Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft
File:                     eXe1XjT_1yB1-92gOaZbNx3jmCA.mft (raw, json)
Hash identifier:          ctY+VlyNQgISYEIlXvTcZZOllfmOpWAvP7HrQDLxY9I=
Subject key identifier:   7B:97:86:C9:25:DB:10:34:1E:13:A9:48:02:96:19:EE:66:66:DD:3E
Authority key identifier: 79:77:B5:5E:34:FF:D7:20:75:FB:DD:A0:39:A6:5B:37:1D:E3:98:20
Certificate issuer:       /CN=7977b55e34ffd72075fbdda039a65b371de39820
Certificate serial:       0197C803896F051F07D6BC0A3AE1877B122B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft
Manifest number:          0BD9
Signing time:             Tue 01 Jul 2025 22:02:44 +0000
Manifest this update:     Tue 01 Jul 2025 22:02:44 +0000
Manifest next update:     Wed 02 Jul 2025 22:02:44 +0000
Files and hashes:         1: Tx774YWupF3TJKc5zuGEprJ-8Q8.roa (hash: 6EvMus28/r2hOkn9lsQE7epJ2J6h3GLbCRAmFL/wVzM=)
                          2: eXe1XjT_1yB1-92gOaZbNx3jmCA.crl (hash: yDedDIT42v45F2BiVnb+3mVFDySzU4IsvCgFGdaPCw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c8:03:89:6f:05:1f:07:d6:bc:0a:3a:e1:87:7b:12:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7977b55e34ffd72075fbdda039a65b371de39820
        Validity
            Not Before: Jul  1 22:02:44 2025 GMT
            Not After : Jul  2 22:02:44 2025 GMT
        Subject: CN=7b9786c925db10341e13a948029619ee6666dd3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a6:2f:b8:67:cf:44:3f:da:6f:23:4e:64:30:
                    01:3b:50:15:76:c4:81:35:5d:7a:46:5c:f4:03:cb:
                    ed:58:61:5f:48:aa:a7:20:a7:74:23:30:58:9b:16:
                    82:95:e4:69:b2:15:14:1d:fa:e1:f4:2d:bd:36:36:
                    4d:4a:de:6c:f4:5c:cc:87:03:41:ec:c0:2e:6e:da:
                    56:29:3e:7c:55:11:68:7c:c6:16:e2:84:c2:07:6d:
                    e8:bb:54:13:03:32:0d:04:bb:d0:35:65:59:43:12:
                    d5:14:61:81:19:c5:06:bd:ee:97:25:ee:66:bd:ab:
                    a9:f6:71:1d:81:b5:9e:5a:a9:a9:c0:01:4a:e6:41:
                    9c:e0:33:3a:3b:20:1c:a7:5b:2a:3c:83:1c:03:fb:
                    a3:d5:5a:3c:e8:61:46:e6:e8:56:13:f4:ca:16:60:
                    62:4f:57:3d:f4:32:4f:a5:99:c1:bb:3a:d4:9c:9a:
                    ed:b2:db:9c:bc:61:10:b9:27:ef:b1:1e:f8:d4:aa:
                    9d:40:57:ba:88:45:03:cf:86:51:b4:62:55:8b:cb:
                    67:4d:6a:f9:e1:62:5c:76:c4:4f:bf:c0:70:81:e0:
                    f5:60:7a:fb:27:58:a9:52:d8:f3:01:c6:78:32:6b:
                    6b:af:73:89:65:91:5e:e3:6e:f7:74:6a:64:f7:fd:
                    45:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:97:86:C9:25:DB:10:34:1E:13:A9:48:02:96:19:EE:66:66:DD:3E
            X509v3 Authority Key Identifier:
                keyid:79:77:B5:5E:34:FF:D7:20:75:FB:DD:A0:39:A6:5B:37:1D:E3:98:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:13:34:5a:ff:85:eb:c6:60:99:a6:18:fd:92:67:b3:8e:83:
         9c:3a:7f:4a:7c:ee:18:05:5c:b2:0b:12:d4:cb:fb:c6:86:66:
         82:bc:09:2d:b7:11:ce:cc:aa:04:1e:a7:51:68:f3:e5:9c:b5:
         16:5c:2c:32:ef:95:69:94:7d:01:65:eb:8c:3f:ef:a2:67:c8:
         21:fb:ca:a6:f8:d2:0c:cf:53:b4:74:1c:15:30:e7:1c:85:b3:
         2e:48:58:5e:39:20:8d:14:84:84:b3:55:22:99:ee:ea:5c:53:
         7a:20:58:f5:c1:22:11:70:b8:84:ac:56:35:e2:45:40:00:bf:
         b4:a2:9b:82:99:7e:56:38:1c:b5:02:80:51:dc:16:a6:07:e3:
         5a:94:55:62:d7:a2:65:03:29:f0:58:98:5e:11:90:07:08:f0:
         71:29:61:6b:bd:33:77:63:cc:35:29:0f:62:ed:2e:b0:5b:8c:
         f3:b1:10:b8:82:4c:a1:55:5b:85:27:7c:b2:f6:e6:41:33:ad:
         1e:d0:35:26:1f:aa:45:e7:4a:f3:f6:24:5a:6c:36:6a:af:ed:
         40:19:1c:90:05:aa:b1:ab:c0:8a:97:fc:a7:8b:5f:bc:5b:a2:
         76:e3:fd:e3:86:0f:c2:fe:5c:6c:67:66:9d:0b:4e:aa:70:a1:
         31:4b:f0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:37:23 2025 by rpki-client