Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
File:                     2amIkW1RQG-aJp8woC0AhrV_TVo.mft (raw, json)
Hash identifier:          Z61EvxZiIbyV9Q8/+d4FuHfVeG/poHOi287+2jkLSJ8=
Subject key identifier:   EF:E4:5E:63:FE:9D:54:55:0E:8A:74:5D:BC:F6:15:B3:00:B7:44:22
Authority key identifier: D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A
Certificate issuer:       /CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
Certificate serial:       0198D6600F12ED58D8B5A4CD20650C713C61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
Manifest number:          1349
Signing time:             Sat 23 Aug 2025 10:01:16 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:16 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:16 +0000
Files and hashes:         1: 2amIkW1RQG-aJp8woC0AhrV_TVo.crl (hash: Huab6m2xfbj+SzoMqOQfvCGVlAY1zGwQnvZoM4JpkUI=)
                          2: XPLXJ92Us5J-qBm5E6NHAQ2543s.roa (hash: kmqfE6MOxnhqMb5JKyuuIwjp6MzPudhOpk4vKGjjd3A=)
                          3: eDdWpFT8mYYDchLMDIlwWEtOor8.roa (hash: 9232400o2UHwz3/J/neEUWtVx/abMVxJjSjV/TU/3qg=)
                          4: jwmg81-ORqOZPp9Rh2D6s4HVTYQ.roa (hash: Uluu1ohil2uH9NagTZ/BKMHEBskA/iElgGUpNpib8O4=)
                          5: qDSvupNvi7XpnOr0ygHu8NcBhCQ.roa (hash: OxOTgS6oyFab2hs22rHLXwwiyKXLOcnTFclx4LxK7Lo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:0f:12:ed:58:d8:b5:a4:cd:20:65:0c:71:3c:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
        Validity
            Not Before: Aug 23 10:01:16 2025 GMT
            Not After : Aug 24 10:01:16 2025 GMT
        Subject: CN=efe45e63fe9d54550e8a745dbcf615b300b74422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:07:12:7e:bb:6e:dc:04:db:7f:0b:c5:e8:ad:
                    82:24:ee:a8:98:a7:14:ba:3c:81:a8:a1:90:eb:6c:
                    a8:e6:7d:79:72:69:0c:59:5d:5f:d3:42:9c:f4:9b:
                    96:a6:07:33:8a:10:40:eb:38:f6:81:27:48:8c:ae:
                    44:fe:f0:72:14:05:40:e8:88:f6:60:37:ea:3f:e6:
                    5c:2b:3a:21:20:57:0c:18:20:81:cb:9b:f5:07:b0:
                    ad:42:46:39:2e:0d:53:38:28:55:98:e5:3f:90:e9:
                    e0:81:b1:5b:38:03:be:19:29:0d:aa:04:0e:df:1b:
                    8a:ce:1b:b6:ae:57:81:10:9a:32:ef:cc:87:12:d9:
                    c0:df:3d:88:bb:51:0e:1a:8c:a8:5d:6b:ab:9e:54:
                    8f:61:83:5a:33:e3:b6:f1:29:d7:58:5b:16:e6:98:
                    c8:a2:4c:fe:b9:f9:a9:de:ae:93:1b:36:52:04:0a:
                    5d:00:88:73:f3:d9:e7:f4:37:75:fe:d8:7f:47:61:
                    03:ff:bb:1f:09:f8:26:31:9b:dc:02:df:24:40:e9:
                    fc:6c:c2:93:a3:67:3a:b0:3f:93:46:8d:6a:81:47:
                    00:2e:5a:f9:ae:ea:58:67:23:a3:fa:51:99:8a:8a:
                    14:fa:2f:16:aa:0c:f8:c6:11:f7:3a:fe:63:ff:c1:
                    9f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E4:5E:63:FE:9D:54:55:0E:8A:74:5D:BC:F6:15:B3:00:B7:44:22
            X509v3 Authority Key Identifier:
                keyid:D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:a9:da:8c:43:42:58:58:9d:7d:34:88:e6:7a:64:64:30:10:
         c9:0d:db:b6:69:69:03:e4:30:a1:5b:61:50:a0:46:76:97:ec:
         6b:e7:76:61:e6:85:76:d1:98:bc:2f:44:96:77:07:3b:0f:ca:
         53:6f:5d:a6:97:fd:88:86:fc:b6:4d:b4:a2:6b:2a:01:aa:2b:
         35:18:23:86:32:fa:a3:1b:c4:f4:5d:6e:50:41:79:4f:af:d8:
         89:c1:f9:fd:5a:b8:2a:cb:29:b6:0e:55:43:bf:0c:39:9b:6c:
         b5:e5:b7:8f:1f:b0:a3:fe:3c:81:a1:52:9c:94:a5:db:bf:b0:
         ef:c6:b9:b6:b3:06:3d:73:9c:9b:73:2e:0f:4d:46:5b:e5:5f:
         31:2d:57:7c:bb:79:4f:4e:2d:e1:4b:2c:2a:80:ed:be:12:df:
         f8:af:3b:92:81:75:be:a8:f6:65:b5:32:71:a0:ae:46:67:4e:
         1d:22:40:9c:25:3d:ce:26:b6:c7:f3:75:5d:5a:ac:0c:5f:00:
         fb:56:74:f5:a7:12:0c:40:9d:54:c8:4a:56:41:79:b3:ec:6f:
         d7:d8:65:46:d5:1d:4b:85:a7:d8:d2:17:3e:c6:4e:1b:9c:4b:
         7b:ad:38:eb:31:2c:de:c2:d2:5b:df:c1:f3:02:7c:8f:78:0e:
         85:48:ca:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:11:59 2025 by rpki-client