Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
File:                     2NYGQYZJDYzqI0f_ejqCSS0feXc.mft (raw, json)
Hash identifier:          oO7IlAp6kpOBfAFNZ1+K9mZHS5C1rYcSxDxEeDPW6N0=
Subject key identifier:   7B:D9:58:32:13:18:59:85:E5:0F:62:6A:80:04:34:7B:66:AF:9F:20
Authority key identifier: D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77
Certificate issuer:       /CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
Certificate serial:       0198729898D9E37D949626E2D9B82715A399
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
Manifest number:          1617
Signing time:             Mon 04 Aug 2025 01:00:59 +0000
Manifest this update:     Mon 04 Aug 2025 01:00:59 +0000
Manifest next update:     Tue 05 Aug 2025 01:00:59 +0000
Files and hashes:         1: 2NYGQYZJDYzqI0f_ejqCSS0feXc.crl (hash: muVJhi7M0ok2YeCgscOqav8dHJR4XazXxoDewl2ENGY=)
                          2: fRvh8sX1Hi5S8M4nM9SL76qC4pw.roa (hash: BU70IeuzZkqToqE9mDUdKtq0A+ixKO/u5mFIegNEZGk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:98:98:d9:e3:7d:94:96:26:e2:d9:b8:27:15:a3:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
        Validity
            Not Before: Aug  4 01:00:59 2025 GMT
            Not After : Aug  5 01:00:59 2025 GMT
        Subject: CN=7bd9583213185985e50f626a8004347b66af9f20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:26:63:79:bd:41:36:81:0d:54:a1:85:70:b9:
                    63:27:3a:79:83:68:e0:7d:07:05:66:94:ee:29:0a:
                    e5:9f:93:04:71:3f:e6:d1:e5:13:30:1a:f0:56:67:
                    06:18:ec:1e:15:85:b5:26:df:05:b2:d3:5a:66:3d:
                    95:53:9a:db:42:18:1e:37:01:be:0b:28:89:b9:17:
                    d6:9d:2a:e5:31:ba:26:d2:81:66:d0:f6:6b:08:c5:
                    1d:08:2f:00:73:a9:82:12:86:28:1c:da:7d:7e:53:
                    5e:e0:2d:8c:6a:26:ca:f1:b3:22:e8:02:9d:5a:a0:
                    8b:10:b7:65:c9:19:c3:3b:91:8d:ce:58:63:bc:27:
                    79:22:0e:14:76:24:05:0a:04:29:7d:4e:30:70:68:
                    51:f9:51:b8:be:95:9f:6f:7d:0d:8f:18:17:7b:68:
                    8a:cb:b4:ca:62:65:75:38:02:2b:98:4a:07:b6:89:
                    36:2c:37:b6:25:1a:61:47:93:04:e9:b9:d6:e3:22:
                    a8:b8:fd:c3:73:82:9d:97:fe:76:0e:bf:f9:6d:da:
                    fb:88:3c:28:e6:46:54:b6:5f:bb:fb:65:db:2b:d7:
                    47:3d:b9:fe:0c:b2:08:b8:45:7c:45:57:3a:2d:c3:
                    13:78:fb:f1:8e:7e:94:b5:78:ef:7c:3d:f5:1e:b5:
                    67:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D9:58:32:13:18:59:85:E5:0F:62:6A:80:04:34:7B:66:AF:9F:20
            X509v3 Authority Key Identifier:
                keyid:D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:3c:2e:b3:31:c6:a2:2b:c5:d5:fa:71:34:e6:2c:33:a8:a4:
         69:d4:20:dd:2a:2f:86:d3:5b:60:30:c5:b0:17:02:34:bc:fb:
         e6:44:39:46:dc:1a:02:0e:84:19:35:f8:69:16:2f:06:82:f3:
         90:b7:14:b8:45:9b:bf:84:e2:20:55:67:dc:e0:ed:8e:31:ad:
         7c:94:e9:23:43:d9:11:30:b4:f5:71:5e:fc:4b:8c:c8:d3:65:
         cf:a4:61:05:28:51:c0:63:8d:77:87:65:9f:1c:01:c2:f7:ef:
         72:50:be:65:36:9d:a9:97:da:0f:52:24:ad:6f:c5:34:70:79:
         46:49:cb:21:a6:a0:24:d7:56:23:bb:b4:c1:5a:62:65:34:be:
         69:3f:d6:34:db:a0:f9:30:a1:c8:ce:07:09:47:df:29:94:6a:
         8d:d6:37:ac:89:57:85:97:31:0c:07:77:15:25:dc:aa:ef:94:
         99:03:1b:62:7b:2d:45:c3:17:6f:0f:c1:04:03:1a:6b:5a:50:
         b0:6f:57:49:0a:9b:74:44:56:d8:00:6b:7b:45:26:5d:4b:b6:
         08:69:5c:51:d2:ac:0f:79:37:a9:86:4a:c3:ef:78:fe:56:ad:
         b9:19:86:d2:ad:e5:54:96:87:0d:60:ca:51:11:77:9c:2b:00:
         3e:15:08:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:33 2025 by rpki-client