Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft
File:                     2MIJbMDFVXy6tsENYdB30Hj-cX8.mft (raw, json)
Hash identifier:          Q/PXhEwwkORBEtQmoAa9CN8J77BX4HuSl4rUZRTsvQY=
Subject key identifier:   6A:03:73:D0:92:E9:FA:29:E0:3A:62:4A:A6:7F:2B:CC:28:B1:EF:87
Authority key identifier: D8:C2:09:6C:C0:C5:55:7C:BA:B6:C1:0D:61:D0:77:D0:78:FE:71:7F
Certificate issuer:       /CN=d8c2096cc0c5557cbab6c10d61d077d078fe717f
Certificate serial:       01984AAF12AB97130F5CEBF79779025E54F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2MIJbMDFVXy6tsENYdB30Hj-cX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft
Manifest number:          0797
Signing time:             Sun 27 Jul 2025 07:00:44 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:44 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:44 +0000
Files and hashes:         1: 2MIJbMDFVXy6tsENYdB30Hj-cX8.crl (hash: fJFGxjax2HoP0efeKGeYFP6gti1yLJq78JtfdGtaRK4=)
                          2: v--QteSWi6tQPkHDzqMh-ib3Ea0.roa (hash: 4DKBaLEIdscFHQJRoeUgffvp/rQ3x54nPWPAJ4H+N0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2MIJbMDFVXy6tsENYdB30Hj-cX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 07:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:af:12:ab:97:13:0f:5c:eb:f7:97:79:02:5e:54:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8c2096cc0c5557cbab6c10d61d077d078fe717f
        Validity
            Not Before: Jul 27 07:00:44 2025 GMT
            Not After : Jul 28 07:00:44 2025 GMT
        Subject: CN=6a0373d092e9fa29e03a624aa67f2bcc28b1ef87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:79:2a:e7:d9:f5:30:66:5d:49:9a:2c:c0:89:
                    4e:cf:cf:3a:96:27:80:d3:ca:31:bd:49:2e:8c:99:
                    c9:81:50:71:b6:5d:da:2c:36:f5:11:77:6e:db:82:
                    81:30:89:08:85:57:61:65:1b:65:8a:66:f2:d6:f7:
                    c8:bd:23:f6:f7:73:63:54:1a:25:ef:2b:03:d4:59:
                    5f:1d:e7:ba:94:93:49:e6:83:c0:88:26:71:83:f7:
                    5d:44:52:67:86:a5:8a:36:f4:5a:00:4b:03:d5:78:
                    53:ce:72:12:51:55:06:64:58:45:8c:e6:0c:32:34:
                    01:01:c4:5e:cb:15:39:c8:9c:d6:dd:a2:2f:b0:3e:
                    04:1b:6b:b3:48:c7:40:41:4e:eb:7a:4b:04:05:12:
                    b7:7b:f9:a7:2f:cc:04:97:b8:dc:43:60:3b:ef:e3:
                    27:47:26:14:6b:a2:fc:75:7b:16:11:7a:e0:e3:3e:
                    ee:4e:57:92:6e:7b:07:17:eb:75:a6:93:9e:0c:23:
                    f0:3f:1d:6a:30:fb:12:e3:ba:5d:db:4d:77:12:dc:
                    86:16:4b:bb:1e:8e:92:d0:0d:c3:b2:24:75:4d:8d:
                    4e:47:13:06:a6:46:b2:86:61:6b:e9:4b:46:45:76:
                    61:d2:df:96:34:9e:ab:ea:fa:d3:0c:cf:9f:f9:48:
                    36:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:03:73:D0:92:E9:FA:29:E0:3A:62:4A:A6:7F:2B:CC:28:B1:EF:87
            X509v3 Authority Key Identifier:
                keyid:D8:C2:09:6C:C0:C5:55:7C:BA:B6:C1:0D:61:D0:77:D0:78:FE:71:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MIJbMDFVXy6tsENYdB30Hj-cX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:be:f2:a9:7f:cb:d1:87:12:de:e9:4b:35:94:46:de:2b:c8:
         fa:e5:07:bc:78:52:8a:da:35:af:78:7b:bc:60:e6:84:ba:b9:
         2b:72:46:31:54:73:e0:cd:cd:47:29:c9:61:9e:79:42:95:93:
         8b:d6:5d:e1:01:1b:82:a0:96:e4:81:10:cb:b9:2c:2f:2d:e1:
         98:06:0c:6b:b2:f9:76:7d:f7:33:9c:42:5d:e5:23:a6:ed:75:
         e2:a0:83:6a:db:17:33:10:b5:73:75:74:33:0a:4c:8b:08:18:
         23:7e:25:ca:7c:9c:c9:68:e1:c0:64:d0:60:d2:27:34:61:41:
         39:c6:c8:8e:f3:12:99:ec:12:27:5a:15:d8:a6:18:25:fa:50:
         d7:3c:86:78:a7:17:fe:d1:27:0d:70:63:dc:76:c6:4a:1b:f6:
         74:e0:f1:a7:97:78:0e:db:0f:17:a5:0f:65:53:16:ba:f6:47:
         5c:b4:35:59:99:44:70:50:5b:c5:0a:e0:78:c8:02:62:79:9c:
         af:93:84:11:14:ae:6b:04:06:8c:ea:ad:26:de:05:c1:71:13:
         44:ab:cd:9d:48:ff:b8:e0:2c:ef:9e:84:25:05:15:ca:0f:54:
         24:fb:d3:f1:04:cc:3e:a1:aa:da:ef:0c:7d:d0:4c:31:6e:76:
         fd:9c:42:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:48:40 2025 by rpki-client