Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
File:                     g2pzvtdapO-ld-2QrTVi4hlR0bI.mft (raw, json)
Hash identifier:          iBBSYD2N5aKx0BRfbfisWUgww9Y/klwzqwX8bx/BxPc=
Subject key identifier:   87:7B:EE:E1:86:3C:7B:3D:C1:EB:A1:4B:20:01:35:D4:5D:F8:08:C9
Authority key identifier: 83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2
Certificate issuer:       /CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
Certificate serial:       01975B6E4702AD4B17648459963DEA491D38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
Manifest number:          138C
Signing time:             Tue 10 Jun 2025 20:00:43 +0000
Manifest this update:     Tue 10 Jun 2025 20:00:43 +0000
Manifest next update:     Wed 11 Jun 2025 20:00:43 +0000
Files and hashes:         1: g2pzvtdapO-ld-2QrTVi4hlR0bI.crl (hash: WlpG81eAIrjr7IcbT+ejJUE4iAfjim90nd1XH7bXWqQ=)
                          2: pCExSDuPpylceZEh-3ghVJcWtXU.roa (hash: EmDT0awECjqFFQZyEcdl/Y2PrhZj4pSyXOCLhHqwv2c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 14:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5b:6e:47:02:ad:4b:17:64:84:59:96:3d:ea:49:1d:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
        Validity
            Not Before: Jun 10 20:00:43 2025 GMT
            Not After : Jun 11 20:00:43 2025 GMT
        Subject: CN=877beee1863c7b3dc1eba14b200135d45df808c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0b:6f:83:40:94:02:11:e1:3f:56:ed:9e:ac:
                    92:e8:cf:bb:33:67:83:08:dd:06:8b:10:7e:ac:07:
                    27:fc:7d:3f:3f:e6:44:4b:03:5a:07:32:4d:4d:20:
                    2c:d1:fa:20:08:86:a9:6f:7d:63:c5:33:e5:3b:89:
                    9f:f5:ac:10:86:2a:5b:36:15:3f:05:f6:00:8d:4e:
                    3d:83:d2:aa:b9:be:f5:39:a4:a1:19:40:a4:d3:7d:
                    a2:3f:a7:5c:ad:ad:85:13:b2:dc:8c:9e:c9:64:6d:
                    de:68:32:e7:4e:c4:c5:14:84:15:d2:6b:31:e7:36:
                    bb:a7:cd:36:d4:ac:6c:89:90:a2:7e:1c:9a:20:c9:
                    81:d3:9f:64:a3:d5:4a:67:a4:12:5b:37:55:91:b3:
                    0c:ba:f0:a7:5c:ac:91:03:bf:f4:8a:f7:95:47:af:
                    60:11:fa:db:a7:9b:f5:43:3c:c1:9e:05:b8:78:ca:
                    32:6d:d1:a6:23:ac:df:72:7e:7d:40:06:dc:b3:d0:
                    58:a7:20:51:a4:6b:84:44:a0:68:87:bd:3a:19:b1:
                    6c:8c:75:7d:c9:75:0d:fa:76:4a:db:22:21:c5:66:
                    9d:a9:31:d8:9a:1f:84:ec:b2:d6:f5:b8:c8:7d:7a:
                    2b:79:05:40:37:d7:4a:ca:ba:ea:ff:9d:e1:6d:bb:
                    e6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7B:EE:E1:86:3C:7B:3D:C1:EB:A1:4B:20:01:35:D4:5D:F8:08:C9
            X509v3 Authority Key Identifier:
                keyid:83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f7:cb:be:54:48:dd:5a:f4:2e:c4:7a:3a:d3:62:4f:23:87:e9:
         14:35:79:81:ec:a0:91:d3:f9:ec:fd:94:e3:9f:ec:c0:09:9e:
         1c:59:3e:88:bd:a4:a4:77:6b:4e:cd:66:68:e4:48:a8:a1:95:
         f6:be:f1:69:7d:18:8a:bd:ed:1f:15:15:00:c3:74:e4:6c:e8:
         02:2b:70:9c:f7:06:87:d7:8f:4a:f5:97:82:a4:49:e7:09:5e:
         85:4f:57:fb:d7:ea:10:ca:5c:a4:3a:3e:b2:0f:06:02:ed:c2:
         b2:8c:f1:20:3e:e9:79:01:18:24:a6:b3:36:20:5f:9b:6e:67:
         33:36:a2:12:86:02:6c:3f:ee:75:39:2d:2b:fe:fa:df:13:a1:
         76:4c:e4:91:c5:db:5c:a2:52:bf:e5:4b:72:d5:cc:1e:9f:e2:
         e1:be:fd:3e:a0:b7:64:2d:1e:d8:c9:7d:07:00:1a:db:c0:c4:
         6b:b2:b0:14:35:fe:fa:27:a2:ff:c9:85:b5:ef:b2:02:d8:cb:
         71:53:1a:7f:fc:79:e4:9f:69:3d:5d:92:7e:19:76:a1:f3:6e:
         a9:24:3d:5c:2f:88:dc:26:c8:a5:34:a3:1c:c0:9e:e0:b1:17:
         70:fe:84:03:67:ca:05:b4:19:87:ae:5a:b5:4b:2c:e4:17:50:
         70:ea:d3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 22:45:13 2025 by rpki-client