Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
File:                     cQ7F-mjPme49u9GUnoIERQOh33I.mft (raw, json)
Hash identifier:          YgP2GElMSfOqtUjPx8lJEr/OGgjIY2FrOU9fjdKpo68=
Subject key identifier:   83:71:D4:FA:2A:97:2E:EB:A4:3D:23:A5:0F:30:81:82:C0:D2:AB:19
Authority key identifier: 71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
Certificate issuer:       /CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Certificate serial:       0198D583ADB796B6EBD20BD5DB09E5E06BE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
Manifest number:          05B7
Signing time:             Sat 23 Aug 2025 06:00:33 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:33 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:33 +0000
Files and hashes:         1: cQ7F-mjPme49u9GUnoIERQOh33I.crl (hash: 32yE5fpOQEy0sq96L1PwYb8a53xxwqghKkglS98hOhY=)
                          2: jXqxCPk5SJyIm-cEEFcxqQgl9HU.roa (hash: 55uzcUC8JFxJT35uBCSfhKl+d0CAv18T7HkOsVb7EDM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:ad:b7:96:b6:eb:d2:0b:d5:db:09:e5:e0:6b:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
        Validity
            Not Before: Aug 23 06:00:33 2025 GMT
            Not After : Aug 24 06:00:33 2025 GMT
        Subject: CN=8371d4fa2a972eeba43d23a50f308182c0d2ab19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d7:14:db:ef:89:bf:b2:dd:9b:d1:28:40:18:
                    b5:a0:e5:99:6f:5a:bf:47:9b:74:2f:b3:9b:83:0e:
                    22:ee:bc:e0:b8:ce:ed:7b:49:7a:4b:fa:d2:4f:4f:
                    b9:af:aa:7b:a3:dc:32:8b:71:8d:ec:61:8b:7a:e1:
                    80:39:28:fe:37:37:63:72:6c:d1:3d:c9:e5:01:86:
                    c1:9f:a9:85:eb:68:2d:2f:1e:2a:5a:ae:68:3e:09:
                    ce:2e:3c:78:9a:0a:f9:71:67:8f:f7:32:41:4a:55:
                    4c:3b:f3:06:b6:8a:3c:6a:79:ed:b5:24:7e:84:3f:
                    64:4c:72:f7:63:08:2e:db:bc:0c:15:cf:dd:c0:4c:
                    69:94:c6:53:5e:3b:6f:99:70:fc:93:fb:d6:f4:5b:
                    80:dd:03:58:96:18:be:84:c9:d8:13:c8:7d:57:a1:
                    e1:1c:cb:ed:be:30:49:53:2d:61:b7:44:b8:48:5e:
                    3f:10:0b:fd:32:86:31:37:2d:28:46:2c:25:69:35:
                    5b:00:53:46:06:04:04:08:d5:d7:3a:a1:80:66:63:
                    14:33:58:a7:0a:05:7c:91:a5:bb:10:3a:41:84:a5:
                    54:8c:28:61:b6:03:71:6b:65:a1:f0:57:4a:11:e8:
                    10:30:d1:17:aa:83:1b:06:94:ec:ab:df:9b:a7:3f:
                    7a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:71:D4:FA:2A:97:2E:EB:A4:3D:23:A5:0F:30:81:82:C0:D2:AB:19
            X509v3 Authority Key Identifier:
                keyid:71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:0f:55:9d:63:27:9c:5c:7e:5e:58:90:85:5f:db:a0:8a:f0:
         c1:e6:a2:e8:1f:79:d1:80:0d:4c:92:55:be:b3:a0:37:a0:00:
         0e:38:a3:cc:59:5a:ca:85:d5:94:e4:e3:f2:b2:66:58:c6:d4:
         ee:f6:10:3b:5f:de:23:e2:90:df:34:53:7f:5c:f7:96:98:57:
         bc:8d:df:a4:79:bd:9a:9b:37:08:c7:5b:4f:3a:0e:25:2d:9c:
         e3:01:e3:8e:bf:66:b2:23:95:1e:b6:2d:f5:4b:69:35:64:ec:
         72:3e:c9:e8:1d:df:66:da:44:d2:32:06:b8:e7:d1:f3:08:26:
         64:b9:84:b7:0c:2b:90:af:62:0d:22:44:c0:06:ef:80:57:ab:
         aa:52:c1:61:c7:f7:64:37:fa:f4:eb:60:64:c2:61:28:8a:c6:
         7e:84:b0:cc:8a:ac:d3:fe:cf:d6:3f:eb:ea:33:b7:7d:9a:b1:
         a7:b3:2f:f9:be:e6:e5:e5:32:10:3c:90:bf:ff:05:4a:2d:0f:
         83:b0:bb:25:48:1f:17:a4:1b:ca:55:a7:ea:51:cc:ff:94:60:
         7b:be:39:1b:f0:ec:2f:76:67:34:6c:c2:a6:ec:3e:e7:2b:67:
         10:c0:96:2a:0f:71:e4:0f:24:46:fb:81:4d:90:75:b4:60:43:
         a2:5b:90:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:19 2025 by rpki-client