Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
File:                     g2pzvtdapO-ld-2QrTVi4hlR0bI.mft (raw, json)
Hash identifier:          pIBV64ijYYE0mztysuZm49rzMxZZbOa4xwd0IvS8W7k=
Subject key identifier:   BE:81:B4:F5:5A:33:53:C2:08:DB:35:CB:D3:A2:BA:C7:CA:69:56:91
Authority key identifier: 83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2
Certificate issuer:       /CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
Certificate serial:       0197597FE4E2C915DD99CAAAE897A0A95681
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
Manifest number:          138B
Signing time:             Tue 10 Jun 2025 11:00:43 +0000
Manifest this update:     Tue 10 Jun 2025 11:00:43 +0000
Manifest next update:     Wed 11 Jun 2025 11:00:43 +0000
Files and hashes:         1: g2pzvtdapO-ld-2QrTVi4hlR0bI.crl (hash: 4b2qm6O+gHpT8QWvsjWug2xmH1Dr3W+3U+d/KxvYBdg=)
                          2: pCExSDuPpylceZEh-3ghVJcWtXU.roa (hash: EmDT0awECjqFFQZyEcdl/Y2PrhZj4pSyXOCLhHqwv2c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:7f:e4:e2:c9:15:dd:99:ca:aa:e8:97:a0:a9:56:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
        Validity
            Not Before: Jun 10 11:00:43 2025 GMT
            Not After : Jun 11 11:00:43 2025 GMT
        Subject: CN=be81b4f55a3353c208db35cbd3a2bac7ca695691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c2:f3:f7:1f:95:5e:9f:20:17:8d:a9:73:23:
                    c4:59:f7:82:f3:f2:3a:2d:d0:da:19:79:c5:4d:8a:
                    5b:28:0c:6e:54:cf:94:c9:27:3e:e2:b4:4a:f8:67:
                    6a:eb:02:cb:fe:04:52:a8:ba:3f:02:1c:75:c9:71:
                    f8:ba:c7:57:ca:82:85:19:55:4b:c4:e1:42:cd:97:
                    11:c1:d5:d7:e8:89:05:eb:e6:92:17:e5:c7:6a:c2:
                    ac:a7:f6:c8:df:55:c5:4c:5e:2b:32:95:27:9b:90:
                    26:9c:98:e7:12:08:cf:66:e2:23:78:30:64:32:1a:
                    11:12:d0:fb:b3:43:25:48:f7:61:6e:48:fa:6a:49:
                    80:8b:d5:27:57:81:c2:65:50:d7:ca:d5:0e:91:9c:
                    b7:b5:f1:17:05:2e:2f:2b:05:93:12:61:df:6f:2f:
                    8d:77:56:72:22:15:8f:9e:44:79:b0:b7:2a:3a:cf:
                    25:e7:3c:90:23:43:3a:b6:b5:13:6e:73:8e:eb:9b:
                    49:ad:3b:87:55:39:e7:62:93:ff:4c:8e:43:41:48:
                    45:40:b0:bf:ed:65:24:17:b8:0c:74:bf:05:14:cc:
                    b0:3a:e4:44:51:60:d5:de:26:d9:9a:2b:89:9f:df:
                    47:22:0a:db:7c:5d:8f:01:78:26:68:b6:76:1d:b5:
                    2c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:81:B4:F5:5A:33:53:C2:08:DB:35:CB:D3:A2:BA:C7:CA:69:56:91
            X509v3 Authority Key Identifier:
                keyid:83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:81:c9:09:f7:e0:99:64:6d:a4:60:d7:23:34:d2:b8:cb:b6:
         13:d4:90:d6:23:3d:c2:3b:93:47:ee:87:28:cf:49:49:38:40:
         9f:69:b5:d1:50:ab:23:0f:d5:7d:31:8c:6f:c5:fa:1e:0f:2b:
         d3:41:2a:91:e9:60:87:ff:64:b8:22:92:9f:68:a9:70:c4:42:
         37:b5:5b:d4:bc:36:1b:bc:80:d2:69:8a:64:19:7f:93:d1:8b:
         51:cd:1b:55:ee:f4:e6:b8:83:3a:de:b6:5e:01:2b:00:cf:66:
         49:fc:cd:65:34:c5:a6:0b:f5:24:c2:1d:73:3f:ec:c5:1e:7c:
         69:32:d6:71:9c:4d:8a:ba:64:59:d0:13:2b:eb:43:88:15:09:
         5a:0b:3f:99:bd:be:79:65:0d:9e:8b:9d:d0:ae:37:07:9a:8d:
         30:5a:64:b6:be:bc:78:30:95:1e:8c:0d:f1:9a:c9:51:a7:83:
         3b:b0:ed:97:7f:f1:19:b4:c7:36:f4:b5:71:af:36:ab:91:20:
         12:89:aa:32:f8:b3:65:cc:fd:3f:9b:db:c5:f9:8c:8e:98:d0:
         0d:7b:6e:51:6a:98:df:5b:b1:a2:d1:3a:c1:2d:87:ee:da:6a:
         bb:05:e8:bb:04:cb:7e:9b:cb:51:a6:e4:25:15:3d:fb:8e:39:
         c4:cb:a8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 15:31:35 2025 by rpki-client