Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
File:                     2qUj1biTySXsOoJgH5J0WCzvxvA.mft (raw, json)
Hash identifier:          67Ey3F4SrCiEpVHGB3ImtfD+aBZwWxmSrZJoMuzEO7o=
Subject key identifier:   AD:AD:CC:6F:57:76:E5:C7:90:10:49:29:F2:A9:5A:63:7B:C8:81:15
Authority key identifier: DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
Certificate issuer:       /CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Certificate serial:       01975DCB9289FD3B3FB105454A9A809E91AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
Manifest number:          045C
Signing time:             Wed 11 Jun 2025 07:01:51 +0000
Manifest this update:     Wed 11 Jun 2025 07:01:51 +0000
Manifest next update:     Thu 12 Jun 2025 07:01:51 +0000
Files and hashes:         1: 2qUj1biTySXsOoJgH5J0WCzvxvA.crl (hash: 7E2aROTiH1qKF7qDNRA0GrgXhEIzMFNBF7SPJd44uTQ=)
                          2: Fx2klUP1BUQWSve4HaBQkpAiNyk.roa (hash: zJ2Tt9osikAXRixamoNp+QrAMtzbTSaAfE5Ta0gGans=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 07:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5d:cb:92:89:fd:3b:3f:b1:05:45:4a:9a:80:9e:91:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa523d5b893c925ec3a82601f9274582cefc6f0
        Validity
            Not Before: Jun 11 07:01:51 2025 GMT
            Not After : Jun 12 07:01:51 2025 GMT
        Subject: CN=adadcc6f5776e5c790104929f2a95a637bc88115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:58:06:3f:7d:99:0d:d2:c6:2e:21:ce:ca:c7:
                    09:4c:ba:87:7f:2e:89:f9:f1:c0:3c:d9:28:97:c8:
                    e1:21:6a:47:45:60:86:9f:1e:1f:f5:dc:fd:60:de:
                    e7:f1:c6:99:3c:44:0f:bf:72:6e:1d:27:7d:17:2c:
                    7b:22:8d:9c:f4:e3:93:f2:0f:ea:fd:db:b4:a2:86:
                    97:b5:d6:d4:4b:2a:ae:85:09:05:89:d0:25:f6:ca:
                    a1:29:ae:73:1e:d6:36:a9:ef:34:cd:50:33:59:a4:
                    34:1c:94:ed:3c:32:02:2d:f9:de:24:91:0a:96:26:
                    7d:7a:b2:04:62:be:96:3f:5b:84:d8:5c:e1:b4:de:
                    75:02:3f:48:17:46:d6:93:d8:1a:9a:71:e5:8b:88:
                    0d:0b:d5:64:7a:41:bf:69:18:a6:f5:3a:f8:25:02:
                    31:13:57:40:d5:f3:1a:9b:88:c2:60:7f:02:4b:15:
                    65:b0:6b:43:44:71:e0:58:ed:9a:25:1a:ac:47:d5:
                    6a:ed:74:8b:59:e3:5e:50:58:dd:3e:69:6a:bf:8c:
                    22:93:38:72:cf:85:cd:39:61:15:03:a0:61:ab:07:
                    e2:11:f5:3e:ef:b4:66:9e:45:95:92:43:e6:5b:e6:
                    64:0a:1c:03:56:c8:f0:4f:52:a0:eb:d7:75:bf:22:
                    aa:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:AD:CC:6F:57:76:E5:C7:90:10:49:29:F2:A9:5A:63:7B:C8:81:15
            X509v3 Authority Key Identifier:
                keyid:DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:9b:5d:8f:1c:c1:8f:1c:e4:ce:c6:30:11:ca:fd:0e:9e:6a:
         4f:67:99:aa:1b:b4:93:a6:6b:5d:71:29:f1:db:17:fb:34:1c:
         fb:8f:de:bd:e3:8a:05:b1:29:b8:ad:94:37:3d:6e:28:f8:b3:
         a2:1b:c3:4f:f6:89:e8:14:b9:da:2b:91:10:ae:e0:9f:b0:59:
         f5:9d:a2:e9:b7:e4:5b:42:5e:05:8a:b0:eb:1a:5d:27:cd:63:
         f3:38:8e:9d:9d:0e:1a:10:4e:45:24:56:96:c6:7e:91:16:73:
         d6:c1:30:df:b4:43:ad:a1:c4:b3:c1:c9:4d:97:56:d6:0c:fc:
         55:49:dc:fc:49:85:5c:47:a5:57:13:6c:03:de:1a:0b:32:6d:
         64:a2:7c:f0:e8:53:de:b7:32:d7:4e:68:9d:b6:93:dd:2d:5e:
         16:65:e2:ca:81:85:a3:3f:63:56:00:e5:89:71:09:d9:e0:d1:
         20:6e:6a:5b:b2:33:f0:67:1c:19:1d:0b:27:f1:19:71:3b:d4:
         a7:8c:7d:e2:25:67:ba:7a:6a:f2:c7:dd:b7:f6:a0:77:90:dd:
         ee:dd:7a:32:7b:41:9c:4e:f3:3c:0e:cc:5a:42:28:0d:b1:95:
         c3:ba:40:50:a3:66:2d:59:a5:a7:ae:3f:40:5c:18:29:09:b3:
         a6:7f:05:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:09:08 2025 by rpki-client