Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
File:                     2JQ2WyiggoNKdRqXdxt5ESRSTew.mft (raw, json)
Hash identifier:          wtysYy533QuenRrLIKiNP+c17NNNaTsPNEfYdlr0Mtg=
Subject key identifier:   F3:3D:13:6D:D7:59:3E:91:B8:B2:41:10:41:97:1B:07:36:E8:47:ED
Authority key identifier: D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC
Certificate issuer:       /CN=d894365b28a082834a751a97771b791124524dec
Certificate serial:       0198752BE2EE443D40004CA20BBA2B91317B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
Manifest number:          161B
Signing time:             Mon 04 Aug 2025 13:01:06 +0000
Manifest this update:     Mon 04 Aug 2025 13:01:06 +0000
Manifest next update:     Tue 05 Aug 2025 13:01:06 +0000
Files and hashes:         1: 2JQ2WyiggoNKdRqXdxt5ESRSTew.crl (hash: XCUV/FohrhRA60BYH7FpasxoaP/y1/vhi6IY93NKw34=)
                          2: 5Be6EqezXfxwhrFPLeonCfAyvI8.roa (hash: 5DTu5fQoOJxSVXmen8IkdRj7K/ip+zcpfYhUFVu0omI=)
                          3: T1w2yjTpmwJ1zAyvHyThPVcOS4U.roa (hash: 2VUmqYcTbyu3BGa2UNYaNxKK9/e/jdNeWFxD6j6APMw=)
                          4: V_jn68LrMHXss4eZ4s-Ou3D0uUc.roa (hash: exDIqb2dn4rGevhqSLgxGPDH0tG5qTPwydwCvYcD+yY=)
                          5: Ypy0H2Bsr39UgswuoV5q1-sR_N4.roa (hash: pHbM4Rba/93pouqqIiXpHU4F3MQUwXB/YNEqfbXWHBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:2b:e2:ee:44:3d:40:00:4c:a2:0b:ba:2b:91:31:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d894365b28a082834a751a97771b791124524dec
        Validity
            Not Before: Aug  4 13:01:06 2025 GMT
            Not After : Aug  5 13:01:06 2025 GMT
        Subject: CN=f33d136dd7593e91b8b2411041971b0736e847ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:85:d0:0c:0e:9e:3b:d3:cb:30:af:2b:33:b6:
                    76:d7:5f:fb:fa:02:1d:fc:55:28:2a:69:7f:15:c7:
                    69:5c:e9:e1:54:67:30:3f:66:76:7d:98:7d:bf:e0:
                    4f:46:3d:fb:fc:a4:0a:39:63:71:f2:2e:df:31:04:
                    a9:97:e1:39:b3:0f:8f:f7:69:ea:3c:ab:ee:f0:d8:
                    ca:a3:85:e2:a1:ed:90:dd:4f:95:d5:ec:88:b2:a1:
                    98:c7:50:fa:32:fc:3e:e1:8d:cf:66:eb:28:aa:7a:
                    80:35:a1:e1:9e:b2:22:5e:4d:80:e4:8d:d8:43:f4:
                    ec:49:46:16:05:3f:d0:07:ec:ce:87:ed:ad:0e:75:
                    02:f9:86:6c:09:e3:8d:4b:6d:33:15:4a:c0:97:7f:
                    66:99:f2:a6:0d:09:9c:29:64:4c:fe:13:1e:bd:3c:
                    04:b5:a8:da:c6:a5:e1:e2:bc:04:5a:c2:a2:8d:89:
                    e5:81:ba:1a:74:d6:da:1a:9f:7e:3a:d9:28:7a:a6:
                    83:f2:93:00:26:1e:4a:cd:8b:9f:a6:ba:53:7a:0a:
                    c1:84:85:de:48:b0:b8:bd:46:00:a9:f4:0f:63:d8:
                    e8:20:34:7f:45:47:c9:ce:8e:b0:19:1c:0e:a2:a1:
                    b2:ef:a6:64:dc:d1:ef:59:7b:30:21:0f:95:25:93:
                    a9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:3D:13:6D:D7:59:3E:91:B8:B2:41:10:41:97:1B:07:36:E8:47:ED
            X509v3 Authority Key Identifier:
                keyid:D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:13:6c:d1:61:95:fd:b3:b8:38:5e:4e:05:4c:dd:22:1d:36:
         98:f9:eb:6d:d5:c0:46:73:60:d0:88:3b:69:dc:a1:cc:41:03:
         02:66:98:6e:d6:c6:00:61:12:24:39:21:1a:a4:a2:2a:e0:82:
         00:08:af:64:1c:78:3c:d3:f4:f0:01:37:5a:3d:14:f3:ed:f8:
         c5:1c:5f:3e:1c:84:f2:ed:17:b1:ad:fe:31:c1:63:f1:99:8f:
         81:b7:ab:75:f4:8a:57:62:b2:24:f4:5f:34:a6:e8:e4:f3:35:
         0d:66:38:e8:9f:dc:95:0f:cc:90:8e:61:2a:d8:b5:97:2a:56:
         61:13:e6:46:c5:82:03:6b:e5:6c:65:4f:e8:0a:a6:cc:e0:02:
         50:b9:23:17:b9:ce:52:71:8f:59:c5:c1:4c:4e:4b:a9:1b:04:
         a4:a0:c2:4f:8e:c7:2f:2d:97:d3:44:92:42:db:9d:d5:77:ce:
         2e:a9:67:49:31:d2:58:39:87:34:52:ef:d8:6a:32:c5:7f:2d:
         b8:f0:c3:94:b1:a2:70:44:15:ea:68:99:48:d5:a7:cf:46:63:
         a4:b9:c6:34:e0:62:e0:18:fd:91:48:58:c2:d3:2e:5c:cc:37:
         7e:50:86:85:26:3d:14:cb:e5:26:49:fe:ca:5f:47:02:61:77:
         a4:52:df:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:37:34 2025 by rpki-client