Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft
File:                     2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft (raw, json)
Hash identifier:          h49qEN571UzMPYfFPbWLkj+TwxP3SjAH6syzImoWOp8=
Subject key identifier:   0F:47:1D:10:AD:87:B8:5F:CB:BA:DD:C4:BB:93:38:F6:B6:12:29:69
Authority key identifier: D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6
Certificate issuer:       /CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6
Certificate serial:       0198D884E6239B06F79864FCDA590321F882
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft
Manifest number:          1537
Signing time:             Sat 23 Aug 2025 20:00:44 +0000
Manifest this update:     Sat 23 Aug 2025 20:00:44 +0000
Manifest next update:     Sun 24 Aug 2025 20:00:44 +0000
Files and hashes:         1: 2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl (hash: S7MWhYi/jdaPNkrP5la1iDfIrrspe7yyDLEFnLqKQ3E=)
                          2: B5m6j_K3O894W_R_t6V6YidAg_M.roa (hash: bXrv4zwrH5nVqybqsixx97jvkGY3LFCIFwVY3pH6Bk8=)
                          3: gpM2Niv38-bAPpYWDWu_AiD_7fU.roa (hash: U97/Bujuoe+UqbMI2I87geGUh9XKKMGTDgPKSh0HsUc=)
                          4: iWkENaumrn_VqAXGYeFWSy8pOdc.roa (hash: BifAs92ML2XP6L2w5bLWRZw5RDndqu7o+E6QeoQC5zA=)
                          5: v_tCnLJbfmXfnX8r8TkiKrJdo6U.roa (hash: 2qeSRWLeCZqoEkwlBGulwS0BehW+dyHuoHpo1B95cR8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:84:e6:23:9b:06:f7:98:64:fc:da:59:03:21:f8:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6
        Validity
            Not Before: Aug 23 20:00:44 2025 GMT
            Not After : Aug 24 20:00:44 2025 GMT
        Subject: CN=0f471d10ad87b85fcbbaddc4bb9338f6b6122969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5a:be:b7:f0:2c:b2:d1:90:c0:90:b5:91:76:
                    93:bd:16:68:5d:16:f5:2f:ef:01:35:ef:42:ac:37:
                    e5:2f:32:37:5e:24:50:03:42:fe:f6:68:6e:69:b4:
                    e2:d2:12:61:fa:3d:3f:07:a7:ce:67:dd:b6:f2:02:
                    b8:6d:f2:06:7d:75:6d:3f:fc:a7:f6:9a:e9:05:54:
                    d8:9b:47:ab:9b:88:98:f2:f8:8d:28:5c:29:93:e6:
                    94:e1:ef:d2:1d:d6:d2:5e:46:2a:7c:a0:aa:f8:5a:
                    ba:57:77:35:12:c7:4a:d3:fb:6f:0c:fd:1f:af:87:
                    b5:ec:29:0f:61:0b:5a:18:c9:a8:a0:7b:73:30:40:
                    b9:63:3e:48:54:76:28:18:5b:2a:02:25:fe:de:64:
                    72:63:d4:05:52:b5:d5:a4:67:e2:c8:31:da:f1:26:
                    e9:ca:8d:90:16:67:13:78:7d:7e:6c:29:4f:8e:05:
                    0c:ba:47:65:0a:8b:66:5e:ed:8e:f4:fa:7c:90:9c:
                    00:17:77:e1:79:4f:dc:af:63:ae:50:07:6e:3d:ca:
                    ad:42:80:af:9a:2e:d3:9f:6e:52:57:5c:6b:e1:e8:
                    58:7a:15:c1:92:4c:82:08:04:4d:a8:a6:cf:47:09:
                    19:26:35:5c:15:af:1d:d7:36:e9:2e:13:1f:39:b8:
                    77:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:47:1D:10:AD:87:B8:5F:CB:BA:DD:C4:BB:93:38:F6:B6:12:29:69
            X509v3 Authority Key Identifier:
                keyid:D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:a2:9b:6a:e5:d7:f5:3a:a2:12:63:da:b9:cc:8c:f4:16:23:
         f0:3b:64:50:2d:ae:95:f4:42:80:eb:d9:c1:94:e0:83:dd:59:
         62:ed:f6:89:18:64:d2:31:4b:34:b6:d8:62:28:7f:f6:f3:0a:
         ed:a0:a1:69:d1:dc:be:4d:be:ee:c2:59:71:09:c5:e6:f0:d8:
         7e:26:79:ed:d7:95:a7:ea:c6:7e:18:c5:26:22:cb:bb:93:de:
         65:d0:30:dc:fe:0b:c6:d3:e7:bd:73:2f:28:3e:81:39:f1:94:
         15:db:ea:4f:5d:48:55:ef:67:c2:fe:52:ff:4b:f4:e7:6c:a0:
         29:31:70:99:cc:3c:ad:a3:f3:6d:a7:bf:65:19:4d:61:87:87:
         1b:51:20:e7:9b:ab:4d:04:2b:bf:4a:f0:ac:04:a0:58:85:8f:
         ce:b9:80:37:55:09:7f:3c:72:9f:fc:a0:22:cd:3f:31:f0:f6:
         e8:3d:e0:02:f3:78:37:f0:28:0f:3d:87:17:8e:fa:e6:3a:9b:
         3c:7a:dd:de:79:6e:0b:76:03:7b:75:d8:5f:9b:e5:c4:a4:99:
         72:a7:8e:91:76:ef:93:51:e6:b6:19:a6:45:59:73:e7:d3:5f:
         81:18:61:cb:9e:a7:df:a0:90:a1:a5:90:92:bc:99:30:98:b1:
         06:31:2c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:07:52 2025 by rpki-client