:76:41:ae:b7:20:ac:
                    4e:b0:9a:3c:0a:1b:b3:4d:a4:4c:42:b3:7c:0a:bf:
                    3a:a5:51:fd:77:d3:27:1a:59:73:df:27:60:a5:68:
                    35:77:9e:43:cd:59:9b:2d:33:c7:2f:87:65:3c:7e:
                    be:5c:40:94:10:55:09:a2:43:16:8f:49:45:7e:51:
                    68:f4:bf:aa:6b:fa:05:4f:1a:47:2f:6e:3e:ca:b7:
                    2d:ae:b4:45:b3:19:bb:68:db:68:e5:ee:f7:53:f9:
                    74:6d:5b:2b:8d:d4:c5:33:a1:08:d3:6e:b7:ea:d6:
                    6e:e0:dc:4d:9c:1e:57:bf:02:54:7e:b6:e6:18:0e:
                    42:12:6d:d3:ae:23:2b:50:ae:97:f6:53:cf:9f:9a:
                    81:72:0c:66:4b:87:92:19:4d:c4:ff:9e:d1:65:6d:
                    c0:1e:17:b9:29:7c:aa:2f:d6:91:86:36:3a:d1:94:
                    67:a1:00:f2:8b:9a:07:de:fb:8a:9c:e5:a3:96:e3:
                    e8:4b:43:f4:f7:d0:48:9c:52:ea:26:c9:73:ad:5f:
                    47:36:1b:3d:e1:1b:f4:77:e9:08:ca:2a:f4:29:49:
                    1d:05:87:1b:ec:62:cb:6f:24:fc:65:83:16:ad:b2:
                    14:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:3D:C4:CA:DA:5B:73:38:37:6A:95:07:C1:04:D7:53:82:71:6A:A6
            X509v3 Authority Key Identifier:
                keyid:DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:f0:26:c3:78:51:03:3c:1e:b6:a2:e8:56:7a:e9:0d:9e:f5:
         fc:38:bb:43:fd:2e:da:6b:0c:9e:2b:7b:f0:b3:9f:89:6f:54:
         65:76:f0:a3:81:29:46:85:ad:60:49:da:de:71:27:34:3a:32:
         3a:02:4b:ef:5f:2c:55:73:29:dd:ec:17:d7:da:8a:2d:2c:a2:
         7a:35:de:8e:59:b2:f5:be:ac:20:b8:3c:c0:bb:3a:ec:e2:ab:
         7c:3c:37:58:12:32:03:92:80:83:ce:de:ed:b8:1e:92:7e:ae:
         fc:c6:e7:8d:2c:e7:d6:87:a1:fe:5e:62:ca:19:26:2f:9d:45:
         81:25:86:8e:44:e1:b3:eb:35:ba:5b:9e:9e:38:0e:e4:73:20:
         ca:70:71:e3:a8:d5:98:c2:bf:aa:11:6d:60:d1:11:15:13:ac:
         e1:ca:fe:c1:13:bb:17:32:df:7a:f5:95:27:c5:1d:55:b0:a0:
         49:3d:70:52:25:53:c1:bd:c6:f9:98:4d:dc:81:9a:ca:5c:6c:
         a8:48:49:d3:06:26:f5:af:76:bb:a9:3d:74:90:67:73:f2:b4:
         24:f4:2c:9a:10:b1:d2:f9:08:18:15:3e:83:a5:73:83:d8:22:
         e7:05:da:2a:55:c5:b8:25:73:d1:9b:dd:04:5b:a2:41:74:d1:
         0d:f2:94:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:30:34 2025 by rpki-client