Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
File:                     7CSoJiAgkayDGfDwbreW_YJCKw8.mft (raw, json)
Hash identifier:          T0kF4itHzYA/XvQqsekqG0VW82ijUpJtn6Wao25BqfU=
Subject key identifier:   5E:0F:B4:95:50:38:F3:B1:8F:35:A6:5E:79:F5:06:5C:A1:82:6C:76
Authority key identifier: EC:24:A8:26:20:20:91:AC:83:19:F0:F0:6E:B7:96:FD:82:42:2B:0F
Certificate issuer:       /CN=ec24a826202091ac8319f0f06eb796fd82422b0f
Certificate serial:       0199FBEAA0354B96BA2F8C9D8AA6EB6E8BC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7CSoJiAgkayDGfDwbreW_YJCKw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
Manifest number:          82
Signing time:             Sun 19 Oct 2025 10:01:21 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:21 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:21 +0000
Files and hashes:         1: 7CSoJiAgkayDGfDwbreW_YJCKw8.crl (hash: LAnGI+NkYI9uMzsK7QIRCL7NtnuHGhRZUPwu1lGBVvs=)
                          2: EH144RlS9tYegrfhZ25_cqW-gBI.roa (hash: Ttw1qNIRRS2B0AROxbo5XeY9lM7BFHJCMEp5DgGhToo=)
                          3: VmGXZsZgI4pvH1fCkBq8qaWgLCs.roa (hash: sTPKL68aWFgc68j11xhbS7hhl1djwaAr+lQ2FflBKks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7CSoJiAgkayDGfDwbreW_YJCKw8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:a0:35:4b:96:ba:2f:8c:9d:8a:a6:eb:6e:8b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec24a826202091ac8319f0f06eb796fd82422b0f
        Validity
            Not Before: Oct 19 10:01:21 2025 GMT
            Not After : Oct 20 10:01:21 2025 GMT
        Subject: CN=5e0fb4955038f3b18f35a65e79f5065ca1826c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:76:12:51:06:a2:7c:24:c2:17:cf:f9:05:4e:
                    59:a3:fb:bf:82:65:fc:1b:6a:30:7f:20:71:3f:2f:
                    0e:dd:5d:a0:11:50:cc:7c:e5:ff:9c:83:cb:49:57:
                    49:8f:ac:43:bc:70:68:4b:16:92:75:1e:d2:07:8f:
                    b7:24:3a:ef:1a:86:89:e3:ca:01:02:1e:be:c0:95:
                    b9:11:1c:0c:61:c3:a7:69:b8:05:7e:6d:4f:6f:66:
                    b0:33:92:49:b3:8b:fa:f7:a1:6f:ac:91:10:37:60:
                    09:c1:ff:55:ce:33:31:d7:07:bb:22:66:dc:3c:de:
                    f2:7f:cb:01:07:60:e1:c8:13:a0:39:37:33:0f:dd:
                    f6:68:64:44:3a:3f:c0:a4:c7:de:f8:56:f8:32:9a:
                    de:66:f0:e0:5a:86:2e:d2:5f:f4:7a:22:d9:93:73:
                    9c:a7:c0:df:d8:93:72:69:de:c2:0d:d5:c5:ad:10:
                    2f:61:7c:69:ea:7e:be:89:a7:47:d0:57:e8:76:12:
                    c5:d9:90:a3:db:ae:83:ef:92:dd:56:bd:a6:96:f0:
                    00:fc:41:4f:67:7b:4f:08:c5:69:79:c6:93:e2:70:
                    ff:e3:22:89:19:4d:c6:35:46:c0:5d:64:81:52:b7:
                    18:79:dc:bf:75:45:85:1c:cb:8b:5f:76:42:e9:24:
                    92:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0F:B4:95:50:38:F3:B1:8F:35:A6:5E:79:F5:06:5C:A1:82:6C:76
            X509v3 Authority Key Identifier:
                keyid:EC:24:A8:26:20:20:91:AC:83:19:F0:F0:6E:B7:96:FD:82:42:2B:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CSoJiAgkayDGfDwbreW_YJCKw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:40:ae:21:0a:c6:55:77:eb:af:1c:bc:8b:b0:8d:88:5d:9f:
         40:bc:1d:d0:20:ec:95:7b:c8:37:0b:8c:c6:f2:0f:95:b3:ed:
         89:4c:08:68:9f:e2:fa:eb:12:d0:f5:14:50:d2:7a:ca:f5:57:
         a2:83:c5:65:45:3f:99:31:25:dd:fd:36:da:77:a5:35:1c:9d:
         a0:89:2c:a9:af:49:bc:23:7c:b7:49:54:1b:72:6e:97:b5:10:
         7e:44:9e:1b:2b:b0:91:41:ef:31:b2:35:33:06:0f:40:02:36:
         d3:31:ce:f2:cc:4e:21:89:72:0d:c2:8a:a0:26:7a:6e:c7:46:
         6c:f3:2f:f2:67:4d:7c:a0:a6:be:01:92:b2:d8:a3:5d:05:51:
         1c:e3:35:6b:30:8f:02:35:aa:ae:fd:98:6d:a3:72:d7:b5:a9:
         ab:cc:8b:35:4a:cf:0e:86:85:3c:83:be:37:d6:7d:3e:46:6b:
         57:f0:96:21:b4:bb:22:96:b4:d4:68:f1:6a:fc:d5:1c:9b:51:
         cc:a2:c0:a5:15:68:67:e3:e3:ac:0e:61:d5:cc:e0:68:b6:87:
         5c:a4:31:27:22:e6:70:32:36:ca:3e:99:65:90:b7:4a:cb:e0:
         6f:4b:99:d0:f6:5b:f1:4e:64:5c:1a:87:fc:b8:5e:d8:3a:b9:
         e2:b9:55:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:07 2025 by rpki-client