Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
File:                     g2pzvtdapO-ld-2QrTVi4hlR0bI.mft (raw, json)
Hash identifier:          qvXiNfFaDLcP3lnmY8cfqbvOyYog+EOQaN+OTOTICo0=
Subject key identifier:   4A:BA:4B:27:32:B7:65:1D:1A:A1:24:DF:3B:44:78:B8:71:42:4E:53
Authority key identifier: 83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2
Certificate issuer:       /CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
Certificate serial:       01976515EF16F9AB6B3660E2DD3681CEEA3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
Manifest number:          1391
Signing time:             Thu 12 Jun 2025 17:00:25 +0000
Manifest this update:     Thu 12 Jun 2025 17:00:25 +0000
Manifest next update:     Fri 13 Jun 2025 17:00:25 +0000
Files and hashes:         1: g2pzvtdapO-ld-2QrTVi4hlR0bI.crl (hash: 7F88+MTRzuy5B9QTCJYvo63APXIGDBH5iq5QHYzBUOQ=)
                          2: pCExSDuPpylceZEh-3ghVJcWtXU.roa (hash: EmDT0awECjqFFQZyEcdl/Y2PrhZj4pSyXOCLhHqwv2c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:15:ef:16:f9:ab:6b:36:60:e2:dd:36:81:ce:ea:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
        Validity
            Not Before: Jun 12 17:00:25 2025 GMT
            Not After : Jun 13 17:00:25 2025 GMT
        Subject: CN=4aba4b2732b7651d1aa124df3b4478b871424e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4d:73:1e:27:dc:e2:6f:12:c1:51:60:cc:a7:
                    f9:1a:c1:a0:80:de:c7:05:e0:c8:6e:fb:0e:d7:30:
                    3d:d3:f0:12:21:ce:e7:83:73:ee:ee:39:e8:24:2f:
                    1b:6c:9d:92:d8:71:aa:11:9b:7f:2f:50:4f:b1:6c:
                    7f:08:ac:72:2b:bd:64:6e:cf:07:7e:ec:ed:61:da:
                    09:66:54:c4:eb:bf:01:fc:a5:82:7d:ee:61:1c:19:
                    b0:d7:43:af:dd:0d:59:16:dc:fc:8b:50:db:ed:93:
                    5b:35:d6:6f:42:0b:b4:cc:fc:e0:f8:16:8f:3c:cf:
                    c6:d8:d2:b9:bd:d7:a5:9d:7b:44:bb:f5:fc:60:47:
                    ad:8c:31:24:a6:93:10:98:72:b4:08:94:30:c9:69:
                    a7:5f:14:81:77:96:e0:19:10:a3:1a:10:29:67:1a:
                    70:1d:c7:b3:69:c9:49:b0:e7:b9:e6:bf:e1:c7:75:
                    1e:f5:53:71:04:4b:b0:98:d2:6e:96:9f:bd:e6:a6:
                    aa:b9:11:2f:e7:aa:be:4d:72:85:e2:95:c6:33:64:
                    77:b3:f6:ea:b6:78:7e:bc:81:13:4c:70:4c:b3:60:
                    c4:13:c5:b5:74:71:ef:9b:2b:84:92:91:c1:b0:5e:
                    ed:5b:bb:29:a7:80:91:a4:10:a8:78:72:92:26:5b:
                    a2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:BA:4B:27:32:B7:65:1D:1A:A1:24:DF:3B:44:78:B8:71:42:4E:53
            X509v3 Authority Key Identifier:
                keyid:83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:af:8b:fb:fa:ab:ce:4e:ba:e6:0c:ec:d0:6f:5f:30:9e:22:
         c6:ae:17:47:71:47:c3:5a:e4:70:64:60:1d:33:32:1b:17:f0:
         8a:db:d7:c8:cf:91:df:ca:2c:f2:36:cb:08:7d:de:48:5a:3e:
         91:83:c5:ae:5f:27:57:3a:ad:46:e2:8f:b3:b1:7a:69:bc:ec:
         09:b4:bc:a4:45:21:ed:57:7f:46:80:39:a5:38:58:e1:5b:11:
         64:40:18:c0:26:36:0a:d1:a7:c6:79:42:da:36:40:9f:c9:99:
         21:d2:18:46:f5:92:a9:1a:74:33:64:cc:87:95:40:61:5d:95:
         88:76:ac:7e:a7:c5:b3:a6:f1:0f:cd:6c:8e:4a:77:b3:3f:21:
         11:47:6f:db:71:57:6c:d2:03:97:5d:3a:04:b5:87:13:a0:a3:
         c7:99:84:d7:e2:21:cf:32:c0:0d:17:e5:df:6d:07:e1:7d:db:
         06:ea:69:f0:b8:13:5e:c7:1b:89:f8:52:f3:b9:11:eb:ca:64:
         c2:ad:e2:39:0a:65:bc:2d:05:f5:dc:ac:4e:9f:5f:66:75:65:
         6b:36:e1:eb:f5:af:4b:32:2d:95:52:c7:6d:c8:5f:dc:f0:01:
         94:65:c3:a9:1b:1f:e0:f0:ed:42:76:f7:ba:1b:14:f5:af:fa:
         3d:25:3d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 01:43:51 2025 by rpki-client