Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft
File:                     2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft (raw, json)
Hash identifier:          gSiw9ByKedwZ6oXbXxgyoGddFp/2DDz+eyVGZbovVyQ=
Subject key identifier:   72:DB:AF:87:D4:8D:79:BB:CE:A8:1A:33:90:38:09:10:13:C7:0F:BE
Authority key identifier: D9:9B:EC:D0:88:79:4B:11:DA:F3:4C:7F:54:E5:9F:69:39:FE:98:64
Certificate issuer:       /CN=d99becd088794b11daf34c7f54e59f6939fe9864
Certificate serial:       019844AC833A516C732A2BE5FF7E5DFF794E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft
Manifest number:          031C
Signing time:             Sat 26 Jul 2025 03:00:13 +0000
Manifest this update:     Sat 26 Jul 2025 03:00:13 +0000
Manifest next update:     Sun 27 Jul 2025 03:00:13 +0000
Files and hashes:         1: 2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.crl (hash: uumEMXT9L2c+DeGXRHvJVWcUxQgW6/URd8EVY6PCkrc=)
                          2: P6mLuYTWcn0KuLmD43cJ982GF44.roa (hash: lthkyf0qk/Tj3D6L/66lHDSOVo0evf5q6TD/uKiHGiM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:ac:83:3a:51:6c:73:2a:2b:e5:ff:7e:5d:ff:79:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d99becd088794b11daf34c7f54e59f6939fe9864
        Validity
            Not Before: Jul 26 03:00:13 2025 GMT
            Not After : Jul 27 03:00:13 2025 GMT
        Subject: CN=72dbaf87d48d79bbcea81a339038091013c70fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ad:fd:66:db:ec:60:bd:52:f3:f4:87:b5:1b:
                    ae:fa:b1:ce:99:1c:90:11:aa:e8:99:4b:c4:3d:d6:
                    bf:25:07:b7:85:6b:e1:29:c0:a1:bd:61:71:51:79:
                    01:5a:f2:1b:c0:6f:d3:8b:94:86:c9:a3:9e:b7:b1:
                    e3:e6:29:b8:c3:74:df:1b:12:95:e5:0c:d7:ee:90:
                    c2:f6:76:a5:f5:58:0e:fe:1d:d0:fe:9f:45:5a:1f:
                    e8:21:64:52:83:94:2f:25:88:fb:3e:5b:25:8a:5a:
                    a0:58:f5:84:85:8d:74:3e:92:94:93:20:73:c0:e9:
                    12:a1:d9:56:f2:1d:76:81:36:c2:62:e3:1a:64:48:
                    a2:7b:96:0d:51:ac:d2:e4:df:41:97:86:41:c5:da:
                    85:f3:85:9c:de:c1:66:8d:e3:fe:4d:cc:bf:0f:d2:
                    d6:1f:08:20:fb:b1:bb:2e:54:a6:e6:c9:36:51:f7:
                    b1:76:6f:09:a4:e3:71:4b:0d:7f:ea:db:3a:d4:6d:
                    f3:9a:cc:d4:1f:80:87:0f:da:27:6e:04:b4:ab:f9:
                    ab:5f:dd:2a:fa:d5:48:d1:4e:88:dc:ef:11:84:d7:
                    fc:9d:ca:42:d3:a3:13:7e:e6:c3:a7:55:b2:15:fc:
                    c3:7c:c3:66:ea:74:b9:6b:85:28:9c:42:5c:4a:aa:
                    9d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:DB:AF:87:D4:8D:79:BB:CE:A8:1A:33:90:38:09:10:13:C7:0F:BE
            X509v3 Authority Key Identifier:
                keyid:D9:9B:EC:D0:88:79:4B:11:DA:F3:4C:7F:54:E5:9F:69:39:FE:98:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:89:d3:bf:d9:a9:2c:29:92:7b:7f:37:6a:fb:e5:eb:11:e0:
         76:1b:2b:9b:0f:39:f3:2d:7e:58:25:74:d4:d9:49:5d:bb:5e:
         f0:f4:0d:6d:3d:ca:9d:96:80:c1:7d:17:4f:17:62:87:11:c0:
         6d:03:5a:2e:be:ea:61:36:55:5a:d1:d7:94:ce:3f:fa:6b:48:
         47:93:30:f1:e7:08:73:bc:8c:c5:cd:a8:5e:23:4e:52:dd:9b:
         42:95:5f:27:5d:73:6d:0c:b8:ba:49:b1:28:dd:f8:e8:d5:e5:
         2c:8a:83:cd:10:9e:d1:f8:8d:2a:e2:03:4b:54:0c:7e:59:88:
         83:fc:c9:83:20:a5:6e:64:3f:09:0c:e8:20:c9:ed:9f:16:46:
         2e:3f:19:b6:9c:dc:b2:9e:0f:85:ac:4f:93:80:36:ea:45:37:
         96:12:b4:d2:71:95:74:fc:cd:9a:46:3c:eb:cc:67:2f:72:d7:
         b7:57:c6:46:b5:d7:18:06:29:ed:e3:04:8c:9c:6e:7d:f1:4c:
         61:3c:72:99:fd:7f:9b:5f:f2:f1:83:59:62:46:9f:cb:37:ac:
         b7:d1:bc:d7:b6:e0:3c:62:bb:3f:f3:5d:0a:3d:eb:e2:ac:21:
         9d:3b:38:a2:16:1d:80:80:8d:0c:27:a8:23:3b:fc:7d:ac:c0:
         03:ce:d5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:11:52 2025 by rpki-client