Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
File:                     2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft (raw, json)
Hash identifier:          QT2xCkhF3vMZeFCJKyulb9HoZ5ULMxLEhsWysXS3GB8=
Subject key identifier:   C5:C8:55:CC:97:95:70:AD:46:44:A6:CD:AD:8C:81:B0:9D:80:04:1D
Authority key identifier: DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
Certificate issuer:       /CN=da980a45fe487366e386b6064c2c652519f9fc93
Certificate serial:       019889570D181A033D1897BFE412242970F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
Manifest number:          1622
Signing time:             Fri 08 Aug 2025 11:00:40 +0000
Manifest this update:     Fri 08 Aug 2025 11:00:40 +0000
Manifest next update:     Sat 09 Aug 2025 11:00:40 +0000
Files and hashes:         1: 2k5YbACJ4Q7zlHJcdzXXQdWQyLo.roa (hash: ejnRPYJcqos1VPRlPS0gL7ngl0unaEAz9tOL/KDHo48=)
                          2: 2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl (hash: yDg+u8X4vB3fa5YVSYDXHYEJKHlwj/zUlcWyrbXVUKY=)
                          3: F-T6XFqFnI_sbUUjNxNcNd87BhY.roa (hash: 6o0pvXXHkL7jKBhk4FmzhB8YNuZ27KgrcAM6QK83Qb4=)
                          4: F1ShlRrx5ZPQmtQlj2ftFMW353w.roa (hash: Xetg03+rB7SCygrrXAn/7tOc08cqxoGNbraAHZ0gKtM=)
                          5: IPUd7GCIW2gsU9xakT1oNUwSIio.roa (hash: dGuEAfVSkLkoM8KnSMOWFIaomaZjWrbWxTVDngrHaFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:57:0d:18:1a:03:3d:18:97:bf:e4:12:24:29:70:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da980a45fe487366e386b6064c2c652519f9fc93
        Validity
            Not Before: Aug  8 11:00:40 2025 GMT
            Not After : Aug  9 11:00:40 2025 GMT
        Subject: CN=c5c855cc979570ad4644a6cdad8c81b09d80041d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a3:a2:35:73:e6:78:1d:ae:9f:83:6a:49:b3:
                    2a:aa:a2:b2:16:a1:64:4f:e5:18:19:b5:13:1a:70:
                    ae:cc:f1:a3:c0:85:06:58:9d:19:cb:64:43:ac:ee:
                    77:29:11:37:b9:d2:a4:c7:17:34:ab:e7:9b:12:af:
                    50:dd:d5:05:17:a5:3b:f7:e7:67:ea:c6:2b:82:73:
                    f8:1c:b4:60:0c:60:b1:2b:34:07:a2:88:16:06:a6:
                    15:ce:2d:d8:be:6b:84:c0:52:50:26:68:63:1f:9a:
                    5d:6b:c0:3a:52:14:81:af:ab:e9:18:c2:5d:f5:30:
                    eb:8b:3b:bb:8f:9c:6e:a6:d6:ee:dd:9a:c1:aa:c2:
                    7f:38:15:32:a9:33:4e:64:00:22:9b:6c:bd:74:11:
                    dd:b0:05:9a:99:94:64:1c:6f:28:e5:a8:13:9d:06:
                    49:49:4f:38:87:08:a1:2e:10:dc:91:ef:58:dd:dc:
                    65:1a:cf:08:19:98:e9:fc:88:53:e6:46:84:0b:67:
                    a1:b5:2d:6d:7f:7c:24:be:3a:cb:dd:99:32:dc:1b:
                    79:16:cc:d7:33:d7:a7:1e:d7:51:3a:18:f6:39:83:
                    5e:01:c8:e3:c5:a1:72:87:7b:bb:f8:21:65:06:b5:
                    68:2f:37:77:8a:74:37:aa:0e:15:cc:a4:49:06:14:
                    53:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C8:55:CC:97:95:70:AD:46:44:A6:CD:AD:8C:81:B0:9D:80:04:1D
            X509v3 Authority Key Identifier:
                keyid:DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:36:44:77:0c:ad:97:ae:06:1a:8c:6e:e7:10:4b:1a:74:8a:
         7d:90:e5:5d:1c:6b:c3:ab:5b:a8:41:61:a7:a7:7e:0a:dc:63:
         71:42:a6:e5:5d:c3:61:bd:3a:f4:fd:8b:9c:90:80:95:67:b5:
         60:00:ac:69:96:10:b9:2e:d6:91:92:ce:b6:38:ec:53:08:84:
         6f:94:a6:ae:15:15:87:69:c8:e7:12:97:04:57:2b:c5:ac:06:
         4b:3e:ce:27:d8:79:7f:7d:f7:07:22:a9:de:8c:9d:a0:37:e5:
         bd:f3:51:d3:44:52:7b:2f:14:5f:a5:94:a0:bc:b9:a1:e7:04:
         c6:6f:f6:bc:50:8b:f2:22:5b:7e:d8:e5:17:4e:db:26:e4:37:
         1f:56:6c:83:b1:b1:99:8a:30:cd:5e:bc:68:9c:7d:85:7b:19:
         96:59:4e:54:1e:04:ec:4b:94:d8:75:62:f7:a1:f2:bd:97:7f:
         3d:07:58:77:32:4f:19:d4:f7:6b:ab:9e:6a:80:ac:c7:2a:5b:
         97:8e:73:4d:30:7c:f1:79:89:43:db:ea:12:0e:58:92:a4:b5:
         b0:7b:76:82:90:18:f9:3d:3f:d7:04:51:27:02:df:7d:f4:35:
         cb:ab:49:44:df:c9:ff:d9:6d:f8:35:64:6d:75:22:32:93:77:
         bd:23:e8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:51:57 2025 by rpki-client