Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
File:                     2rU_myHRPgeOPoRNZF7qhYDxzOE.mft (raw, json)
Hash identifier:          HmykaaXbpo0bj22lIlGSjaRNzHUCJOXFUUBG01UJ7KQ=
Subject key identifier:   06:7E:39:2A:D7:90:43:D4:3C:57:37:11:91:92:E5:A8:A0:24:DB:AE
Authority key identifier: DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1
Certificate issuer:       /CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
Certificate serial:       0198D583D71BDC79E0EC9307840268F3BEEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 06:00:43 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:43 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:43 +0000
Files and hashes:         1: 2rU_myHRPgeOPoRNZF7qhYDxzOE.crl (hash: 4YMcqxhq/ZXoMO2piMGBB+TVXGfafSkQGO76SaUnaFI=)
                          2: gsCygs_SprevwXUwS8ZnM-EYuKU.roa (hash: l1XeBh5SOrL7OGe08dB0VGh4WiJBpNY8AdAQ14ebdBA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:d7:1b:dc:79:e0:ec:93:07:84:02:68:f3:be:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
        Validity
            Not Before: Aug 23 06:00:43 2025 GMT
            Not After : Aug 24 06:00:43 2025 GMT
        Subject: CN=067e392ad79043d43c5737119192e5a8a024dbae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:66:4f:e0:9d:75:c4:82:4c:8c:b4:d4:a6:c7:
                    89:dd:de:09:c2:48:f5:02:36:fb:e5:e3:28:9c:13:
                    c5:d2:3a:32:09:27:0f:33:40:eb:95:ca:d2:f0:65:
                    d8:e6:8a:91:be:42:7b:56:03:16:43:0a:74:d7:d1:
                    50:d7:21:00:ab:f1:12:ae:97:49:b1:79:54:5b:31:
                    54:8b:dd:ef:21:69:66:7a:01:e2:b6:01:21:7a:cb:
                    f9:2c:a3:9a:1a:54:f9:2b:ed:44:43:b1:f1:cd:ae:
                    93:ed:df:5d:e3:d0:4a:33:49:f6:5a:5c:42:e1:72:
                    bd:10:66:83:d6:c2:a6:c9:49:cb:62:fc:3b:82:f3:
                    10:74:8e:92:b9:87:43:00:f8:14:0d:6d:a4:c4:47:
                    76:ea:d9:3d:a8:49:01:03:37:d3:b8:4d:dd:ed:8b:
                    43:bc:ad:ed:2a:d5:b7:e0:5a:2f:73:55:89:01:1f:
                    ca:c1:4e:90:8d:2d:95:5a:97:96:8c:29:22:e4:6b:
                    5a:bc:ad:44:1d:8a:16:b7:93:1e:bf:4c:83:0b:a8:
                    82:eb:53:be:d8:d6:d6:c1:07:5d:21:6a:62:af:22:
                    55:ec:45:17:96:87:b4:cb:33:09:ce:09:41:91:cb:
                    a6:99:e1:47:93:be:3c:ca:e7:7e:97:14:72:67:b3:
                    1b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7E:39:2A:D7:90:43:D4:3C:57:37:11:91:92:E5:A8:A0:24:DB:AE
            X509v3 Authority Key Identifier:
                keyid:DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:45:32:71:b4:02:25:8d:bb:bc:3d:e9:88:36:1f:70:ee:51:
         b4:84:06:d8:0f:78:72:2e:71:31:f3:1d:74:a2:d9:fa:7f:85:
         e8:df:71:dc:c2:13:05:ba:3b:f4:67:ee:27:3b:98:30:1d:8b:
         05:0c:5c:c3:e2:e2:3a:0d:10:ea:7e:86:f2:e9:88:2b:e2:af:
         18:ab:d0:67:77:c5:97:93:07:48:f8:dc:c6:57:f5:3b:f5:4d:
         ad:ad:39:ad:cb:0f:2a:16:48:40:7d:1c:e5:32:4f:c9:09:1c:
         da:ee:80:10:cb:04:aa:98:1a:fa:0f:b2:eb:8a:1a:ea:eb:66:
         30:9b:d0:1a:4b:61:21:4a:f0:f6:34:e1:c4:46:10:b4:6e:7a:
         77:f0:d1:dc:cc:31:73:06:2d:57:39:de:fc:1a:ef:9f:62:67:
         5d:6b:49:0e:9f:76:cd:5c:95:14:b1:db:5d:dc:99:3e:a9:a1:
         5f:01:7f:15:d1:3a:b8:2e:72:32:83:f8:f5:6e:25:f2:a6:6e:
         fc:bd:18:61:22:27:08:94:fb:73:4e:3e:55:89:8f:67:1d:18:
         f7:eb:87:ec:71:58:9f:cf:1b:ae:32:51:23:d3:67:fd:48:03:
         20:ae:5c:5c:83:18:38:7b:64:4d:cb:b2:4e:89:b9:93:75:06:
         e3:79:2c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:53:26 2025 by rpki-client