Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
File:                     7kDaG04w_7sypOSkt61zHAMeRCk.mft (raw, json)
Hash identifier:          uDIx3zoDj7EiXa914hNIaKxpXsQdh776SFuqajEP7Xw=
Subject key identifier:   74:E7:10:4F:E6:2E:11:F7:B5:42:99:B1:6B:5D:A6:A0:27:42:AF:83
Authority key identifier: EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29
Certificate issuer:       /CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
Certificate serial:       0199FB7C7CEF274D389A7CF074297CABE2FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
Manifest number:          0575
Signing time:             Sun 19 Oct 2025 08:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:03 +0000
Files and hashes:         1: 7kDaG04w_7sypOSkt61zHAMeRCk.crl (hash: 9ycHWx3U0ea1BLVOT4XUGiY9DGgzktNEmjCFaKUfdyM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:7c:ef:27:4d:38:9a:7c:f0:74:29:7c:ab:e2:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
        Validity
            Not Before: Oct 19 08:01:03 2025 GMT
            Not After : Oct 20 08:01:03 2025 GMT
        Subject: CN=74e7104fe62e11f7b54299b16b5da6a02742af83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:74:e3:de:34:eb:82:a9:26:c3:5b:2f:bb:39:
                    81:f3:a7:2f:94:98:4b:bf:31:93:13:41:4e:ba:3f:
                    5c:71:c4:27:40:5b:34:3e:23:91:9e:c4:ed:50:49:
                    87:20:77:75:b8:87:fd:fd:d6:55:69:47:93:15:cf:
                    24:ef:f0:54:67:8c:eb:a8:78:a5:14:83:cb:43:64:
                    44:45:9f:dc:8f:54:b9:44:14:35:ba:42:98:ef:7c:
                    dd:26:6d:09:2f:f0:4e:e5:ef:ee:af:b1:1f:10:88:
                    a0:80:09:39:48:3e:6d:28:26:52:a7:c8:6d:dd:0b:
                    07:bf:8e:85:a6:d9:14:5e:26:2a:d0:5e:6e:f3:62:
                    0e:f3:5d:bb:24:07:17:09:5e:a5:7d:0b:64:2d:90:
                    28:4f:d3:18:41:93:e1:73:26:93:69:f9:e4:3b:32:
                    b6:d6:57:d7:3f:3b:20:83:99:f1:5d:1b:3e:a1:ec:
                    7d:5e:6e:5e:c9:bf:5f:88:e7:0d:7b:ed:fc:6f:c4:
                    c3:eb:4c:6f:69:92:4c:a1:4b:b6:6f:6f:2c:bd:30:
                    4d:21:64:ab:f7:ed:1c:96:8f:b5:49:59:c6:0b:37:
                    93:18:8b:83:15:38:62:1a:e8:1b:81:f8:31:0c:24:
                    67:bf:50:b4:b6:e8:b1:e5:86:a5:29:b9:19:e9:49:
                    cf:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E7:10:4F:E6:2E:11:F7:B5:42:99:B1:6B:5D:A6:A0:27:42:AF:83
            X509v3 Authority Key Identifier:
                keyid:EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:6f:39:87:b3:fa:8b:bc:f2:61:89:d9:bb:9a:fb:3d:39:4c:
         50:2e:00:7d:47:10:0f:f3:ad:61:b8:60:7a:f5:30:d9:63:70:
         5d:62:24:4c:cd:b5:88:d0:9d:a9:1a:24:3c:49:45:97:ca:4c:
         72:90:63:f3:93:1a:b8:53:5c:33:ec:b0:ca:7f:e4:01:d3:27:
         6f:3e:62:16:6f:3b:d2:38:d2:b2:02:5b:db:aa:aa:69:9c:c6:
         8e:45:b8:7c:5b:a8:19:29:87:a7:ee:01:7b:4e:e3:07:1f:32:
         96:31:20:35:8f:8c:49:1c:ce:11:a8:27:73:59:4d:5b:00:09:
         fe:5a:e4:e3:7d:dc:09:b9:61:3a:6d:95:b4:37:7f:90:bb:49:
         ab:67:54:30:71:e5:e4:6c:8f:00:79:92:51:44:bc:28:d2:0c:
         99:a0:3b:7e:1f:f2:68:50:41:4b:16:11:0c:97:d6:ee:b6:34:
         99:01:07:0d:da:57:eb:0b:60:34:5e:d2:6e:f3:5d:4a:09:77:
         c4:ab:34:c5:01:ed:14:44:a4:47:01:53:7c:93:f2:61:5a:f9:
         4a:aa:2e:4e:e8:b0:6e:bb:c6:66:f9:e0:8d:e3:db:b5:44:58:
         6d:72:ca:16:02:76:45:24:8b:59:b3:85:c3:ab:e6:20:85:f7:
         25:ff:3a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:15 2025 by rpki-client