Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
File:                     2Bx5YkM8L-C_YrjDiDkplflCsUw.mft (raw, json)
Hash identifier:          dMzsU0RbZTjL6j1AC/ZD+chlFIV99FYnk+c5/rIRWo4=
Subject key identifier:   44:3D:31:84:8C:9F:F0:3F:B7:19:0F:64:B9:23:CA:20:E5:E0:0F:DB
Authority key identifier: D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
Certificate issuer:       /CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Certificate serial:       0198D404DD00C413F3045788DE190187A0BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
Manifest number:          0D8F
Signing time:             Fri 22 Aug 2025 23:02:25 +0000
Manifest this update:     Fri 22 Aug 2025 23:02:25 +0000
Manifest next update:     Sat 23 Aug 2025 23:02:25 +0000
Files and hashes:         1: 2Bx5YkM8L-C_YrjDiDkplflCsUw.crl (hash: 2VFYursim2muEzA1HjwBwsLIlVLNH/WCD1j7fkFhHAc=)
                          2: U7DbhF1x3gp_yB_uvm-ZnLT56oc.roa (hash: BgWurSq7ETy/ZjmZQYeAZmnnu0X5jrDz9abGJjfRlMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Aug 2025 23:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:04:dd:00:c4:13:f3:04:57:88:de:19:01:87:a0:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d81c7962433c2fe0bf62b8c388392995f942b14c
        Validity
            Not Before: Aug 22 23:02:25 2025 GMT
            Not After : Aug 23 23:02:25 2025 GMT
        Subject: CN=443d31848c9ff03fb7190f64b923ca20e5e00fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:03:62:97:d0:ad:a7:b4:61:1f:e0:bb:06:40:
                    23:33:b6:f1:d2:57:a0:32:cd:86:b6:72:2a:c9:47:
                    39:24:08:13:81:93:5a:fc:41:6e:e2:b6:5e:ee:3d:
                    33:8b:eb:15:03:52:ee:18:21:91:c5:88:a2:f5:9c:
                    91:f0:1b:5e:0f:4a:11:5f:f4:67:65:7c:5d:81:1f:
                    00:47:e4:a5:41:d6:3b:43:b2:13:67:14:20:5e:e4:
                    f4:24:5b:f8:9f:1d:aa:81:dc:8e:7e:27:16:c1:5a:
                    52:c1:50:30:2a:60:92:5f:d6:21:96:94:49:9b:ae:
                    ff:ef:40:26:d5:26:df:67:ba:10:43:9b:dc:5a:74:
                    66:af:08:67:db:b2:41:54:57:78:1c:77:c5:f2:90:
                    a8:5e:4a:2b:6d:06:62:6b:cc:fe:63:52:70:4f:3c:
                    f8:91:1c:be:28:c7:9e:c2:53:b0:be:3b:51:5e:b7:
                    70:13:ed:b5:f2:59:9f:51:49:2f:c5:c4:ed:97:75:
                    dc:84:95:28:4f:a8:11:7e:4d:a4:2c:20:68:9d:ea:
                    cb:d2:54:21:01:c3:71:51:a1:6a:17:09:d1:b7:3f:
                    a3:8c:58:1c:79:e9:62:e1:8f:fa:24:6c:3c:0b:f5:
                    72:3d:63:a5:ab:0b:ac:05:07:c8:42:59:bb:4d:d6:
                    8d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:3D:31:84:8C:9F:F0:3F:B7:19:0F:64:B9:23:CA:20:E5:E0:0F:DB
            X509v3 Authority Key Identifier:
                keyid:D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:c5:c2:d1:f4:df:05:8f:21:ff:f6:32:5b:44:3e:05:ca:2f:
         78:17:7d:a4:3a:39:dc:fb:c0:66:e1:4e:7f:b9:8a:5c:18:74:
         b8:53:46:f0:fe:f2:15:ef:bf:1c:d5:84:39:be:ad:6c:51:c3:
         c6:86:d8:4a:cd:be:3d:11:51:51:7b:d6:54:3c:d2:e7:90:36:
         31:10:62:2e:fb:f5:79:8b:b3:95:d9:48:0c:0c:fa:a6:bf:40:
         d2:3a:b2:ef:ce:0b:ef:45:49:41:cb:00:92:d2:04:5d:22:09:
         dd:5e:64:10:90:af:1a:3a:dd:70:72:d9:9d:0d:18:93:00:bd:
         1c:8e:91:6b:f2:26:31:04:12:d7:7d:56:7a:dd:c9:94:40:29:
         bc:46:7e:89:23:51:b9:72:45:f8:f2:28:b7:13:dc:27:60:44:
         9b:5d:f0:52:bc:0b:61:c0:c8:e1:e7:4c:f1:ac:6c:3a:0d:24:
         57:00:24:df:64:5b:6d:88:3b:1e:3e:b6:e1:3b:b1:60:48:be:
         de:f2:df:30:a8:f0:eb:5e:d2:bd:42:93:45:aa:99:0d:e0:76:
         55:76:d0:ba:27:c7:2e:35:1d:d5:0b:a0:1d:4e:6f:68:1d:f3:
         0b:cc:7c:0f:64:52:22:f6:32:f3:67:b6:a9:b7:e3:f7:49:46:
         e7:8f:81:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:30 2025 by rpki-client