Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
File:                     7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft (raw, json)
Hash identifier:          6QUZsSD9wSpapOoJEbDUM0p3SnXvLfmki3W8SWvoKro=
Subject key identifier:   01:7E:83:61:78:2F:D4:E4:E8:8B:4B:9C:60:1F:69:FC:9B:61:27:8A
Authority key identifier: ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C
Certificate issuer:       /CN=ed900a55518b679edc78faa9883ec6e6035ae71c
Certificate serial:       0198D4E062615EFA9A027A38CDFC4616372F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
Manifest number:          0407
Signing time:             Sat 23 Aug 2025 03:02:11 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:11 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:11 +0000
Files and hashes:         1: 1-ieyIqujcrCxJblAajzfComBT5M.roa (hash: n5puj2nwsSUZldVzpI+lBrVc/7elXyEjudzznV0aSbQ=)
                          2: 7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl (hash: y+l6gF2hUF7S9p/28CABImgxeaKddByPocalHGalUIc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:62:61:5e:fa:9a:02:7a:38:cd:fc:46:16:37:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed900a55518b679edc78faa9883ec6e6035ae71c
        Validity
            Not Before: Aug 23 03:02:11 2025 GMT
            Not After : Aug 24 03:02:11 2025 GMT
        Subject: CN=017e8361782fd4e4e88b4b9c601f69fc9b61278a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9e:7b:68:7e:e8:d9:ac:5e:72:49:0c:58:4c:
                    eb:5e:da:76:49:88:c6:aa:7d:a5:0b:e9:0d:53:47:
                    c0:52:50:1b:11:4a:14:bb:ed:e4:ca:10:83:b3:ff:
                    f7:94:3f:f1:cb:15:3c:7c:c2:ac:66:0b:d1:b4:6d:
                    e1:ff:44:f9:a3:bf:05:23:5b:29:e9:e3:da:75:c0:
                    b1:d7:50:53:52:83:72:fe:24:8a:53:9f:1d:d9:9c:
                    3a:4f:ae:e4:9b:4c:3f:bc:13:dd:38:f0:22:4d:17:
                    8a:88:80:42:9e:e3:54:8b:5f:05:41:d2:e4:8e:81:
                    19:97:3c:b2:40:77:55:0e:76:6e:d3:3b:80:fc:34:
                    a9:d5:53:e0:cb:e4:ca:bf:80:2f:83:9c:24:68:ad:
                    41:f9:fc:95:bc:ec:b7:1e:59:30:4f:66:31:6a:58:
                    04:e7:90:7d:21:b6:99:c6:84:10:aa:ac:4f:4f:8d:
                    a8:d3:22:1e:26:67:15:56:fb:ef:2c:6f:89:77:a8:
                    86:fa:e9:50:f7:95:96:12:eb:73:5a:39:87:72:1e:
                    34:cc:3a:b9:af:b2:c5:48:f9:08:b1:33:80:3d:44:
                    cb:b6:dc:4b:da:e6:ba:f9:cf:86:8c:9b:cf:21:6d:
                    82:b3:49:77:74:b7:d2:d1:4c:8d:d5:f4:68:77:a0:
                    67:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:7E:83:61:78:2F:D4:E4:E8:8B:4B:9C:60:1F:69:FC:9B:61:27:8A
            X509v3 Authority Key Identifier:
                keyid:ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:2a:20:e6:a6:f9:5f:b4:46:12:df:c5:a4:9c:16:dd:ff:38:
         7b:70:a7:c8:62:09:f3:00:34:bf:d3:e2:79:26:c0:a0:f3:ca:
         c3:2d:55:13:65:90:9d:69:c5:08:38:60:63:8c:44:3b:7d:75:
         9a:ca:c1:24:f7:de:17:88:19:a8:6f:c6:ba:93:c9:eb:7f:79:
         28:49:ff:0f:1d:26:85:20:28:c0:96:86:bf:77:fc:2c:51:0d:
         3c:90:1c:2c:7c:3d:c6:53:3a:dc:48:19:17:af:06:40:cd:a9:
         29:6c:63:a9:30:22:15:0a:76:3b:5e:2d:60:fc:37:79:16:21:
         c7:ae:f0:66:d1:4c:61:a3:a0:31:f7:73:f9:58:e7:68:51:0d:
         59:c6:9b:dd:87:73:9c:61:97:ab:06:5b:98:6e:f1:b9:bd:2c:
         ac:aa:aa:ab:44:9a:ee:c7:64:b3:5b:a4:6f:4f:b4:d9:28:28:
         94:eb:c4:32:41:82:8d:f5:76:a2:b2:11:98:9c:66:28:e8:33:
         d0:07:c2:0e:93:73:c9:ad:cb:9f:02:87:08:23:a0:f3:5d:e2:
         e9:2b:04:1c:85:cf:9a:c8:31:b9:13:01:32:9c:bc:1d:85:10:
         ca:28:2f:5e:50:66:b3:97:c0:fa:0e:3b:09:86:2f:94:42:97:
         4b:d7:b4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:17 2025 by rpki-client