Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
File:                     2dYxVsGDbxbDtDDv-7cqxpky6ps.mft (raw, json)
Hash identifier:          xgMi5MmF1+e1+psYJrMOMGeWCsTvjnYQlNs3YcBoAWs=
Subject key identifier:   12:5C:17:89:60:02:A9:5F:1E:1B:15:83:DE:DE:AE:5B:6E:82:98:77
Authority key identifier: D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
Certificate issuer:       /CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Certificate serial:       0198D4723BCF8000E8CA119693DAC6F75BFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
Manifest number:          12C4
Signing time:             Sat 23 Aug 2025 01:01:52 +0000
Manifest this update:     Sat 23 Aug 2025 01:01:52 +0000
Manifest next update:     Sun 24 Aug 2025 01:01:52 +0000
Files and hashes:         1: 2dYxVsGDbxbDtDDv-7cqxpky6ps.crl (hash: zf4HEpT2yUWi7gp11gXEuKHlQ3A0/hyjdpBNoLpKDPA=)
                          2: Jfj9dSZw93m0LgWLC-5cHZtQPbI.roa (hash: oiCigciFJOGI1kCvszmmuaaLh0TPamcLgyxjc9J3FC4=)
                          3: M_Z-VhDZc2uLCtQfe10yHlwcSGg.roa (hash: AB/qLdUMcV196Xzj3vZ4mE4S8cay+jmGliBEUDalnEc=)
                          4: f_1g2Z_O5AiL3yW6mcyUEsXnVQ8.roa (hash: d0LuTF/iwiSUpGBh2NLV29ONLEQ7pXLVwvq/UHuDiNA=)
                          5: m7iDzlCGf343P9LUMQ7CzCNMpq8.roa (hash: 25V4vL1hxRuT+EiKGjaMOxdCAH/Rao4IMyItMWn6Kn4=)
                          6: wuWM0Bqfn2DOTXAQfUUvKBidXpo.roa (hash: m6fPdbSddi0hJ1qwurB1jCC8tnof8GXCRJUIPf5vVWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:3b:cf:80:00:e8:ca:11:96:93:da:c6:f7:5b:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
        Validity
            Not Before: Aug 23 01:01:52 2025 GMT
            Not After : Aug 24 01:01:52 2025 GMT
        Subject: CN=125c17896002a95f1e1b1583dedeae5b6e829877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:04:e5:30:52:b6:61:95:ba:ac:af:e8:3a:fd:
                    35:87:ae:5c:6d:ff:ad:72:37:dc:f9:d9:ba:f4:fd:
                    d1:40:b9:bc:6a:b5:53:b9:62:18:de:12:54:bf:38:
                    7e:87:c7:50:ed:a2:5c:72:1a:4f:a8:94:7b:46:46:
                    a4:f1:08:f9:82:d4:56:58:6a:5f:57:7e:47:c3:54:
                    b7:55:be:5f:ed:24:0e:dc:59:3d:81:8a:2b:2a:32:
                    9f:cd:29:17:8d:4c:18:79:4b:d7:63:34:39:ba:14:
                    76:73:6b:ef:87:16:52:c2:8e:cf:29:1f:93:43:f5:
                    a3:38:e0:07:87:b3:26:69:a8:2d:85:f3:d9:41:a9:
                    e9:f5:79:bb:d4:af:c9:7e:a0:99:ec:75:df:79:cc:
                    b4:0c:4b:a0:c4:b8:33:64:14:07:94:8a:62:33:2f:
                    97:ba:18:d5:8d:b8:74:0a:16:e4:0d:9a:40:d3:bf:
                    61:71:ad:41:ad:e0:bc:c1:94:72:4b:4f:7f:00:af:
                    a3:c7:39:f2:4a:48:dd:96:80:5c:61:49:3a:3c:0c:
                    be:36:61:60:34:c4:fe:24:da:2f:a3:d9:cb:43:80:
                    89:d2:90:c2:a3:84:8b:1e:2b:d7:ef:80:31:2e:8d:
                    eb:17:92:9a:12:1e:c4:92:fb:35:d9:d5:1b:de:12:
                    36:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5C:17:89:60:02:A9:5F:1E:1B:15:83:DE:DE:AE:5B:6E:82:98:77
            X509v3 Authority Key Identifier:
                keyid:D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:8e:a6:28:35:1d:cd:6b:0d:dd:34:71:12:59:aa:58:77:e0:
         d3:bc:1e:6f:53:29:90:80:3e:5f:e3:65:a6:f8:cf:fb:9f:df:
         6c:88:21:02:1f:3d:70:ec:b1:53:04:e0:88:44:af:e6:d6:3b:
         d3:cf:83:7b:5e:6a:c2:64:9e:a5:1c:47:39:7a:01:bd:c3:a9:
         ad:de:9e:e1:dd:d6:87:49:62:1a:43:ab:14:2a:39:f9:33:70:
         25:a3:cc:aa:86:b3:14:34:c7:bc:07:f9:9a:3b:db:93:05:ff:
         23:22:6a:50:dc:ae:d2:3b:bc:f4:fe:ae:33:ef:4f:ba:63:5c:
         68:25:8d:84:2b:79:a3:dc:fe:c4:5f:67:87:30:e2:15:68:26:
         79:89:25:b9:93:18:ff:d9:0d:81:f7:56:7b:2f:88:38:5c:36:
         0e:09:1d:cc:16:84:89:81:4e:d4:e4:21:f8:b8:fd:97:91:a8:
         9d:20:d3:6f:bd:97:48:c4:56:cb:a5:4c:72:13:f0:eb:5a:95:
         ca:71:8e:67:dc:78:55:0b:44:93:d3:13:5c:23:31:c6:46:74:
         0a:f4:00:02:1b:91:b1:80:d1:87:b0:ea:8d:9d:b4:f4:10:ea:
         2c:c0:3d:57:20:ae:87:97:0f:78:39:36:0e:f2:c7:ce:ea:ee:
         f9:f9:bd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:55 2025 by rpki-client