Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft
File:                     2MIJbMDFVXy6tsENYdB30Hj-cX8.mft (raw, json)
Hash identifier:          ujbetzk9KfQbL8DGkvduJo9usnSjShLUmKzK3ZS5MVc=
Subject key identifier:   58:75:80:6E:A0:7D:8F:9E:45:31:AE:21:F4:A2:B1:0A:54:3B:D6:83
Authority key identifier: D8:C2:09:6C:C0:C5:55:7C:BA:B6:C1:0D:61:D0:77:D0:78:FE:71:7F
Certificate issuer:       /CN=d8c2096cc0c5557cbab6c10d61d077d078fe717f
Certificate serial:       01987AF7377BB3F948B9CE2CFEDC7D3AA91C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2MIJbMDFVXy6tsENYdB30Hj-cX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft
Manifest number:          07B0
Signing time:             Tue 05 Aug 2025 16:01:18 +0000
Manifest this update:     Tue 05 Aug 2025 16:01:18 +0000
Manifest next update:     Wed 06 Aug 2025 16:01:18 +0000
Files and hashes:         1: 2MIJbMDFVXy6tsENYdB30Hj-cX8.crl (hash: exXuWUILfLUMAQAZSebV37GShwYoGPcgMDyG+LYtT1I=)
                          2: v--QteSWi6tQPkHDzqMh-ib3Ea0.roa (hash: 4DKBaLEIdscFHQJRoeUgffvp/rQ3x54nPWPAJ4H+N0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2MIJbMDFVXy6tsENYdB30Hj-cX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 16:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:f7:37:7b:b3:f9:48:b9:ce:2c:fe:dc:7d:3a:a9:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8c2096cc0c5557cbab6c10d61d077d078fe717f
        Validity
            Not Before: Aug  5 16:01:18 2025 GMT
            Not After : Aug  6 16:01:18 2025 GMT
        Subject: CN=5875806ea07d8f9e4531ae21f4a2b10a543bd683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:57:73:23:91:7d:70:a6:98:e1:c3:90:26:f0:
                    66:68:2a:da:1f:51:12:53:3e:10:fd:2e:d2:52:f1:
                    9b:8f:5a:e7:8e:00:72:02:73:bb:3f:3e:b2:5d:00:
                    5d:e9:fc:79:67:dc:71:03:40:56:09:e2:51:f2:41:
                    72:06:9f:08:c1:54:fa:63:c1:fa:b9:11:b6:38:12:
                    15:2c:e8:71:66:8d:3f:75:aa:f7:41:80:90:70:39:
                    c8:88:d7:7d:02:e1:40:8f:0c:a2:c9:43:a7:77:20:
                    21:b2:40:48:3a:d2:97:c8:48:37:ea:ee:6e:ba:af:
                    55:e1:f0:19:1c:c0:4a:3b:4c:36:55:77:d3:48:19:
                    63:f4:b1:20:ab:64:09:cb:04:7b:a4:53:1f:9e:1d:
                    c3:e0:18:69:96:a8:dd:dd:b5:6a:09:e3:ee:3a:84:
                    e0:18:d8:58:46:c3:ec:43:e5:c4:eb:3b:25:ab:80:
                    59:2d:29:fb:a5:00:a3:f1:a0:e0:99:71:9d:f4:c7:
                    cf:b9:0b:1a:32:44:2a:93:70:24:d2:69:e7:51:c9:
                    ef:dc:46:d5:66:10:95:d9:94:62:38:55:21:8d:96:
                    09:e6:13:28:c7:b0:5a:6f:fa:b8:47:f5:83:8b:81:
                    af:38:fb:a6:92:3a:41:ce:0f:e0:d5:ae:b3:8f:bc:
                    59:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:75:80:6E:A0:7D:8F:9E:45:31:AE:21:F4:A2:B1:0A:54:3B:D6:83
            X509v3 Authority Key Identifier:
                keyid:D8:C2:09:6C:C0:C5:55:7C:BA:B6:C1:0D:61:D0:77:D0:78:FE:71:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MIJbMDFVXy6tsENYdB30Hj-cX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:89:ec:b1:5e:c5:a8:81:ae:b4:0d:0f:22:94:ad:16:22:4e:
         26:54:7f:e8:d8:eb:fc:c5:e6:be:d7:4f:89:18:be:d4:cd:e6:
         78:65:b0:2b:42:77:2f:67:cd:ec:e1:09:eb:7f:2b:55:ff:cc:
         37:bf:a5:2d:09:2a:d2:3b:20:1e:7f:68:5b:5c:c8:c6:b7:93:
         71:4a:87:f8:43:e5:51:c4:55:1d:5b:12:73:9c:47:6b:a2:18:
         97:bf:80:5d:42:02:f1:bc:31:be:93:e2:b8:ed:81:14:e3:ff:
         5a:7f:90:e6:67:e9:13:ba:98:8a:a5:9a:05:47:df:69:38:00:
         75:74:d6:27:f4:dd:67:a8:e5:ad:0c:84:f5:be:22:39:fd:a3:
         6f:4b:e0:3c:ae:74:d9:dd:5e:0f:1b:23:11:8d:e4:62:cb:71:
         38:f3:dc:bf:12:32:5d:38:73:95:ba:5f:ec:34:47:fa:39:db:
         45:2e:b2:5d:ee:43:63:3d:c7:d9:ec:fc:f6:59:13:4f:a6:eb:
         14:18:dd:28:53:b9:f6:04:7e:f7:c2:23:a0:e3:03:95:c3:1f:
         f9:9d:cd:c8:a3:1c:d0:17:d1:9e:fc:7d:09:98:a0:f5:f6:2a:
         55:2c:74:62:ad:f6:b5:b8:f4:ad:a2:11:33:c6:da:f4:83:ec:
         b6:3a:a7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:43:45 2025 by rpki-client