Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.mft
File:                     e7gN7MxW6zZrNswpZMgZuxtymts.mft (raw, json)
Hash identifier:          DTTaSnsuPNT3TaPr4lhQJp8OH7iF1cYEMQaFnuZbwW4=
Subject key identifier:   73:0F:DA:B0:47:54:F1:65:48:86:84:3E:CC:61:04:8B:BE:B3:04:7E
Authority key identifier: 7B:B8:0D:EC:CC:56:EB:36:6B:36:CC:29:64:C8:19:BB:1B:72:9A:DB
Certificate issuer:       /CN=7bb80deccc56eb366b36cc2964c819bb1b729adb
Certificate serial:       0198D65F51AA5EC662FBC2BC9EA1F691EA7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e7gN7MxW6zZrNswpZMgZuxtymts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.mft
Manifest number:          0AB1
Signing time:             Sat 23 Aug 2025 10:00:27 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:27 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:27 +0000
Files and hashes:         1: e7gN7MxW6zZrNswpZMgZuxtymts.crl (hash: fXz1ss7xoYulYFGK5T7m3c6md99DVQidoxqySSMiZ8k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e7gN7MxW6zZrNswpZMgZuxtymts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:51:aa:5e:c6:62:fb:c2:bc:9e:a1:f6:91:ea:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bb80deccc56eb366b36cc2964c819bb1b729adb
        Validity
            Not Before: Aug 23 10:00:27 2025 GMT
            Not After : Aug 24 10:00:27 2025 GMT
        Subject: CN=730fdab04754f1654886843ecc61048bbeb3047e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ed:4d:d7:6f:26:df:68:c0:70:97:63:22:80:
                    e3:87:1e:69:12:83:da:9e:ed:46:7f:cf:40:6f:23:
                    13:e7:26:39:cd:88:97:a1:05:7e:55:77:26:6f:ab:
                    ee:db:ce:39:e4:0c:ac:19:3b:06:e4:02:c8:da:eb:
                    23:ca:00:ab:f1:34:df:86:e9:13:4f:0b:d5:6f:c7:
                    35:d1:6f:19:d6:e5:a3:f8:1d:52:f3:b8:e3:1b:0b:
                    9b:47:42:d2:73:65:60:9b:36:2c:80:6f:1c:10:93:
                    89:bf:e0:71:11:9e:6c:67:58:27:e9:f3:3c:cc:a8:
                    73:ba:cf:80:8a:c7:c8:b8:ab:ce:a8:06:c8:7d:e0:
                    46:b3:a7:a5:66:0f:1c:7d:19:7c:74:08:81:74:51:
                    ac:01:f1:14:11:df:29:d5:c4:54:51:aa:c8:31:58:
                    ff:f2:2f:7d:67:d5:a4:ba:90:cc:1e:d8:7f:b7:3d:
                    2e:9f:f9:83:a9:29:0a:8c:40:dc:c0:a6:e3:c7:0d:
                    95:71:ec:1e:14:41:62:fa:fb:76:1b:0a:f4:ea:da:
                    1e:50:a6:a5:7f:13:e5:27:e6:d4:9f:6c:dd:0e:f3:
                    7e:5f:cd:23:d0:70:31:c6:87:30:19:26:b1:dc:9a:
                    a7:15:40:5b:fb:43:8b:28:50:bf:89:bc:cc:fc:47:
                    f3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:0F:DA:B0:47:54:F1:65:48:86:84:3E:CC:61:04:8B:BE:B3:04:7E
            X509v3 Authority Key Identifier:
                keyid:7B:B8:0D:EC:CC:56:EB:36:6B:36:CC:29:64:C8:19:BB:1B:72:9A:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7gN7MxW6zZrNswpZMgZuxtymts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:5f:e9:fc:4c:8a:89:f4:f5:12:f5:70:69:31:12:3a:c3:dd:
         0f:6e:b0:89:22:64:59:7d:5b:85:72:bd:12:ca:a2:b5:08:08:
         6e:5e:93:d5:ca:98:24:c5:9e:ea:53:f6:8a:0c:df:42:3e:50:
         50:1e:60:c1:37:42:8b:4e:5d:d9:99:55:6b:01:96:e9:a4:73:
         17:31:29:3d:1c:3b:5d:2a:4c:ef:a1:a5:e4:00:7a:6b:c0:67:
         5d:33:7a:d6:13:01:ab:b5:9c:33:3c:5a:2c:98:30:e2:83:3c:
         55:c3:81:b9:32:ed:65:45:63:37:e3:4d:80:0a:07:2f:cc:70:
         6e:b0:aa:e7:e7:83:33:d3:f8:e4:2b:24:33:f1:cb:c6:e5:f5:
         97:62:50:50:06:fa:c8:5f:87:fc:c2:7e:6f:1d:29:27:8c:34:
         59:fd:29:5c:e8:c1:08:55:6c:1e:c2:3d:91:0c:7e:90:fc:fd:
         24:65:50:2a:a7:71:f7:16:fc:54:19:ff:17:a5:84:ad:07:13:
         45:53:cc:58:ff:37:0d:25:11:b6:82:a3:39:34:f8:e9:fd:e5:
         a2:c4:4c:aa:76:79:1f:f3:e9:9e:8e:03:6e:98:aa:00:36:6c:
         cf:5f:20:9d:cc:90:79:f9:62:62:f7:d5:36:f8:d7:53:ee:db:
         0a:e8:2a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:49:08 2025 by rpki-client