Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
File:                     2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft (raw, json)
Hash identifier:          M0Bsz9zougRvvR+LcbjyYwQcnbWZuvcLECzQshEL50E=
Subject key identifier:   72:FF:6E:E5:28:4F:54:5D:CF:D4:66:BD:58:C7:8B:DE:0E:82:E4:E6
Authority key identifier: DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1
Certificate issuer:       /CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
Certificate serial:       019849669121835C46950816AA20BAC7DCCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
Manifest number:          13F1
Signing time:             Sun 27 Jul 2025 01:01:55 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:55 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:55 +0000
Files and hashes:         1: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl (hash: w5yqcF0SDncyjt3BKWumHvCHViebkhsn4wEQOyZGYnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:91:21:83:5c:46:95:08:16:aa:20:ba:c7:dc:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
        Validity
            Not Before: Jul 27 01:01:55 2025 GMT
            Not After : Jul 28 01:01:55 2025 GMT
        Subject: CN=72ff6ee5284f545dcfd466bd58c78bde0e82e4e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ec:ba:31:ff:09:73:4a:7a:ae:a7:ec:73:dd:
                    38:24:e6:68:f9:d3:54:ce:74:82:7a:47:c4:a0:45:
                    2e:bf:40:8e:8f:6c:a5:6c:3f:28:0b:d5:3b:b2:d0:
                    03:ba:42:af:86:9d:fa:0f:b6:3c:34:b4:0b:fe:71:
                    c9:2f:4d:3b:0c:0d:53:87:55:86:12:fc:e5:01:99:
                    37:a0:4b:e4:47:65:d8:60:5e:7c:52:0a:d5:f3:6b:
                    95:61:5c:3f:73:7d:4d:15:be:81:92:2a:2b:fb:17:
                    18:01:3f:58:d1:49:7a:6f:10:ea:96:37:23:e8:d7:
                    80:8b:37:9d:e6:29:a4:a2:a0:cc:3e:78:08:dc:81:
                    a1:3f:5d:1e:ab:00:46:2d:b1:66:35:2a:b1:68:f4:
                    99:8e:7c:9f:9d:70:56:7c:7e:95:a9:8b:bc:f3:cb:
                    79:70:29:a2:44:db:6f:02:5b:a9:83:c4:e9:4b:5c:
                    b5:a5:22:cf:90:0d:65:65:ea:03:73:40:d9:19:08:
                    3a:5c:6e:36:6e:73:04:7a:90:9b:75:29:0a:5c:5a:
                    ba:88:a6:32:1b:71:ea:5f:ca:b5:bf:1b:46:db:e8:
                    d4:6e:8f:49:7c:e6:99:33:bd:ca:b2:ef:2c:ed:cd:
                    ff:f1:bf:3b:4a:ed:e8:09:51:bb:de:f3:e6:8a:a2:
                    8f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FF:6E:E5:28:4F:54:5D:CF:D4:66:BD:58:C7:8B:DE:0E:82:E4:E6
            X509v3 Authority Key Identifier:
                keyid:DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:f4:a3:b8:ff:4f:64:79:9c:7a:0e:fe:4a:5f:98:eb:3d:99:
         e8:7c:c4:f9:c6:51:a1:4e:d3:79:14:e6:b4:d0:85:54:b6:52:
         80:7f:1d:41:bb:3c:2c:ea:5e:f8:99:40:95:f1:1a:4c:73:05:
         e2:8f:8a:c7:55:e1:8e:d8:92:93:e4:a0:c0:fd:cc:ff:02:29:
         ac:01:c8:6c:c0:8a:85:3b:c1:c4:fd:0d:cd:d3:94:89:35:29:
         71:15:77:77:6d:db:0c:70:0c:3e:20:09:9d:b5:7f:11:d5:73:
         5a:a2:f3:9c:5e:a0:0e:86:22:c3:af:33:4d:79:41:f0:88:25:
         1d:5d:45:d7:cd:54:b7:35:9e:86:8e:9b:25:67:1a:70:02:e7:
         51:74:57:0d:d2:e8:08:a2:89:e1:e3:cf:73:21:79:fc:3c:9f:
         3e:9f:ce:8a:d3:7f:dc:3b:40:94:a1:1a:6e:5d:4e:9b:3d:57:
         50:a0:a9:a0:d6:f3:dc:ad:ba:0d:92:17:af:9d:09:ce:30:78:
         b0:b0:40:f2:b6:88:db:f9:f6:97:9f:19:3c:ad:52:04:35:ae:
         90:f0:c0:ff:4e:6f:57:7f:10:30:d7:55:2f:c0:02:dd:9b:da:
         b1:d7:e5:9c:17:ba:a9:80:13:c1:38:7c:b3:10:20:ea:7f:b8:
         ee:b5:d4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:25:17 2025 by rpki-client