Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
File:                     2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft (raw, json)
Hash identifier:          +LSwspGwzEglyvXFbhGpnkuPLR00I3JShgvZi5PLrmI=
Subject key identifier:   FA:19:0D:8D:12:07:A7:9C:B6:22:8D:95:E6:77:52:50:E3:69:31:20
Authority key identifier: DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
Certificate issuer:       /CN=da980a45fe487366e386b6064c2c652519f9fc93
Certificate serial:       0197507C6E61452EC88E221EB7387936A395
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
Manifest number:          1580
Signing time:             Sun 08 Jun 2025 17:00:21 +0000
Manifest this update:     Sun 08 Jun 2025 17:00:21 +0000
Manifest next update:     Mon 09 Jun 2025 17:00:21 +0000
Files and hashes:         1: 2k5YbACJ4Q7zlHJcdzXXQdWQyLo.roa (hash: ejnRPYJcqos1VPRlPS0gL7ngl0unaEAz9tOL/KDHo48=)
                          2: 2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl (hash: /jIXwIlY8VROT7btselrmypJb7R6sly1lxlHaMqza+c=)
                          3: F-T6XFqFnI_sbUUjNxNcNd87BhY.roa (hash: 6o0pvXXHkL7jKBhk4FmzhB8YNuZ27KgrcAM6QK83Qb4=)
                          4: F1ShlRrx5ZPQmtQlj2ftFMW353w.roa (hash: Xetg03+rB7SCygrrXAn/7tOc08cqxoGNbraAHZ0gKtM=)
                          5: IPUd7GCIW2gsU9xakT1oNUwSIio.roa (hash: dGuEAfVSkLkoM8KnSMOWFIaomaZjWrbWxTVDngrHaFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:7c:6e:61:45:2e:c8:8e:22:1e:b7:38:79:36:a3:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da980a45fe487366e386b6064c2c652519f9fc93
        Validity
            Not Before: Jun  8 17:00:21 2025 GMT
            Not After : Jun  9 17:00:21 2025 GMT
        Subject: CN=fa190d8d1207a79cb6228d95e6775250e3693120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:55:c6:59:05:63:04:42:49:7f:19:c6:dd:43:
                    63:5f:d9:2c:cf:e0:92:f9:83:b7:bc:a5:32:c6:15:
                    f7:e1:3b:d1:1d:2f:51:38:75:ec:04:29:dd:b4:1d:
                    9c:1e:2a:85:e9:88:5e:72:ef:a4:4a:9d:12:2b:bd:
                    f1:3c:70:fd:7f:01:23:20:c1:32:27:7c:e9:2f:c5:
                    f7:29:17:76:fb:ae:39:4a:90:28:d4:c3:bb:09:03:
                    51:88:12:fa:a2:8e:40:ad:a4:09:57:95:90:34:fb:
                    35:f6:75:9e:25:aa:b4:2a:75:3d:ff:29:ea:66:60:
                    27:61:6f:8d:38:3f:f5:21:16:8d:87:e5:30:2b:2f:
                    66:ae:7e:86:2d:1a:68:8f:58:41:e1:c9:04:eb:5f:
                    a8:b1:d2:1c:58:53:56:b2:44:ea:ea:40:c8:96:07:
                    c3:42:af:b4:57:7c:49:e4:0a:05:52:c0:4a:91:1c:
                    d0:fb:58:a2:74:ba:b4:b2:be:f9:fd:5f:af:8b:43:
                    83:dd:91:d6:b8:4d:b0:a9:df:ca:d7:3e:63:3e:6b:
                    df:2e:e8:e4:bd:ba:d8:88:ef:19:54:7a:d8:fa:7f:
                    01:5e:25:77:9c:b3:84:12:a9:ee:e8:88:60:3b:bc:
                    94:cc:ee:ad:db:a5:71:a7:39:7a:ff:0a:eb:4a:d2:
                    90:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:19:0D:8D:12:07:A7:9C:B6:22:8D:95:E6:77:52:50:E3:69:31:20
            X509v3 Authority Key Identifier:
                keyid:DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ab:35:e0:56:2e:fa:d6:70:7c:f4:fe:3d:04:2f:9b:f7:03:
         c8:ee:c4:2a:05:40:42:ee:ac:a1:52:7a:8c:2d:f8:f5:f0:7f:
         a7:5b:a4:a9:44:59:f0:93:c2:7f:e3:ed:66:20:b7:16:16:a6:
         4c:0d:96:24:d2:ce:2f:99:e6:44:7b:b4:a4:9d:20:0d:93:b6:
         f9:e5:fe:96:ea:6c:2d:f3:9c:d5:9a:17:6b:40:23:41:16:e6:
         69:99:1f:a3:55:0d:38:f7:b8:d1:59:2b:5b:1e:c3:fd:0d:ed:
         bf:a9:b1:14:8b:34:30:51:94:7b:54:15:cb:d0:ab:a8:c6:65:
         a3:78:50:f9:98:e4:ef:97:3d:54:cf:89:2b:39:be:72:9f:7a:
         4d:4a:7c:c9:94:6f:85:00:ec:79:c8:12:86:4e:7b:a9:52:54:
         a4:ff:3c:b1:5b:80:15:c7:83:3b:74:4a:63:9d:c7:ab:3c:b1:
         79:6e:e5:13:16:11:ca:4c:59:2e:68:f1:fb:74:c9:d8:d2:9e:
         56:b6:b2:3a:dc:79:07:3f:02:22:b9:86:45:a3:2b:be:98:69:
         eb:13:2b:db:97:93:15:9e:d4:12:22:91:1a:1f:39:e5:1f:30:
         05:50:65:7f:6f:7f:2f:0a:65:bc:01:1c:29:ed:fe:9f:10:cb:
         80:7d:90:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQfG5hRS7IjiIetzh5NqOVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhOTgwYTQ1ZmU0ODczNjZlMzg2YjYwNjRjMmM2NTI1MTlm
OWZjOTMwHhcNMjUwNjA4MTcwMDIxWhcNMjUwNjA5MTcwMDIxWjAzMTEwLwYDVQQD
EyhmYTE5MGQ4ZDEyMDdhNzljYjYyMjhkOTVlNjc3NTI1MGUzNjkzMTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFXGWQVjBEJJfxnG3UNjX9ksz+CS
+YO3vKUyxhX34TvRHS9ROHXsBCndtB2cHiqF6Yhecu+kSp0SK73xPHD9fwEjIMEy
J3zpL8X3KRd2+645SpAo1MO7CQNRiBL6oo5AraQJV5WQNPs19nWeJaq0KnU9/ynq
ZmAnYW+NOD/1IRaNh+UwKy9mrn6GLRpoj1hB4ckE61+osdIcWFNWskTq6kDIlgfD
Qq+0V3xJ5AoFUsBKkRzQ+1iidLq0sr75/V+vi0OD3ZHWuE2wqd/K1z5jPmvfLujk
vbrYiO8ZVHrY+n8BXiV3nLOEEqnu6IhgO7yUzO6t26Vxpzl6/wrrStKQjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoZDY0SB6ectiKNleZ3UlDjaTEgMB8GA1UdIwQY
MBaAFNqYCkX+SHNm44a2BkwsZSUZ+fyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnBnS1JmNUljMmJqaHJZR1RDeGxKUm41X0pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80MTBlMzktYjhhNi00NmNhLWFjZGMt
M2YxMmFmZjI3NGRhLzEvMnBnS1JmNUljMmJqaHJZR1RDeGxKUm41X0pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC80MTBlMzktYjhhNi00NmNhLWFjZGMtM2YxMmFmZjI3NGRh
LzEvMnBnS1JmNUljMmJqaHJZR1RDeGxKUm41X0pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmqs14FYu
+tZwfPT+PQQvm/cDyO7EKgVAQu6soVJ6jC349fB/p1ukqURZ8JPCf+PtZiC3Fham
TA2WJNLOL5nmRHu0pJ0gDZO2+eX+lupsLfOc1ZoXa0AjQRbmaZkfo1UNOPe40Vkr
Wx7D/Q3tv6mxFIs0MFGUe1QVy9CrqMZlo3hQ+Zjk75c9VM+JKzm+cp96TUp8yZRv
hQDsecgShk57qVJUpP88sVuAFceDO3RKY53HqzyxeW7lExYRykxZLmjx+3TJ2NKe
VrayOtx5Bz8CIrmGRaMrvphp6xMr25eTFZ7UEiKRGh855R8wBVBlf29/LwplvAEc
Ke3+nxDLgH2Q9w==
-----END CERTIFICATE-----
Generated at Sun Jun 8 19:55:25 2025 by rpki-client