Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
File:                     2jIgJypGmu1lzCp_bZf8qZH37IE.mft (raw, json)
Hash identifier:          Fyc8iJcCMxI7oF4EGglFgp7Ko8lqvLYUNuUapCGFxug=
Subject key identifier:   0E:CA:5A:28:29:28:02:A5:DB:B5:CA:D8:FE:8E:AC:CC:DA:C8:08:D6
Authority key identifier: DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
Certificate issuer:       /CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Certificate serial:       019882B0FE2F7B3FFB6C087849A7733B709C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
Manifest number:          161D
Signing time:             Thu 07 Aug 2025 04:01:34 +0000
Manifest this update:     Thu 07 Aug 2025 04:01:34 +0000
Manifest next update:     Fri 08 Aug 2025 04:01:34 +0000
Files and hashes:         1: 2jIgJypGmu1lzCp_bZf8qZH37IE.crl (hash: mtz+931cjsGk5KS61jvArUWsPalplDRU6BrB/GZfvmI=)
                          2: G5AySBQmGTZguSR2UN46mLZeA6A.roa (hash: 6MYLur+lADg+zzLuGL4/PdmDjdeT2Db312IWeWciAtM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 04:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:b0:fe:2f:7b:3f:fb:6c:08:78:49:a7:73:3b:70:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
        Validity
            Not Before: Aug  7 04:01:34 2025 GMT
            Not After : Aug  8 04:01:34 2025 GMT
        Subject: CN=0eca5a28292802a5dbb5cad8fe8eacccdac808d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:96:3a:08:f5:cb:79:8b:56:85:05:01:57:3d:
                    a3:2a:45:a8:c0:bf:94:99:e5:38:aa:11:c4:53:dd:
                    dd:36:e2:b9:d3:a2:5b:23:d1:9d:77:6d:85:0e:fa:
                    a2:d4:4a:f8:de:b5:5e:dd:2c:78:98:f4:5f:53:c0:
                    e7:80:92:65:64:54:b0:ff:c9:5b:96:5f:26:8d:3f:
                    c4:89:ee:fe:38:af:54:10:7d:ae:e3:15:8d:5b:b7:
                    28:cb:d2:73:63:91:cf:d4:36:56:76:40:5d:b3:74:
                    4c:b8:bc:4b:08:b3:07:19:12:47:2d:cd:7d:be:a7:
                    51:29:93:82:f2:0c:9c:6a:ba:f6:b6:ea:24:1f:1c:
                    72:15:e8:8d:d7:03:ec:d3:6c:7d:33:b0:be:86:5a:
                    6d:60:93:f6:96:1e:f4:57:68:a7:a2:28:6c:fb:4b:
                    f1:f3:cd:4d:6f:2d:de:3e:72:6e:20:09:f2:66:da:
                    80:bb:f7:65:c2:23:b9:1a:d5:53:d4:b4:f3:2a:c9:
                    0f:a1:1b:86:38:1f:cb:25:57:2e:d0:ee:d5:27:cf:
                    bb:7d:45:1b:a4:ed:c5:bb:70:81:fd:54:cd:04:ae:
                    6b:d8:11:61:9b:64:41:f8:eb:1e:4e:8e:ff:a6:fe:
                    46:36:3f:e4:51:7d:31:a5:c6:87:83:ad:5d:d9:d6:
                    6c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CA:5A:28:29:28:02:A5:DB:B5:CA:D8:FE:8E:AC:CC:DA:C8:08:D6
            X509v3 Authority Key Identifier:
                keyid:DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:05:aa:e1:97:21:93:6a:22:61:8c:1d:3c:34:42:56:a3:0a:
         3c:39:ee:d8:ba:e7:9d:a7:51:9f:4a:20:a6:28:84:d5:54:3a:
         3b:c7:ee:e8:43:55:9e:9b:2b:ac:b8:7c:8e:93:45:69:0a:d2:
         fe:69:35:6b:fc:2c:79:a8:15:d0:f6:83:75:00:f8:58:65:75:
         54:7c:ca:0e:67:6b:ed:da:e9:da:cc:be:f2:2a:b0:bd:e5:63:
         e3:a6:2e:bd:b4:d3:b8:ac:aa:87:6a:70:30:89:be:84:ee:74:
         0c:69:cb:84:5d:69:a1:5e:6d:75:15:8b:b0:80:6d:e1:1c:96:
         47:24:4c:c3:10:52:63:19:f4:5b:39:18:70:f5:dc:96:40:5e:
         de:fe:6c:5d:48:07:94:35:87:b4:47:98:00:8e:32:f7:f1:da:
         f1:d4:ec:4d:af:7f:58:b0:37:e1:d0:b9:af:c5:5f:14:71:70:
         ae:1d:7f:2b:cf:75:f0:19:42:a2:11:d4:96:db:d1:db:a7:1e:
         51:bd:9e:66:8b:6c:20:e3:ac:7d:4d:99:ed:9d:23:b9:8a:2f:
         72:8e:89:e2:07:59:e3:27:e9:9f:63:1c:aa:94:78:e5:14:a6:
         9a:e0:62:dc:60:dc:e0:de:8b:be:2f:04:e7:77:30:c6:13:62:
         c9:22:52:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:10:33 2025 by rpki-client