Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/322803-eeec-4ef1-8984-bdeac911ff34/1/2pI54JrODG8f9md4PBV5e-JBJ2k.mft
File:                     2pI54JrODG8f9md4PBV5e-JBJ2k.mft (raw, json)
Hash identifier:          UJRCvA9z698aePOIQZJuxkkZUt8A9cLGVIa0XDekU8Q=
Subject key identifier:   AA:81:29:64:53:84:8E:06:39:81:E9:79:2F:47:5C:9D:52:87:71:47
Authority key identifier: DA:92:39:E0:9A:CE:0C:6F:1F:F6:67:78:3C:15:79:7B:E2:41:27:69
Certificate issuer:       /CN=da9239e09ace0c6f1ff667783c15797be2412769
Certificate serial:       01992CD969FA882D3A615DD080D623520150
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2pI54JrODG8f9md4PBV5e-JBJ2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/322803-eeec-4ef1-8984-bdeac911ff34/1/2pI54JrODG8f9md4PBV5e-JBJ2k.mft
Manifest number:          06
Signing time:             Tue 09 Sep 2025 05:01:09 +0000
Manifest this update:     Tue 09 Sep 2025 05:01:09 +0000
Manifest next update:     Wed 10 Sep 2025 05:01:09 +0000
Files and hashes:         1: 2pI54JrODG8f9md4PBV5e-JBJ2k.crl (hash: OIDaVcTbxmmhwysmoUYScNXA+gBgtZs9yLGnoDRy1V4=)
                          2: mgz999836P_dFSI6qSezWUaAkyY.roa (hash: zI6mWUBDAi8QqaY3DJvGDg/o4D+XEGIiFJk9IKHzEFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/322803-eeec-4ef1-8984-bdeac911ff34/1/2pI54JrODG8f9md4PBV5e-JBJ2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/322803-eeec-4ef1-8984-bdeac911ff34/1/2pI54JrODG8f9md4PBV5e-JBJ2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2pI54JrODG8f9md4PBV5e-JBJ2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 05:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2c:d9:69:fa:88:2d:3a:61:5d:d0:80:d6:23:52:01:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da9239e09ace0c6f1ff667783c15797be2412769
        Validity
            Not Before: Sep  9 05:01:09 2025 GMT
            Not After : Sep 10 05:01:09 2025 GMT
        Subject: CN=aa81296453848e063981e9792f475c9d52877147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:45:90:8e:44:ff:29:40:49:70:5f:c5:7c:29:
                    f2:75:13:a5:cd:9f:04:88:34:25:5b:d7:ae:e2:23:
                    3d:9f:2f:b6:24:8f:f7:bc:9b:44:ba:0c:c9:20:91:
                    df:78:98:a7:88:d4:64:84:af:a6:5f:da:04:32:2c:
                    88:8a:f5:a1:f9:89:d8:74:30:5e:2c:29:32:9e:4d:
                    9d:94:90:0e:b8:14:7b:7d:2f:57:d0:7f:7a:ea:7a:
                    26:08:f8:b8:d8:5c:b4:16:39:16:4f:69:9e:fd:82:
                    a6:37:fd:73:10:67:60:50:0f:73:cb:c1:38:e3:b6:
                    c5:aa:81:72:43:1c:8e:88:dd:f0:ff:50:0e:2d:26:
                    b1:50:c1:2a:f4:89:16:99:1f:34:9d:93:f1:ca:b9:
                    1b:72:af:62:f6:df:d0:cb:b5:eb:94:1f:28:68:92:
                    ac:25:bc:0e:a3:4a:94:3a:ed:3a:21:04:9c:f2:70:
                    bf:8a:ff:03:bb:28:74:72:a3:f2:b2:9d:e2:e1:cd:
                    1d:81:89:47:fc:bf:a9:0c:c5:70:19:e0:c8:d0:bb:
                    91:02:a0:68:07:98:5b:b3:94:3d:bd:b1:dd:6c:c0:
                    72:b1:5a:de:41:78:02:2a:2d:50:cc:00:89:62:34:
                    67:07:59:f6:37:7d:e4:a7:12:fd:f3:19:b7:0e:d1:
                    88:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:81:29:64:53:84:8E:06:39:81:E9:79:2F:47:5C:9D:52:87:71:47
            X509v3 Authority Key Identifier:
                keyid:DA:92:39:E0:9A:CE:0C:6F:1F:F6:67:78:3C:15:79:7B:E2:41:27:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pI54JrODG8f9md4PBV5e-JBJ2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/322803-eeec-4ef1-8984-bdeac911ff34/1/2pI54JrODG8f9md4PBV5e-JBJ2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/322803-eeec-4ef1-8984-bdeac911ff34/1/2pI54JrODG8f9md4PBV5e-JBJ2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:b5:e2:59:e5:e3:51:8b:60:98:44:8b:0f:ab:da:02:5d:94:
         f8:9b:8e:5c:e8:28:64:25:3e:27:bd:73:87:3d:c8:8a:c4:49:
         5b:91:d3:f3:8a:c3:6b:12:12:67:85:69:b2:95:15:8e:c5:33:
         c6:2c:80:ef:55:e3:3b:e2:73:76:fe:7b:60:4b:12:48:17:39:
         ff:e7:23:80:5e:2f:03:3e:65:af:5a:df:4d:58:b1:e1:d8:78:
         9e:d5:66:17:ed:01:8b:b3:2e:b3:62:ee:7a:ae:5f:22:e8:63:
         28:df:b4:7f:20:c5:95:25:2f:bd:c0:06:eb:0f:e4:a2:d0:8d:
         6f:7f:44:e9:77:3b:a0:3e:b0:2d:61:f0:6c:32:d7:cc:80:0a:
         b8:ac:0a:92:fb:04:09:9f:6a:fc:1f:ab:b9:c5:e8:07:8c:35:
         19:35:d3:0c:86:29:68:64:cd:19:e2:07:e8:2f:76:27:3a:9e:
         f0:68:d0:ce:aa:8c:46:e7:46:be:83:d3:f9:05:28:59:fb:90:
         ab:9a:f6:94:ed:4b:2e:c9:c8:1d:fb:33:49:4e:15:d7:fe:dc:
         76:10:34:f6:43:22:84:29:c7:28:b7:7a:19:15:d4:d9:49:0c:
         fa:aa:cd:6a:85:3b:1d:92:ad:62:85:c4:2d:73:5c:15:8a:4f:
         39:fc:1a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 14:03:29 2025 by rpki-client