Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
File:                     V2cFtVe4IwhralMjJL-7o2mVyxw.mft (raw, json)
Hash identifier:          IsGm6AaQtR3MhvjTuptbtMYZH29N5TKDzRvwawR5AoQ=
Subject key identifier:   AB:40:D0:37:62:DC:EE:C0:6B:EB:3D:68:AB:CA:AA:CA:0C:CB:6C:CE
Authority key identifier: 57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C
Certificate issuer:       /CN=576705b557b823086b6a532324bfbba36995cb1c
Certificate serial:       0197B8C5BE5741FA247341C4E8F375D8C6A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
Manifest number:          02E2
Signing time:             Sat 28 Jun 2025 23:00:56 +0000
Manifest this update:     Sat 28 Jun 2025 23:00:56 +0000
Manifest next update:     Sun 29 Jun 2025 23:00:56 +0000
Files and hashes:         1: JGRvPNVs3QazRb-3Yj9Lmu3EFrc.roa (hash: zEfElC4xy0I65Idl73lF7MYcW3sf1hiO0d8+XQ24z5w=)
                          2: V2cFtVe4IwhralMjJL-7o2mVyxw.crl (hash: xQAhqEiMFkCAKAh6t6qrH3+/6eYDNw3hAQ0v4Hfr/C8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:c5:be:57:41:fa:24:73:41:c4:e8:f3:75:d8:c6:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576705b557b823086b6a532324bfbba36995cb1c
        Validity
            Not Before: Jun 28 23:00:56 2025 GMT
            Not After : Jun 29 23:00:56 2025 GMT
        Subject: CN=ab40d03762dceec06beb3d68abcaaaca0ccb6cce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:28:a7:fc:f7:0d:de:41:5c:bb:64:eb:42:9b:
                    a1:f7:40:0f:08:c2:38:0a:b2:34:4b:5b:09:6d:7d:
                    40:e3:9f:2b:67:82:49:c4:3c:2f:b2:e2:b4:05:df:
                    30:50:0b:ba:47:c5:0b:b5:08:8d:97:03:ce:5d:12:
                    d6:b1:23:27:13:fa:35:a6:bc:05:2e:7e:a9:e2:7e:
                    dd:87:e4:71:da:70:27:3b:74:7a:80:10:11:18:a6:
                    41:24:42:55:50:a7:c3:f8:84:61:a2:c2:2c:1c:e5:
                    1c:45:d2:ad:65:3e:e4:5c:7b:a6:96:d0:bb:eb:c9:
                    a1:05:bd:f8:82:56:c0:0b:1e:d7:62:4d:f8:0a:f8:
                    28:59:e7:9e:f8:fe:9d:23:2e:11:d2:79:44:bd:3c:
                    a2:93:e1:60:5e:8b:95:52:1c:75:08:74:39:ec:c2:
                    51:77:80:67:eb:ca:8c:a8:0b:31:d8:30:20:34:74:
                    74:e0:29:a3:c8:80:5c:b1:df:a2:7e:49:ff:d1:17:
                    8c:e4:1a:97:6c:5c:1e:31:06:73:27:d2:20:80:c9:
                    dd:02:07:9b:55:83:62:38:86:31:d7:19:96:61:b4:
                    17:32:e1:a6:b7:f9:25:e6:17:7a:32:78:a8:c7:c0:
                    29:81:31:54:36:f7:f5:a9:15:ec:8f:63:99:63:b8:
                    6b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:40:D0:37:62:DC:EE:C0:6B:EB:3D:68:AB:CA:AA:CA:0C:CB:6C:CE
            X509v3 Authority Key Identifier:
                keyid:57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:c6:f6:50:a7:41:a5:e0:07:1e:de:74:15:6e:e3:d7:a3:0b:
         af:09:02:25:53:81:57:a8:2a:45:d2:c8:cf:02:41:e1:1e:32:
         f8:6b:17:1b:a0:58:2c:93:86:ce:75:be:1b:b8:87:fd:55:c1:
         c2:80:08:5e:c0:d9:d6:91:ed:b8:14:98:1c:22:ed:ff:2f:be:
         ea:c7:22:68:0f:62:57:11:81:8a:c5:31:d4:cc:c3:91:af:94:
         88:4f:b1:51:fc:2d:bc:6e:ec:c9:9a:48:8a:70:25:56:31:c8:
         df:c6:88:54:2a:37:ce:b0:30:af:1a:88:c4:b6:3b:10:66:61:
         ec:b9:95:32:81:cc:48:37:7d:86:04:16:a4:c1:a3:1b:16:47:
         71:7f:ab:7c:8f:b6:14:02:11:92:a2:ce:90:8f:65:14:c9:68:
         90:86:d1:99:5a:33:7e:4f:50:dc:ac:24:05:33:06:d9:b0:8f:
         b5:df:30:2a:2a:11:40:a7:c3:75:44:3d:2d:4b:e7:1a:f4:4c:
         6b:1e:a0:86:a6:47:6b:1c:58:96:a3:33:99:ea:29:e4:30:69:
         00:71:f3:6c:d4:11:77:d9:e9:af:37:29:5f:dd:d9:94:a9:84:
         41:d0:d1:78:1b:65:55:a7:35:6f:7a:e0:69:84:f9:fc:73:0c:
         02:6a:28:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:47:18 2025 by rpki-client