Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft
File:                     2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft (raw, json)
Hash identifier:          JEzCHkkQxf2OnW0gDhLD6+cTCOKmJpUCmpjiTP6/b90=
Subject key identifier:   2A:41:B8:DA:B0:7F:E4:47:8F:D6:FF:50:46:CF:2F:6B:A4:0E:6B:97
Authority key identifier: D9:E4:83:F8:B0:27:B2:0A:70:41:4A:56:D3:FD:C7:89:48:96:AD:DC
Certificate issuer:       /CN=d9e483f8b027b20a70414a56d3fdc7894896addc
Certificate serial:       0199FEEB9CE1B421CDEC553F96C1242838B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft
Manifest number:          0DAE
Signing time:             Mon 20 Oct 2025 00:01:17 +0000
Manifest this update:     Mon 20 Oct 2025 00:01:17 +0000
Manifest next update:     Tue 21 Oct 2025 00:01:17 +0000
Files and hashes:         1: 2eSD-LAnsgpwQUpW0_3HiUiWrdw.crl (hash: oJ8LEPe4QeMyet8wawjExn3HVjRKprtL/0PukuSnxc8=)
                          2: m7p9-Nc8bA5aZ6G8FeSb_3gZ3mE.roa (hash: 6BjeEl8S/sVhlCuS797tfS67KPopqn+SkFRfjTD0/E8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:eb:9c:e1:b4:21:cd:ec:55:3f:96:c1:24:28:38:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9e483f8b027b20a70414a56d3fdc7894896addc
        Validity
            Not Before: Oct 20 00:01:17 2025 GMT
            Not After : Oct 21 00:01:17 2025 GMT
        Subject: CN=2a41b8dab07fe4478fd6ff5046cf2f6ba40e6b97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8a:4b:3c:97:23:22:f7:f5:57:4a:d8:72:ac:
                    8a:b9:3b:cd:4a:89:30:28:26:50:ed:3f:72:47:78:
                    e5:77:c8:d4:4e:3e:8b:63:25:a1:34:ad:b4:6d:b4:
                    3a:48:dc:b2:79:46:18:d5:4c:66:cb:31:ee:dd:7e:
                    ee:3a:23:78:8b:11:de:49:5e:7e:c3:fc:7a:3d:b7:
                    3f:11:dc:ef:23:24:41:60:a4:e6:4d:3b:47:0a:d1:
                    69:97:9d:7e:2e:7d:3a:f3:a0:7e:9e:78:7d:7a:ea:
                    5f:5b:f2:1c:67:5c:76:31:8f:00:a3:ce:a5:78:71:
                    b7:36:da:8f:3e:10:3b:6b:59:34:bf:bd:0e:d2:bf:
                    00:cc:6c:75:2a:30:26:66:26:49:f2:07:12:3a:40:
                    7e:e7:1b:59:07:4d:fe:9d:90:3c:63:22:24:c6:c8:
                    cb:9a:cf:2e:06:86:bf:21:99:f1:fe:19:23:fe:40:
                    92:94:43:74:1e:25:59:be:c8:3a:a5:7a:bb:fb:5f:
                    46:55:cf:2c:98:35:bb:f8:92:b8:91:ab:fb:2e:45:
                    eb:03:a0:43:0a:fd:a7:0c:4f:a0:c9:79:f2:7f:e4:
                    57:9e:16:3c:64:b7:31:62:3f:75:87:32:a0:ba:29:
                    c2:e9:4a:69:cb:39:cb:23:6f:9e:30:a0:06:cf:97:
                    ce:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:41:B8:DA:B0:7F:E4:47:8F:D6:FF:50:46:CF:2F:6B:A4:0E:6B:97
            X509v3 Authority Key Identifier:
                keyid:D9:E4:83:F8:B0:27:B2:0A:70:41:4A:56:D3:FD:C7:89:48:96:AD:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:ae:3f:e0:36:e0:a5:ff:ae:0f:b5:e1:7d:de:1a:26:55:5b:
         9e:27:02:6d:c4:71:f3:2b:38:50:8a:fa:e2:5a:c4:5b:60:21:
         84:85:12:f5:8d:99:99:40:78:85:9e:16:9a:93:5b:a0:7d:5d:
         4a:92:b7:19:45:43:56:ce:64:d7:77:b8:75:a3:5f:b9:0e:34:
         fd:60:89:4f:fc:77:1e:ba:e3:3f:49:26:78:fe:ef:5e:ca:0c:
         8d:c4:46:64:1e:ae:04:70:fd:44:79:97:12:08:69:80:5a:7d:
         80:40:41:ee:95:18:9c:fa:4f:03:81:01:90:b8:e7:ad:b5:30:
         e5:f8:06:06:98:4b:f3:34:95:9e:7c:14:a3:7b:e2:ff:ed:1c:
         45:21:cd:2b:27:a6:bd:da:e8:f6:ab:7f:50:4d:69:a7:ad:52:
         24:95:e1:d0:e1:8c:30:f2:85:2c:b6:fe:86:c1:1d:a6:d6:6b:
         f4:09:26:6d:f0:93:2f:05:fa:9c:cc:37:f9:96:c1:98:3a:02:
         42:21:1b:60:ce:22:92:61:ab:de:41:5c:68:cb:3a:52:8c:ab:
         07:a1:c8:1d:c9:9d:e9:6a:a5:a8:3a:f0:f6:76:ff:48:a4:84:
         29:b0:fd:1a:bc:28:a4:2d:74:09:2b:eb:da:5b:d6:dd:b6:f4:
         62:98:5e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:00:03 2025 by rpki-client