Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
File:                     2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft (raw, json)
Hash identifier:          RvJyRIFgQrQG5UtTAPKM8W54kGkKEEP6pPGwi11eXgs=
Subject key identifier:   6A:2D:F3:11:4F:06:EA:84:90:A3:B8:B3:C5:81:52:0B:04:05:BF:32
Authority key identifier: DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7
Certificate issuer:       /CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
Certificate serial:       019953E837A628C041D041412B0823CC2499
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
Manifest number:          1167
Signing time:             Tue 16 Sep 2025 19:02:31 +0000
Manifest this update:     Tue 16 Sep 2025 19:02:31 +0000
Manifest next update:     Wed 17 Sep 2025 19:02:31 +0000
Files and hashes:         1: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl (hash: iyoCVo/tyXEwtw7DqNwk3F3pYy9D7QXT0FHxYnjroFs=)
                          2: jaff7ENxhbDetLmkrM4Rn1poSLI.roa (hash: ui5KqDG5NX3RDDGGQyaqVgy4VTQxAtFMr0iFGN/ACUk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Sep 2025 18:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:53:e8:37:a6:28:c0:41:d0:41:41:2b:08:23:cc:24:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
        Validity
            Not Before: Sep 16 19:02:31 2025 GMT
            Not After : Sep 17 19:02:31 2025 GMT
        Subject: CN=6a2df3114f06ea8490a3b8b3c581520b0405bf32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:67:04:8c:bc:85:3e:b3:72:46:df:32:3f:d2:
                    15:b5:58:e6:57:31:2e:a0:82:c5:e6:7c:80:d4:54:
                    46:2d:e4:1f:08:b1:c5:3d:e2:2c:f9:45:70:76:ea:
                    0c:9e:3f:2b:63:b4:3b:62:30:28:2d:ed:76:da:73:
                    d5:07:60:77:0a:9a:a8:13:ff:65:6d:ab:cb:53:02:
                    f5:35:61:09:68:c3:70:6c:65:62:0a:e6:27:42:31:
                    fb:7c:57:ce:8d:ec:1e:85:6d:9b:7a:79:6e:60:c4:
                    b9:76:5a:83:06:7e:0f:94:f5:6f:ac:8f:91:85:dc:
                    08:cf:24:ec:f8:34:c7:3a:8f:38:75:3e:83:4d:ed:
                    b6:d4:08:fc:c2:7c:f7:75:72:30:a0:cc:e7:0f:e3:
                    3c:00:08:89:f6:48:b5:6e:3b:68:05:db:e7:30:37:
                    e3:3e:00:ad:f3:6a:97:29:3b:48:6d:48:b0:b8:5d:
                    57:42:b8:21:a2:40:53:2d:91:88:4d:cc:88:60:5a:
                    c2:80:aa:00:6d:20:a4:02:da:93:55:44:58:0b:b2:
                    79:a2:0b:49:df:1d:8d:09:35:7a:f8:ef:25:80:80:
                    7c:ec:ae:ea:ff:64:5d:21:89:43:70:5d:40:3f:05:
                    6b:8d:5c:f6:94:57:39:44:45:c2:95:bc:95:93:e2:
                    f9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2D:F3:11:4F:06:EA:84:90:A3:B8:B3:C5:81:52:0B:04:05:BF:32
            X509v3 Authority Key Identifier:
                keyid:DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:12:e4:9f:e1:8a:e0:a5:bc:74:35:20:dc:5d:90:32:d1:89:
         02:d0:11:e7:f0:ae:f8:b4:5a:8b:b4:12:08:e9:0b:e4:82:da:
         8e:cd:7d:c5:37:83:b9:c0:0b:36:94:70:d8:18:f4:b3:da:15:
         4b:d4:ef:97:75:1e:b0:a2:d3:e2:9c:81:99:df:39:1f:b5:d9:
         78:ae:2f:9c:95:05:3e:78:fb:47:58:61:0d:63:42:d8:77:e0:
         a6:84:e3:45:7e:91:88:22:61:a7:f8:a5:0b:de:03:8d:22:55:
         b7:3d:ce:d6:ff:b5:a4:a3:e4:01:d0:e1:b3:70:8f:87:4d:a1:
         86:e0:d2:25:2b:99:1d:87:19:ad:45:8d:c0:1c:60:79:7b:4f:
         81:1f:89:39:dc:f9:2a:31:f0:17:90:d6:c9:ea:cd:07:0e:8f:
         c0:36:78:65:28:29:2c:0b:0d:27:66:09:a3:70:82:c6:ec:29:
         4f:36:b6:87:f2:5d:b8:b1:72:3c:ea:df:9d:03:a3:ec:4b:6f:
         2e:b1:b1:46:f2:00:3b:1d:1c:2c:aa:63:df:7a:4f:db:44:35:
         38:52:65:ec:31:88:ec:bf:97:f0:6b:bd:90:96:1d:c7:f0:06:
         c5:58:87:c9:b9:b2:19:8c:67:2d:99:70:11:d4:bc:7e:ef:4d:
         fd:9e:a9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 23:31:08 2025 by rpki-client