Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft
File:                     2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft (raw, json)
Hash identifier:          /E2jpZVuuh/QKK3Z3M60XWbzmW5VP7GyLGqdvmsqPiM=
Subject key identifier:   41:21:D9:DA:21:F9:80:A9:31:7B:BF:20:B0:A3:8A:6E:8A:92:52:7D
Authority key identifier: D9:E4:83:F8:B0:27:B2:0A:70:41:4A:56:D3:FD:C7:89:48:96:AD:DC
Certificate issuer:       /CN=d9e483f8b027b20a70414a56d3fdc7894896addc
Certificate serial:       0198D583CDA1BCAA6974A79A12485CE1764B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft
Manifest number:          0D14
Signing time:             Sat 23 Aug 2025 06:00:41 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:41 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:41 +0000
Files and hashes:         1: 2eSD-LAnsgpwQUpW0_3HiUiWrdw.crl (hash: Nf/os92GPAvrMmeuzsnLNooaWtVIsV3SdEorZMI6+W8=)
                          2: m7p9-Nc8bA5aZ6G8FeSb_3gZ3mE.roa (hash: 6BjeEl8S/sVhlCuS797tfS67KPopqn+SkFRfjTD0/E8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:cd:a1:bc:aa:69:74:a7:9a:12:48:5c:e1:76:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9e483f8b027b20a70414a56d3fdc7894896addc
        Validity
            Not Before: Aug 23 06:00:41 2025 GMT
            Not After : Aug 24 06:00:41 2025 GMT
        Subject: CN=4121d9da21f980a9317bbf20b0a38a6e8a92527d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b8:2a:d4:c7:32:53:22:70:e7:4c:df:28:79:
                    d4:a9:35:66:24:b5:9c:c9:13:88:70:9e:4d:26:12:
                    f2:e7:97:ad:3c:93:ea:dd:5a:17:d1:d9:f8:92:0e:
                    9c:e5:a2:d8:ff:6d:21:2d:91:71:8f:de:86:78:cd:
                    d2:1b:96:21:52:93:ff:14:a8:fc:cc:2f:70:cb:83:
                    b3:8f:8c:55:77:93:d2:70:97:ca:44:57:3d:82:5c:
                    cd:ba:f5:fc:a8:f4:47:2a:ec:ff:fc:2e:e1:75:66:
                    a7:04:6f:6d:01:0e:87:cb:2e:43:de:41:4d:22:4b:
                    a6:67:fd:33:37:64:29:22:b4:59:ec:44:e5:13:82:
                    6c:06:0a:98:7a:c2:02:8c:26:ae:44:2a:ad:74:40:
                    10:2b:60:ff:2d:e1:7e:4b:7f:0d:d8:7f:be:f0:9c:
                    42:19:82:c6:c4:da:c3:1b:4b:d1:d7:98:b5:de:53:
                    96:e2:8b:eb:f8:3e:bb:8e:31:e6:2a:43:c9:5b:4d:
                    e9:5b:04:d0:7a:06:19:f6:40:3b:9a:45:ea:84:8a:
                    df:b5:e8:98:82:5c:1f:4d:56:78:e3:85:92:9b:c0:
                    28:c6:b4:77:c5:8a:00:a3:ed:91:86:28:bd:63:f9:
                    97:4d:75:c1:f6:0c:8f:c4:37:0b:8d:43:8a:f9:9f:
                    93:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:21:D9:DA:21:F9:80:A9:31:7B:BF:20:B0:A3:8A:6E:8A:92:52:7D
            X509v3 Authority Key Identifier:
                keyid:D9:E4:83:F8:B0:27:B2:0A:70:41:4A:56:D3:FD:C7:89:48:96:AD:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:c7:35:04:37:82:c8:e5:57:9b:50:66:81:7f:28:62:f8:a7:
         84:ea:17:f2:d2:d2:82:4a:59:26:7f:de:08:be:4b:06:5c:f9:
         0c:71:f3:95:17:3a:b6:93:52:72:80:32:fa:f1:e8:99:62:71:
         db:b3:74:33:55:6b:0e:ca:92:2f:d7:f0:f4:77:43:91:07:a1:
         f1:cc:e1:b6:c0:40:32:58:2d:47:54:79:fa:fc:03:90:14:3b:
         d3:00:e2:84:a7:61:b8:a5:e5:8d:b3:9b:01:c0:35:19:be:f1:
         61:6f:73:a2:80:12:e0:bd:b8:cc:75:9e:36:84:7c:bf:b8:ad:
         9b:b1:84:e8:19:d9:15:b7:dc:14:05:04:d9:4e:5f:0a:a5:c9:
         87:a2:bd:ef:b0:c8:f0:1b:3b:bf:85:13:cf:07:37:7f:e9:1a:
         15:6f:e8:0a:aa:db:f4:44:30:82:3d:3e:1b:11:1e:7f:ee:88:
         1e:f5:90:33:8c:92:88:ac:9e:bc:52:19:66:ff:0c:81:b5:27:
         82:b9:f3:b1:6b:3b:1e:5b:f1:c3:4a:03:20:d1:39:02:72:22:
         c4:fc:f6:96:5e:ea:14:af:c7:25:d3:e9:3a:ff:d5:ce:a3:0f:
         41:ed:fe:f9:b0:87:d2:0b:16:94:b5:1d:4a:97:32:65:f3:13:
         f7:79:c6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:00:36 2025 by rpki-client