Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
File:                     2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft (raw, json)
Hash identifier:          BjcLerVQUeVDmMcJawAXNDU4Bh2yfMQ+MgWkZw+4cPw=
Subject key identifier:   9B:7D:CB:58:EE:20:C1:79:6F:81:31:46:AF:F3:B1:B8:76:F0:64:3B
Authority key identifier: D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
Certificate issuer:       /CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Certificate serial:       019A522C8F4C89DAB662DA339EA998A18005
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
Manifest number:          1711
Signing time:             Wed 05 Nov 2025 04:00:43 +0000
Manifest this update:     Wed 05 Nov 2025 04:00:43 +0000
Manifest next update:     Thu 06 Nov 2025 04:00:43 +0000
Files and hashes:         1: 2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl (hash: GwaBgPOPAMcc9+fOWLo7ECe9PGdqr/LcWyh2j1B63eQ=)
                          2: Hp-aUMiKFduSFShKvppXI42_Uj8.roa (hash: lCB+C5NdYk9yj77o+dq8fC9obFb6kuE+kfqjMFwOwXM=)
                          3: fj4ybxpsDPTq3Dcp32ARk19V658.roa (hash: G3z4kx3nRpiPVloWlnA+5o5/TapLF4KViU9lT9zaU4s=)
                          4: pE4C0VroSmY26_TJM0K-lSQgc7M.roa (hash: vf7UXC4PR0yUJjr6xqwo9zqitXjZXFvwlnGZdHjjf6A=)
                          5: waFJY_9Xx4HVBca8mozwG38i49k.roa (hash: 2sqvgn5zOZZ4lehKra8TFzA3bKpHh9AvNDOTiV97aSw=)
                          6: wwsOTx-pck8zIz4rEJvLSRVOW78.roa (hash: MNbHqch8VEMBR8R4jhawYSxV/uo6TDEte38JPI3LQos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 04:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:52:2c:8f:4c:89:da:b6:62:da:33:9e:a9:98:a1:80:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8fc6e45181d839fd10e4a902762f26c9a646796
        Validity
            Not Before: Nov  5 04:00:43 2025 GMT
            Not After : Nov  6 04:00:43 2025 GMT
        Subject: CN=9b7dcb58ee20c1796f813146aff3b1b876f0643b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:af:ab:28:4a:54:ce:2c:43:86:ca:67:6a:de:
                    bf:74:ab:cd:13:9a:74:ea:91:ce:02:00:8f:8a:cb:
                    91:6a:31:f5:44:fc:fe:99:29:bc:19:59:3b:f4:e0:
                    f4:ab:7e:b0:40:b7:cf:58:5a:21:e1:64:62:7e:4e:
                    2e:3a:63:7f:98:cb:25:9c:9a:3c:a2:0b:e6:a9:e8:
                    a0:78:51:6b:9a:a8:35:8c:25:71:f2:ed:17:b6:86:
                    c1:9d:fd:ca:4f:8b:95:76:ad:0d:a9:d7:43:56:a7:
                    08:f6:f1:10:99:8e:0c:27:90:b2:b1:0f:36:03:ac:
                    93:07:4e:c9:41:10:cd:dc:6a:ab:8c:4b:ea:dd:45:
                    57:42:dd:83:b9:85:b3:30:43:dc:44:74:8b:43:70:
                    af:8e:47:44:b1:84:47:b2:9a:30:d8:e8:6c:fa:36:
                    9e:55:75:ad:de:9f:30:22:8e:95:00:2b:39:ec:52:
                    59:11:ab:88:38:c5:a8:f9:83:86:78:9e:f8:57:46:
                    e2:cc:24:c3:a2:e3:92:38:35:d1:dc:6d:a0:06:95:
                    5d:6f:92:f9:ef:00:05:af:0e:30:1f:bd:a0:f2:1e:
                    d4:c4:1c:20:d5:54:55:7b:25:5e:4b:d9:32:10:e0:
                    a9:9c:a3:a1:03:ce:f0:c2:7a:db:1c:0f:aa:f1:82:
                    17:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7D:CB:58:EE:20:C1:79:6F:81:31:46:AF:F3:B1:B8:76:F0:64:3B
            X509v3 Authority Key Identifier:
                keyid:D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:cd:7d:94:86:f7:8c:c5:b6:bf:1c:93:54:da:87:fb:21:74:
         9a:b9:cc:1e:ce:bf:01:a3:35:57:2b:34:5d:1f:43:0b:17:7a:
         d4:fe:7e:17:02:94:0b:85:de:89:a1:42:11:60:24:9c:20:6b:
         4b:69:f1:e1:a9:c8:e3:54:37:3e:c2:84:9c:84:f0:7d:05:c3:
         6a:86:07:b6:7c:6f:b1:3e:8d:ab:cf:fc:1f:c5:c7:bf:b4:be:
         55:03:a7:42:b8:3e:84:d2:fd:3c:d0:ec:e6:91:33:50:27:37:
         6c:2a:0e:c2:a9:eb:ea:de:f9:c4:80:99:95:d7:82:ad:44:43:
         91:36:bc:0c:fe:e8:37:77:09:8c:e6:0a:62:13:93:f8:51:21:
         d6:70:57:8e:24:15:57:4e:25:08:54:34:a9:b7:d4:ea:0d:34:
         68:ad:30:44:1c:6f:57:85:6a:51:6f:bf:6e:b5:05:6b:bb:4a:
         25:49:c2:09:aa:90:c8:d3:f0:5b:80:8e:46:8d:12:c9:60:fb:
         f0:58:5b:5a:ac:11:9a:b3:9c:15:67:f7:0d:84:8e:2c:44:9d:
         80:da:f2:7b:de:01:be:f0:6a:83:a4:5b:aa:11:d9:cb:e1:b1:
         78:38:33:bc:e1:ea:16:4c:08:ba:c5:ea:ce:a1:91:1d:12:9b:
         dd:70:77:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:10:04 2025 by rpki-client