Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/2cm69G1slNJ84SjaO2W1o7Bts4s.mft
File:                     2cm69G1slNJ84SjaO2W1o7Bts4s.mft (raw, json)
Hash identifier:          YKFAdMkeT3WamAY4hVqciKAsdLbnyg97VmGxU6qsOyM=
Subject key identifier:   E3:AD:FA:41:DD:F2:01:AE:E5:5D:48:41:02:C2:F8:8D:F2:10:C6:73
Authority key identifier: D9:C9:BA:F4:6D:6C:94:D2:7C:E1:28:DA:3B:65:B5:A3:B0:6D:B3:8B
Certificate issuer:       /CN=d9c9baf46d6c94d27ce128da3b65b5a3b06db38b
Certificate serial:       019769609B84A74EE0260B1086BF59977174
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2cm69G1slNJ84SjaO2W1o7Bts4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/2cm69G1slNJ84SjaO2W1o7Bts4s.mft
Manifest number:          1088
Signing time:             Fri 13 Jun 2025 13:00:28 +0000
Manifest this update:     Fri 13 Jun 2025 13:00:28 +0000
Manifest next update:     Sat 14 Jun 2025 13:00:28 +0000
Files and hashes:         1: 1ayWqykxA3-0oHXdVMDTjw-enG8.roa (hash: 80z6vUfHJXcetEFvuCm8sGrawk5cVXzDkmIiJ5nDjeQ=)
                          2: 2cm69G1slNJ84SjaO2W1o7Bts4s.crl (hash: GDHinhZiMuu+H/JlyWDzwjWvAjI09o6tGiYxnUbbXrs=)
                          3: 6O3mGfQdkxk3pNZnhn2v_SudIJk.roa (hash: wnpJuyItibM09bhYmpcnxUtBt0pZ5yqi3ijea2io2f4=)
                          4: BlMPV4TbFy0S3lLdYLP0zmdpvf4.roa (hash: FX2tFGx6ls8P2UDOzXsC/mVC7xk+xWljqYmpj+Cau/U=)
                          5: c4p_BLGDdzUFuqYC6ja2kzX9b0I.roa (hash: dXosFZE0EOcrP/UCssuaodno9goL3jWbyQg+dVTcJCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/2cm69G1slNJ84SjaO2W1o7Bts4s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/2cm69G1slNJ84SjaO2W1o7Bts4s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2cm69G1slNJ84SjaO2W1o7Bts4s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:60:9b:84:a7:4e:e0:26:0b:10:86:bf:59:97:71:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9c9baf46d6c94d27ce128da3b65b5a3b06db38b
        Validity
            Not Before: Jun 13 13:00:28 2025 GMT
            Not After : Jun 14 13:00:28 2025 GMT
        Subject: CN=e3adfa41ddf201aee55d484102c2f88df210c673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5a:df:3f:6f:57:b8:7a:b0:97:6e:eb:21:23:
                    dd:8d:31:fb:ca:4d:f0:0e:16:1c:ae:7d:0d:99:21:
                    7f:0a:d6:bc:7a:80:3c:2c:00:05:ce:f0:84:63:a5:
                    c7:c1:e2:78:bf:e8:de:7b:3c:a9:15:2b:af:56:12:
                    a8:99:03:c1:9c:5f:43:da:18:92:8b:da:b9:a2:70:
                    90:2d:de:ea:1c:3f:56:ee:ac:11:cd:28:53:85:0a:
                    d2:de:88:7b:1a:50:27:44:27:ea:1b:03:fc:96:54:
                    b1:e7:a6:13:7d:ee:ee:a1:ee:40:38:d9:41:5a:db:
                    8a:fb:54:98:d0:15:23:7a:ac:d4:69:14:5f:cb:5e:
                    10:30:48:bd:b0:5a:8c:be:0e:60:bc:87:95:d1:53:
                    30:6d:2e:3b:a2:f7:82:15:4e:ab:cc:05:f4:34:43:
                    fd:aa:4d:ec:31:1f:40:38:30:75:ca:12:55:bb:a0:
                    a9:72:eb:22:f4:42:91:b7:5f:29:d0:f4:83:10:12:
                    0d:26:66:57:b9:f8:10:22:31:e0:45:43:8c:b6:64:
                    f0:2a:c9:e9:79:e5:19:e7:72:e8:a5:e2:7a:8d:f4:
                    f3:7c:9d:49:5f:ea:dc:29:8c:29:ea:48:2e:bf:00:
                    ac:43:2b:38:b0:da:72:25:8c:17:9a:91:60:c7:ed:
                    84:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:AD:FA:41:DD:F2:01:AE:E5:5D:48:41:02:C2:F8:8D:F2:10:C6:73
            X509v3 Authority Key Identifier:
                keyid:D9:C9:BA:F4:6D:6C:94:D2:7C:E1:28:DA:3B:65:B5:A3:B0:6D:B3:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2cm69G1slNJ84SjaO2W1o7Bts4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/2cm69G1slNJ84SjaO2W1o7Bts4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/2cm69G1slNJ84SjaO2W1o7Bts4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:02:4f:7f:77:10:16:22:ab:e4:5e:ec:90:60:80:d4:4a:6e:
         bd:5d:21:dc:c5:f0:94:21:4f:84:b0:67:67:7c:b5:85:65:92:
         bb:6d:5f:3e:3a:8a:3e:57:1b:d4:fd:96:c9:71:8c:02:7a:01:
         9e:2a:c8:1f:3a:ec:22:95:de:93:a0:7f:fb:43:d1:9e:e5:54:
         a6:34:d7:bb:39:c3:af:e2:f1:d2:97:d2:32:27:33:43:48:6c:
         70:77:3e:6d:bf:9e:87:d9:d6:7d:76:d0:4d:f0:05:6a:77:49:
         3a:45:b3:7e:bb:d6:f8:46:52:3f:d0:69:74:8d:1e:c8:da:f8:
         00:02:3e:59:99:bd:d1:ec:78:c4:9d:bb:9b:80:93:18:20:e8:
         f9:c0:eb:3c:e3:0b:57:32:1b:87:74:af:8e:3c:ae:e3:8c:fa:
         f9:8d:1a:0d:40:a5:2d:f5:61:da:b9:65:18:ba:39:f9:b6:53:
         11:c7:97:d3:bd:d7:e0:bf:75:72:58:7b:92:8c:40:c8:19:c1:
         8e:05:da:fb:ef:d7:5e:b5:74:63:d4:6f:ea:48:ff:08:26:62:
         29:5f:5e:be:ed:38:ba:40:de:41:ed:0c:18:47:0d:3e:09:e2:
         fb:9c:f3:2e:87:2b:74:af:16:de:f5:01:93:95:56:d8:c1:93:
         82:37:a4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:19 2025 by rpki-client