Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
File:                     2jIgJypGmu1lzCp_bZf8qZH37IE.mft (raw, json)
Hash identifier:          7YIPvYe/w7zvk9ilPJg2t9N3Avoa4imGhW4thbiPc1k=
Subject key identifier:   75:15:6D:C0:81:16:FE:B1:89:8A:08:AA:A4:94:2F:72:CA:41:DC:CE
Authority key identifier: DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
Certificate issuer:       /CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Certificate serial:       01974DB298ED4C636B4BDC99F7D7D8709314
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
Manifest number:          157D
Signing time:             Sun 08 Jun 2025 04:00:39 +0000
Manifest this update:     Sun 08 Jun 2025 04:00:39 +0000
Manifest next update:     Mon 09 Jun 2025 04:00:39 +0000
Files and hashes:         1: 2jIgJypGmu1lzCp_bZf8qZH37IE.crl (hash: bg+QZ4Iy5OMKwo9oY1pmsp1nNcP3BvDRZ4ZtB4UreL4=)
                          2: G5AySBQmGTZguSR2UN46mLZeA6A.roa (hash: 6MYLur+lADg+zzLuGL4/PdmDjdeT2Db312IWeWciAtM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:b2:98:ed:4c:63:6b:4b:dc:99:f7:d7:d8:70:93:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
        Validity
            Not Before: Jun  8 04:00:39 2025 GMT
            Not After : Jun  9 04:00:39 2025 GMT
        Subject: CN=75156dc08116feb1898a08aaa4942f72ca41dcce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:12:fe:88:f1:88:a1:34:ef:86:dc:87:a5:67:
                    84:fe:e6:cf:f7:b3:1c:75:f6:70:59:03:da:f9:4a:
                    83:43:1a:81:b3:dd:b7:2e:03:8d:ee:81:2d:b6:4f:
                    91:cd:18:1f:75:51:de:f6:8c:db:b0:a7:cc:1e:d0:
                    0a:1a:ce:7e:3f:e6:0a:bc:13:56:3c:c3:8b:8e:44:
                    be:28:5d:ff:f7:d2:a2:66:0a:19:b0:7c:3b:92:3c:
                    1e:81:e4:28:27:e4:23:04:f1:00:9d:ac:28:66:79:
                    e1:db:fc:3a:01:d0:8d:e4:98:c6:57:d4:94:cc:06:
                    cd:69:3b:94:fe:f9:a6:28:4a:32:0d:ec:40:c3:9b:
                    d2:af:a7:5e:80:78:0e:9b:c9:2c:59:35:2d:c6:af:
                    74:75:a5:aa:e2:53:09:96:58:b7:90:40:93:15:7d:
                    f1:17:9a:06:07:d6:ea:96:76:0f:cd:8b:ee:85:50:
                    af:59:77:1c:ce:6c:93:b7:05:1b:6b:3d:b5:b8:c3:
                    57:6d:4d:1c:88:5d:1a:03:bd:22:c7:7e:a2:67:f3:
                    38:26:8f:f6:06:b8:d2:3b:af:7b:6b:88:0a:0b:ff:
                    33:79:08:93:50:d4:d4:f0:83:d4:05:1f:6a:8b:5a:
                    dd:f1:f2:4a:24:77:5e:da:bb:38:a0:36:18:17:8e:
                    f9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:15:6D:C0:81:16:FE:B1:89:8A:08:AA:A4:94:2F:72:CA:41:DC:CE
            X509v3 Authority Key Identifier:
                keyid:DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:9c:3f:10:94:dd:b6:3a:93:90:d9:9a:05:fc:15:75:8a:33:
         90:d9:24:cc:e0:14:c0:42:d2:71:b1:d9:1a:d7:75:13:5f:e7:
         ec:25:e0:78:8a:ff:e6:dc:08:ed:52:65:e1:c3:1e:d8:80:2c:
         54:bc:74:d4:16:38:19:09:6e:ab:4d:0a:03:9a:4e:cf:d4:c2:
         bc:05:84:fc:ab:62:fa:5a:a8:d6:de:de:ab:4e:f8:e4:a1:91:
         32:35:0a:f7:ee:d6:42:22:ab:49:d4:16:c9:7e:46:5c:2b:99:
         af:5f:e7:d3:74:b3:32:26:2e:d9:a5:76:cd:1c:90:ba:37:62:
         0d:d3:e0:a2:11:5d:d6:0e:63:f8:45:2f:c6:66:52:2f:08:de:
         2d:9a:b4:6f:5a:80:63:2d:a5:27:b4:14:9a:9a:66:b8:62:8c:
         94:16:cb:27:b5:2d:f0:f6:06:34:d1:b5:f1:80:5a:e3:b5:08:
         f4:bf:70:2d:1f:20:a7:ec:8c:02:75:a5:19:b6:75:78:a4:3e:
         e6:4f:38:23:1d:0d:ec:90:13:35:04:77:a8:f7:31:40:89:be:
         c7:12:df:43:c4:bd:a4:d5:07:32:f5:aa:81:9f:c5:1f:e1:7d:
         75:fb:63:99:d3:4a:c4:1e:54:95:46:3d:dd:52:64:2b:87:84:
         34:db:6d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:31:32 2025 by rpki-client