Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
File:                     K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft (raw, json)
Hash identifier:          aYpvwLY8tCHx+6iZLvTg1IM/YaOv5gUIHRA5sV8oGgk=
Subject key identifier:   A0:F9:0E:39:E7:A1:9A:9D:96:0A:EE:31:3C:E4:F0:F0:39:29:37:EF
Authority key identifier: 2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E
Certificate issuer:       /CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
Certificate serial:       019A4D07D4218F536E8BF8B11B0FC9F3579B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
Manifest number:          0EEB
Signing time:             Tue 04 Nov 2025 04:02:29 +0000
Manifest this update:     Tue 04 Nov 2025 04:02:29 +0000
Manifest next update:     Wed 05 Nov 2025 04:02:29 +0000
Files and hashes:         1: K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl (hash: BUHt9QSXqg2MqGIT8aIF9lKgFJri40cWP1XQrvJ/F7k=)
                          2: rK_Cs7Dz6iUX_MoKD-Xocnfo1R4.roa (hash: b1uXDovLrtEkVyA+DIE0O5ACHvWcfbWlFzT0S+Ih5Jw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 04:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:07:d4:21:8f:53:6e:8b:f8:b1:1b:0f:c9:f3:57:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
        Validity
            Not Before: Nov  4 04:02:29 2025 GMT
            Not After : Nov  5 04:02:29 2025 GMT
        Subject: CN=a0f90e39e7a19a9d960aee313ce4f0f0392937ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8b:03:ed:36:02:1d:91:c5:a8:9f:e0:ae:6e:
                    8d:4f:e6:41:50:80:f3:b3:26:24:a6:1f:4e:0a:76:
                    c2:04:6f:86:d6:1c:ca:04:8d:ec:7f:7f:b3:da:ec:
                    70:5b:12:3d:3a:d1:5c:6f:e8:8c:4d:a3:f5:0e:0e:
                    a3:e1:04:8b:89:45:50:98:d2:5f:76:21:c7:c1:04:
                    dc:0a:22:d6:47:b4:dd:49:06:3a:de:72:bf:22:e5:
                    f9:05:cc:82:7e:16:65:32:4b:7f:85:cf:c1:00:92:
                    ee:9a:42:85:de:7c:93:44:01:7e:6f:32:1a:5e:3b:
                    36:53:cd:4c:36:ca:7b:2d:ba:c7:14:cf:fd:fa:93:
                    df:17:2b:6c:a1:81:93:32:11:b3:63:d2:84:9d:7d:
                    fc:8c:fe:e6:73:b2:fb:cb:8d:da:5f:60:eb:3d:fd:
                    39:03:25:e1:05:cf:16:db:48:2f:8f:bd:26:c3:19:
                    b2:bc:44:5f:92:21:57:5e:4c:85:7d:1e:ce:bd:2a:
                    ff:3c:ea:1d:f4:71:4f:29:0e:60:2e:f2:b8:c1:f0:
                    95:f3:75:ee:49:66:16:1a:77:03:a2:c2:64:54:32:
                    49:d1:07:3a:9b:71:fd:16:fc:f2:a9:a1:be:f5:7b:
                    61:90:0d:7c:1b:8e:d5:6e:ce:08:79:e3:00:0b:a4:
                    3b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F9:0E:39:E7:A1:9A:9D:96:0A:EE:31:3C:E4:F0:F0:39:29:37:EF
            X509v3 Authority Key Identifier:
                keyid:2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:65:df:09:29:60:d4:d6:30:7a:ad:9a:2d:81:55:e4:2e:f1:
         bd:60:f2:36:69:41:af:b6:f0:98:55:07:78:31:e5:d4:d3:c5:
         7b:32:23:1f:7e:66:08:90:2a:3b:0e:3a:ab:4f:56:e4:ef:c5:
         0a:e0:b7:42:aa:3e:36:3c:d2:11:31:40:dc:fd:2d:f7:97:8f:
         83:1e:98:b4:9d:33:17:f8:97:fa:7c:75:e2:3c:d8:12:54:1f:
         6f:ed:90:22:90:af:95:60:27:98:e1:ac:8b:e5:af:a4:1e:74:
         23:73:99:ff:d3:2a:ff:88:56:42:28:34:ed:4b:ee:ae:4b:3b:
         91:c0:d5:5d:f0:67:5b:6f:17:6e:7b:3e:df:36:2d:93:74:4e:
         a9:1f:a4:17:32:e2:e5:17:88:8b:b7:1c:f8:64:72:f3:79:db:
         97:e1:bd:99:e0:62:75:f5:08:9d:93:e6:77:ef:30:95:c7:ae:
         b0:4d:b8:8e:96:ba:3b:77:0a:a9:0a:22:1f:cf:83:bf:f5:01:
         31:3d:e7:fb:4c:37:4d:87:f6:81:0f:75:6b:f2:78:e4:9b:68:
         3d:4f:5d:0a:45:b2:fb:34:76:f9:47:16:8f:cf:8b:ac:a2:82:
         39:08:23:39:11:0b:df:bf:98:ee:f1:ea:7c:b7:e5:44:ba:29:
         b0:16:1d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:20 2025 by rpki-client