Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
File:                     2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft (raw, json)
Hash identifier:          zPtEQkc4lUy1NtMfWFP+yLJ3J8hL/+1OcsUkvCMx9cU=
Subject key identifier:   08:29:5D:D6:0B:6B:77:D4:C1:B8:3A:93:47:30:01:47:F2:2D:19:14
Authority key identifier: DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
Certificate issuer:       /CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Certificate serial:       0198D54E7B50E67F8BB6C60A752EECB34E0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
Manifest number:          164D
Signing time:             Sat 23 Aug 2025 05:02:26 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:26 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:26 +0000
Files and hashes:         1: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl (hash: e+oJGtLyg4AF+Pc6gFh9qlYgRjNhed8ouztV7GG8rl0=)
                          2: 7zgJLwVmV842Ywy3l4oAYDOGp4w.roa (hash: AYbt1RSDmpRQAXV9FrFAgJxWoMbfvxnjrtRy1sQLkRw=)
                          3: g5fk8wweb2K2LN5x1BH4qQmKXhY.roa (hash: I2R60nkld9ZmTY6WR9H1fRR8Kr2Ki4lgol3HlXeFguU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:7b:50:e6:7f:8b:b6:c6:0a:75:2e:ec:b3:4e:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
        Validity
            Not Before: Aug 23 05:02:26 2025 GMT
            Not After : Aug 24 05:02:26 2025 GMT
        Subject: CN=08295dd60b6b77d4c1b83a9347300147f22d1914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b2:1c:3b:54:ac:ab:d3:88:45:a8:04:e3:a7:
                    98:8d:c4:f4:57:db:3a:d7:b7:99:fc:12:8e:6a:31:
                    59:ec:64:19:c4:cf:3c:f8:6c:fb:91:45:25:de:e1:
                    d2:c8:9d:75:ac:83:0c:30:7e:7c:af:f9:fb:8c:76:
                    de:73:f3:4c:05:51:b8:bf:af:73:3d:1b:8b:eb:e6:
                    fd:9e:a0:dc:2c:bd:ed:bd:9f:25:0a:17:b3:75:35:
                    2a:df:88:1c:9e:61:12:fa:5d:58:aa:58:84:d5:3d:
                    fc:fa:1f:b9:45:a4:7c:9f:5f:4a:2e:10:7e:2d:fe:
                    a5:26:4c:dc:b5:6b:ca:73:42:f3:20:79:66:26:28:
                    6b:a8:95:c6:00:0e:59:de:73:c9:17:e4:de:a6:1f:
                    d0:3c:52:76:ac:11:bb:f0:bd:88:b1:a6:c5:20:89:
                    43:d0:2e:9b:8f:66:ca:3b:d5:54:b5:49:e7:e4:3f:
                    9c:3b:69:7c:dc:c7:87:46:ba:f1:f2:29:a5:6a:cc:
                    23:ab:40:d1:88:94:37:ca:88:65:4c:24:32:53:35:
                    2d:56:b7:2b:a3:74:78:35:99:85:46:bb:b1:67:1a:
                    20:24:a4:a1:33:a8:46:5a:ce:63:9f:93:0a:52:07:
                    53:53:a6:75:4d:a4:e9:9a:50:c6:53:dc:c6:a8:d6:
                    de:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:29:5D:D6:0B:6B:77:D4:C1:B8:3A:93:47:30:01:47:F2:2D:19:14
            X509v3 Authority Key Identifier:
                keyid:DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:8a:af:13:a8:d7:2a:31:17:5a:fe:c6:b3:a4:bf:16:73:90:
         ea:47:81:fc:53:79:30:1f:2d:db:1a:be:ea:ba:58:de:bd:91:
         2b:13:97:7e:38:d7:1b:1d:4d:ba:33:69:d1:ef:3c:8a:69:c7:
         e0:cf:a1:40:79:d8:de:04:63:bc:f9:19:ed:45:67:cd:69:c5:
         3a:da:39:93:67:f2:66:ac:1e:28:fe:23:e4:d6:9e:4a:94:11:
         cd:93:28:a4:c2:3d:8f:0e:7a:79:96:3b:bc:4a:ba:ef:c7:ff:
         7a:ba:2a:a5:04:22:76:1c:f8:d5:5c:dc:86:ca:80:32:e5:4b:
         24:2c:37:eb:76:48:f2:ef:6a:31:e6:5d:7c:ac:62:01:57:62:
         42:87:d8:cd:55:bb:95:7c:c3:56:0c:8a:7f:7d:b1:00:1a:f2:
         67:52:cf:94:63:14:94:61:ca:d5:f1:8e:3b:78:cb:1f:44:c7:
         35:c1:f7:30:0e:00:92:94:9e:7e:b2:70:57:fc:a0:31:08:79:
         1f:ea:a8:18:40:2f:2a:ff:67:89:85:b0:d1:e8:db:6c:cb:91:
         1a:fc:d8:93:1a:b8:5a:d6:94:93:5b:d7:42:36:c0:e0:48:2c:
         b8:4c:75:e8:85:26:8c:38:2b:1f:f5:ce:1f:7c:ff:1c:e3:da:
         35:7b:cc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:24 2025 by rpki-client