Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
File:                     2DcT_XtM36bLoBaofq-LMciRvrA.mft (raw, json)
Hash identifier:          jhsVjFF6+qTguiCviTPBxYGnps0AKLPPR26G3qQwd7k=
Subject key identifier:   29:15:94:E8:0B:09:7F:8A:12:DA:0F:29:53:14:89:47:34:A0:F0:36
Authority key identifier: D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
Certificate issuer:       /CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Certificate serial:       01974B8DAE49618F3A7B374E367751CB097C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
Manifest number:          0900
Signing time:             Sat 07 Jun 2025 18:01:05 +0000
Manifest this update:     Sat 07 Jun 2025 18:01:05 +0000
Manifest next update:     Sun 08 Jun 2025 18:01:05 +0000
Files and hashes:         1: 2DcT_XtM36bLoBaofq-LMciRvrA.crl (hash: O1MMLJ/sqz785R+qbMsM7ky0Gdl0HleqnDSIXy47FMU=)
                          2: CFSprmWbf9FMJJyxu80fINqawlI.roa (hash: 1mNVVtAB7atteoVY3WoXrG9InaTzBLk01eL0ItpajvM=)
                          3: DY1K6i5vQY8rznvxHZCh5DHCv5w.roa (hash: EKe1zlcQfQBpBTnSLz03ZLWlWqnPT4BruNhWaalp/48=)
                          4: juolSSzRfeDJo0Kp0hwKugPzAgA.roa (hash: G+kdJGG0lMFfjKrEiTBfGY6hBNUgOQA5o/mITsB+pLs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:8d:ae:49:61:8f:3a:7b:37:4e:36:77:51:cb:09:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
        Validity
            Not Before: Jun  7 18:01:05 2025 GMT
            Not After : Jun  8 18:01:05 2025 GMT
        Subject: CN=291594e80b097f8a12da0f295314894734a0f036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d4:98:94:7b:15:4e:8e:d7:27:b2:b2:44:3e:
                    4a:ec:e4:0d:54:ac:35:e4:06:24:4a:9b:f9:7d:09:
                    4a:2d:bc:d8:46:4c:39:82:7d:fd:87:18:7c:24:dd:
                    74:a7:a4:58:b0:07:f8:de:13:31:26:50:de:1d:2b:
                    79:39:af:d5:15:ea:c8:23:bb:da:46:cc:1b:1a:07:
                    7f:fb:5c:05:63:35:79:b0:51:6a:63:47:e0:3b:6b:
                    30:9c:46:58:3c:83:a1:3c:3d:d8:12:fc:ba:25:ed:
                    21:6c:7d:0d:60:eb:f7:cb:bd:0f:42:78:1b:66:f8:
                    56:b6:be:d7:ad:b3:e6:f6:9b:7c:4f:67:16:f3:c9:
                    47:8b:19:7e:8c:16:29:7d:48:3d:cd:f8:79:57:64:
                    67:d5:ca:a5:cc:e8:7d:25:51:19:0c:b5:29:86:13:
                    8c:64:d2:cc:7f:a7:c7:18:af:61:ce:70:88:f2:66:
                    a2:63:0c:9d:71:7f:52:be:68:48:75:97:af:81:42:
                    9c:4d:69:8e:f2:a5:a4:ad:94:15:3a:c6:83:62:70:
                    37:29:de:01:a3:a6:13:2b:1a:6e:28:fe:51:97:a9:
                    08:24:72:9d:62:ec:69:85:9e:83:83:93:f9:f9:6e:
                    44:88:ab:51:f4:f0:d4:80:b5:b4:05:18:63:69:40:
                    cf:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:15:94:E8:0B:09:7F:8A:12:DA:0F:29:53:14:89:47:34:A0:F0:36
            X509v3 Authority Key Identifier:
                keyid:D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:a8:cf:d5:2e:cf:c5:d5:78:37:1b:8c:dc:81:d4:2b:38:72:
         41:c2:6b:d9:1c:38:96:37:ef:93:08:14:3b:02:59:35:86:3e:
         cc:3c:1a:80:a3:b4:37:9c:47:16:54:5b:69:20:7c:ef:f1:34:
         79:ac:da:80:9c:9f:c8:76:e8:9c:95:bf:7c:5a:4d:8d:96:51:
         cf:a8:c2:ff:1b:af:6e:f5:42:5b:a4:ed:31:35:d5:1f:2f:ea:
         cb:b3:79:ea:bc:8c:68:e7:4a:1c:a2:c5:d1:50:d2:82:47:3a:
         5f:e3:e6:f9:cb:8a:4f:27:4a:2f:b4:01:9b:23:0f:17:63:c1:
         ce:4e:7e:ac:e2:c9:64:24:f0:92:0b:65:2f:d7:e7:e8:bf:2a:
         d1:ff:5e:a5:cf:30:8c:13:9b:b0:df:7a:43:e2:e1:a3:f9:b2:
         11:f7:1c:f2:64:7e:19:bb:1d:13:7a:33:5d:fa:70:0d:5d:11:
         30:12:00:d9:66:66:87:21:c0:bf:f4:ad:06:5a:5d:f4:e6:c4:
         3a:91:67:cf:14:ef:8d:7c:78:ca:86:47:ef:ea:7f:d0:1a:23:
         2b:9a:ee:fc:a5:7e:b9:7d:56:41:4e:20:d0:32:3b:28:0e:51:
         7f:ac:3b:54:75:b7:2a:46:9d:d2:e9:6d:b5:6f:84:2a:cc:83:
         8e:7c:f3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:10:20 2025 by rpki-client