Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
File:                     2rU_myHRPgeOPoRNZF7qhYDxzOE.mft (raw, json)
Hash identifier:          7/sYks/vaXW0WCHfP6QbNy2OA7bwBlH0Z5rGPvkE12E=
Subject key identifier:   CD:C1:CF:74:FB:5B:62:E0:BD:12:82:15:C6:99:8D:E9:EA:19:94:C6
Authority key identifier: DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1
Certificate issuer:       /CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
Certificate serial:       01989F717DFB7CB64406D7F1C308B78AB2F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
Manifest number:          162C
Signing time:             Tue 12 Aug 2025 18:01:11 +0000
Manifest this update:     Tue 12 Aug 2025 18:01:11 +0000
Manifest next update:     Wed 13 Aug 2025 18:01:11 +0000
Files and hashes:         1: 2rU_myHRPgeOPoRNZF7qhYDxzOE.crl (hash: 2bI+74RKAl19SyelFV4AY6/3/Xdhx8BGlxID6s5avKY=)
                          2: gsCygs_SprevwXUwS8ZnM-EYuKU.roa (hash: l1XeBh5SOrL7OGe08dB0VGh4WiJBpNY8AdAQ14ebdBA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 18:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9f:71:7d:fb:7c:b6:44:06:d7:f1:c3:08:b7:8a:b2:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
        Validity
            Not Before: Aug 12 18:01:11 2025 GMT
            Not After : Aug 13 18:01:11 2025 GMT
        Subject: CN=cdc1cf74fb5b62e0bd128215c6998de9ea1994c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9b:61:d1:65:ab:81:6d:31:d6:fe:92:68:5f:
                    22:8a:ec:62:c5:28:36:d3:b2:9c:2a:a7:b4:82:51:
                    f9:75:0c:45:6d:8e:f9:b4:42:08:f3:59:29:56:5f:
                    f6:50:9a:8a:de:51:17:54:fd:c4:38:10:52:0b:88:
                    c3:b8:4a:8d:67:04:46:23:e5:d5:36:a9:f4:a2:ad:
                    9d:a6:fe:3f:a1:1a:19:ac:48:16:f4:f9:6b:4d:36:
                    0e:c1:0a:ee:dc:3f:be:09:d4:35:67:8e:ea:63:83:
                    79:35:15:a3:19:d5:65:30:31:e3:c1:0b:4c:85:9c:
                    82:33:48:42:dd:7e:c6:e0:db:e2:7d:b3:c5:1e:2f:
                    a8:8e:2d:fa:93:f3:ec:e5:92:de:fc:0e:c1:43:3f:
                    7d:20:09:d7:83:54:7b:ad:30:e2:ea:52:97:7d:d6:
                    d1:6d:e4:61:cb:6b:35:92:99:af:df:17:3f:30:91:
                    a9:dc:c1:61:fe:39:94:a3:9b:61:7d:41:86:6a:e6:
                    38:99:88:e9:79:f0:ff:6b:4c:e2:82:c7:60:a3:e3:
                    9c:40:06:6f:7a:21:33:58:d8:5b:49:3d:62:e9:f5:
                    07:23:5b:22:24:40:cb:5c:6b:f9:34:68:7a:57:e8:
                    b4:a8:72:6a:01:ea:b5:70:6c:be:53:02:f8:0a:a2:
                    b7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C1:CF:74:FB:5B:62:E0:BD:12:82:15:C6:99:8D:E9:EA:19:94:C6
            X509v3 Authority Key Identifier:
                keyid:DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:86:37:e3:14:66:ae:25:cb:1f:bc:ed:3a:ed:96:40:22:45:
         54:81:47:3c:8a:d9:61:14:48:17:80:55:c1:0b:ad:35:19:79:
         4f:7f:45:d1:e2:2d:04:b5:8d:54:9a:fb:42:d1:1a:fa:19:b4:
         0e:ab:39:22:4e:f3:20:55:8c:82:51:6c:54:0e:51:bf:c7:43:
         9e:35:4b:4a:13:34:71:e3:39:b6:dd:1d:c4:aa:b1:e6:36:10:
         93:1b:65:14:67:fd:ce:61:11:70:3d:69:13:99:bf:d3:b1:7b:
         af:5c:5e:cc:5c:21:7c:12:ae:9a:6f:f0:57:67:96:4e:fa:55:
         0d:83:14:4a:01:a1:7b:1a:6b:e0:bc:72:b1:19:00:ff:a6:77:
         a3:40:da:ef:b7:c3:ce:33:62:b2:f2:e9:93:8d:97:53:16:92:
         71:94:28:20:23:88:f0:91:ce:ca:c1:de:19:04:70:85:95:c2:
         95:28:07:48:a3:20:c2:90:fb:b8:92:73:f7:23:f9:ef:6f:ae:
         dc:95:21:b8:ef:2f:66:52:15:13:eb:45:e7:58:de:b2:58:cd:
         dc:4f:6d:3c:08:a0:3b:7e:3f:76:dc:88:60:2b:5f:b7:e7:04:
         60:eb:71:ea:66:ad:75:2c:53:9d:c2:87:f0:ee:7e:a2:5b:a5:
         51:a1:76:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZifcX37fLZEBtfxwwi3irL2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYjUzZjliMjFkMTNlMDc4ZTNlODQ0ZDY0NWVlYTg1ODBm
MWNjZTEwHhcNMjUwODEyMTgwMTExWhcNMjUwODEzMTgwMTExWjAzMTEwLwYDVQQD
EyhjZGMxY2Y3NGZiNWI2MmUwYmQxMjgyMTVjNjk5OGRlOWVhMTk5NGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJth0WWrgW0x1v6SaF8iiuxixSg2
07KcKqe0glH5dQxFbY75tEII81kpVl/2UJqK3lEXVP3EOBBSC4jDuEqNZwRGI+XV
Nqn0oq2dpv4/oRoZrEgW9PlrTTYOwQru3D++CdQ1Z47qY4N5NRWjGdVlMDHjwQtM
hZyCM0hC3X7G4NvifbPFHi+oji36k/Ps5ZLe/A7BQz99IAnXg1R7rTDi6lKXfdbR
beRhy2s1kpmv3xc/MJGp3MFh/jmUo5thfUGGauY4mYjpefD/a0zigsdgo+OcQAZv
eiEzWNhbST1i6fUHI1siJEDLXGv5NGh6V+i0qHJqAeq1cGy+UwL4CqK3zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3Bz3T7W2LgvRKCFcaZjenqGZTGMB8GA1UdIwQY
MBaAFNq1P5sh0T4Hjj6ETWRe6oWA8czhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnJVX215SFJQZ2VPUG9STlpGN3FoWUR4ek9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi83ZjlhYjEtYmM3Yy00ZDBkLWE5NzAt
NWI4YmM1OTBiMTk3LzEvMnJVX215SFJQZ2VPUG9STlpGN3FoWUR4ek9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi83ZjlhYjEtYmM3Yy00ZDBkLWE5NzAtNWI4YmM1OTBiMTk3
LzEvMnJVX215SFJQZ2VPUG9STlpGN3FoWUR4ek9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOYY34xRm
riXLH7ztOu2WQCJFVIFHPIrZYRRIF4BVwQutNRl5T39F0eItBLWNVJr7QtEa+hm0
Dqs5Ik7zIFWMglFsVA5Rv8dDnjVLShM0ceM5tt0dxKqx5jYQkxtlFGf9zmERcD1p
E5m/07F7r1xezFwhfBKumm/wV2eWTvpVDYMUSgGhexpr4LxysRkA/6Z3o0Da77fD
zjNisvLpk42XUxaScZQoICOI8JHOysHeGQRwhZXClSgHSKMgwpD7uJJz9yP572+u
3JUhuO8vZlIVE+tF51jesljN3E9tPAigO34/dtyIYCtft+cEYOtx6matdSxTncKH
8O5+olulUaF2CA==
-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:27 2025 by rpki-client