Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
File:                     T2qURK2qUjxXaOn2vhQGUYOsIKg.mft (raw, json)
Hash identifier:          aB305b/Bm35/CVUEySgnyLs4/Z+z1UqDd/cMTR587IY=
Subject key identifier:   C8:32:37:09:F3:1C:83:C2:82:97:C4:84:75:90:93:60:D5:C6:AA:7D
Authority key identifier: 4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8
Certificate issuer:       /CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
Certificate serial:       01989223C31051690A8479EC79664BC2F722
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
Manifest number:          1626
Signing time:             Sun 10 Aug 2025 04:01:13 +0000
Manifest this update:     Sun 10 Aug 2025 04:01:13 +0000
Manifest next update:     Mon 11 Aug 2025 04:01:13 +0000
Files and hashes:         1: T2qURK2qUjxXaOn2vhQGUYOsIKg.crl (hash: 0VB7DkWXdH87jpCNW0La/Rg385MLLYVDAFbYS9sRXVU=)
                          2: kfsN1HfyfK-NQ9iZIGxx8I0iebc.roa (hash: 471clsXqk9Nk68jCHR5a7ma3NzbA1DO/nClDnuoSJLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 04:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:23:c3:10:51:69:0a:84:79:ec:79:66:4b:c2:f7:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
        Validity
            Not Before: Aug 10 04:01:13 2025 GMT
            Not After : Aug 11 04:01:13 2025 GMT
        Subject: CN=c8323709f31c83c28297c48475909360d5c6aa7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c4:e5:62:24:a6:3e:fa:9b:27:06:f8:a6:01:
                    52:04:84:f7:57:98:fc:32:4b:04:00:1f:58:2a:1b:
                    1e:5b:d6:9c:15:17:f7:0b:7d:51:e9:c7:42:c2:92:
                    42:0e:b1:91:74:c1:4f:b8:7a:b5:a0:21:14:07:1c:
                    0e:be:be:ad:65:e9:48:95:cb:db:a7:f2:50:43:6e:
                    ea:97:65:1b:dd:c1:58:b5:fc:5b:98:55:f3:4d:05:
                    55:7c:2d:a7:19:9f:47:2a:74:cb:35:6b:11:94:29:
                    4c:86:18:c2:8b:2f:de:35:9e:c2:16:8f:c7:06:73:
                    ac:4e:ee:72:2b:9f:54:f9:22:62:62:db:cf:27:81:
                    3e:df:69:40:24:4c:7b:ae:00:ef:30:23:6c:0f:54:
                    8e:ff:87:bd:14:57:80:e2:dc:6e:cb:41:ab:b3:5e:
                    89:72:74:1a:80:b9:8c:74:50:73:ff:56:f1:b0:8b:
                    91:66:6a:ef:0c:f1:7e:20:94:bc:b8:1b:18:a9:84:
                    5e:4b:80:4e:0d:51:de:38:25:ba:d3:1d:ef:81:e9:
                    7a:8e:cf:33:ea:00:41:5a:90:5b:30:11:a8:95:b6:
                    12:80:37:8e:5f:29:d9:84:50:28:15:da:a8:16:5a:
                    a2:1c:e8:e6:81:8e:de:f9:b3:3c:fa:9f:c1:dc:ab:
                    38:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:32:37:09:F3:1C:83:C2:82:97:C4:84:75:90:93:60:D5:C6:AA:7D
            X509v3 Authority Key Identifier:
                keyid:4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:b5:9e:8a:f7:8f:f9:fe:fa:d9:e1:eb:31:20:f9:88:f5:35:
         bd:c4:eb:09:da:a3:b8:36:50:0f:5f:fd:6b:b9:24:51:4b:a4:
         15:af:69:c7:78:3b:fa:c5:5c:3a:59:85:15:ce:7e:1b:4d:d3:
         30:1d:b3:bb:11:20:01:d5:04:5f:57:88:8a:8e:f7:35:6a:7f:
         ec:45:d7:14:e4:03:db:b3:44:c6:4d:ae:44:ed:4d:39:c3:f3:
         5b:aa:c4:df:2e:5c:42:95:12:99:00:a4:c9:7a:80:8e:be:52:
         bc:f0:66:1d:fc:a0:2d:e7:c5:29:55:f7:08:30:52:66:9f:d5:
         8e:bb:22:45:77:05:78:e2:d0:7b:c9:1e:5c:f1:24:a5:df:79:
         b9:f6:d2:c7:d5:bb:4c:f4:12:a7:47:8e:1c:ce:5b:a2:4b:d5:
         36:a6:62:b1:78:6c:26:41:d6:a0:50:49:4c:1b:ed:a9:b5:ac:
         ee:c7:b0:cb:9b:57:6c:a6:bc:47:66:93:46:7d:09:a9:5c:8f:
         fe:3b:97:0b:86:5b:c2:99:94:72:a0:7e:a5:d1:2c:0e:6f:30:
         ba:25:a6:8c:b0:74:83:3a:4f:9a:1a:27:e5:cc:8d:78:fc:b0:
         38:64:b1:f4:e0:99:4a:2b:b3:c4:9e:54:d6:f2:1e:9f:83:38:
         b6:12:94:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:48:27 2025 by rpki-client