Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
File:                     76W2I0ehtkzqSaKrOrSYPDSGH7I.mft (raw, json)
Hash identifier:          NWgLgg8eazCrFTptdgs0GiZ3nDrfiUfA9G7WfnXWm0E=
Subject key identifier:   9A:C0:C1:32:97:C9:FF:C6:90:19:70:9E:08:82:3C:5D:D6:6F:FF:EB
Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
Certificate issuer:       /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Certificate serial:       0198D515F92B062AB61913CE95FD69C2D2FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
Manifest number:          7C
Signing time:             Sat 23 Aug 2025 04:00:43 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:43 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:43 +0000
Files and hashes:         1: 76W2I0ehtkzqSaKrOrSYPDSGH7I.crl (hash: 0piQF3cZCrxAuHDs0JNTduVPSaIjrlosdhXy3sBqzxw=)
                          2: OMuHrubfJWGwlNuzC30PEWcNCM8.roa (hash: M58bIYoQudUR9NbJLatM9UTd5vfdvPCjwJFrF7hjBGY=)
                          3: WnOPQ0ufHKuGIGeJgpa97dMJzZI.roa (hash: HZdjF63aWYiWvWoR/raQkcNq/IJsdTGCUZAkFXHzLn8=)
                          4: iHCOSESssENXgIrAg7szxGin4a8.roa (hash: D++50SWUTphE56/ef0P/p1C+NQyxcKhWsuhwzqYT+D4=)
                          5: kT-GBRdn5I-2tlMb_7_9SciQN9g.roa (hash: QjeGQjKJ8nc3raWH+8rzpohQUijqNjXsVOlYQC2T4vE=)
                          6: nNW4KSgPA--HMZbOvN0wrjE78RY.roa (hash: 84Hxv/gGXJN5VIyPdqcuH/H3o9PoVNXInlG1MH6WokI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:f9:2b:06:2a:b6:19:13:ce:95:fd:69:c2:d2:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
        Validity
            Not Before: Aug 23 04:00:43 2025 GMT
            Not After : Aug 24 04:00:43 2025 GMT
        Subject: CN=9ac0c13297c9ffc69019709e08823c5dd66fffeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0f:7b:f4:76:27:80:07:7d:be:e8:c0:70:38:
                    15:dd:50:93:81:1d:b2:bc:32:22:c8:d1:04:8f:14:
                    62:19:84:b0:e1:3c:c2:3f:bd:dc:e0:d7:aa:7d:68:
                    fa:17:0e:16:74:d7:1a:1c:a3:c3:6d:b9:f6:d2:f2:
                    ea:98:c5:a0:7f:e8:58:be:5c:85:08:da:5a:80:8c:
                    b2:d6:60:a2:cc:70:96:b0:15:83:5f:56:f9:b6:09:
                    e4:83:35:80:4b:e7:36:88:96:b6:93:75:bd:75:b1:
                    a4:3c:69:1a:f9:b3:d1:1b:c1:39:1e:73:2d:e3:4b:
                    75:7c:f9:19:c7:0e:f0:55:15:d0:60:35:11:3d:a0:
                    7d:79:fc:77:eb:11:86:ec:77:26:46:0e:1f:03:4e:
                    aa:54:72:4a:33:2a:07:d8:99:33:8e:65:2f:44:d5:
                    9e:71:b9:e7:36:f6:e6:8c:34:4e:62:88:84:94:27:
                    3e:e7:75:35:c9:58:6c:e3:e9:74:9e:72:04:cc:56:
                    67:01:4e:1f:4a:ec:42:bb:12:83:d6:46:e1:ee:51:
                    6d:f9:ad:e0:e1:aa:e8:58:a0:0c:1e:20:bc:0f:fd:
                    ae:ae:f6:e2:58:a0:4c:15:b6:50:41:20:e7:39:ec:
                    d3:36:1a:d8:55:5d:f4:a7:ed:3e:9e:88:93:e3:e9:
                    35:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C0:C1:32:97:C9:FF:C6:90:19:70:9E:08:82:3C:5D:D6:6F:FF:EB
            X509v3 Authority Key Identifier:
                keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:2f:65:9e:74:90:1d:ba:af:29:76:1b:59:98:f0:c4:c8:8e:
         0d:b9:bf:66:86:f6:c6:45:da:d7:2c:76:ee:2f:61:2f:42:ee:
         01:c8:45:e8:2b:f9:11:3a:74:6d:5e:64:c6:66:ec:34:a4:c4:
         40:c5:b6:2e:cd:07:df:ea:47:55:5c:2f:d6:01:88:e0:a8:58:
         27:f0:e2:04:8d:40:21:7c:11:62:10:21:b8:70:82:5c:60:76:
         62:4d:fc:29:19:4a:56:2f:16:03:56:82:bd:05:2b:58:79:c1:
         d4:4f:22:2e:92:9b:9e:7e:0d:9b:6a:36:05:2f:70:cf:ed:99:
         7b:74:19:ef:cc:7a:08:08:c1:1c:af:12:2a:fe:53:de:8f:a5:
         c1:c8:3a:72:20:3d:eb:dc:fd:22:6f:94:af:10:48:61:fd:f4:
         b9:3a:f9:d2:a8:3e:9c:93:4c:5f:d1:c0:10:66:90:cb:6f:e4:
         bc:e7:fc:81:5a:10:1a:3b:a5:24:c5:23:d3:42:42:2a:3e:f2:
         a1:7a:5f:9a:e7:d9:f0:a8:9d:f3:f3:f1:f5:69:6c:40:a0:d1:
         56:87:0d:5b:b0:cf:bd:e4:5d:10:09:19:98:24:df:ca:a8:46:
         18:be:56:fe:25:ba:d8:e0:66:73:59:8c:8a:7b:8a:85:77:e8:
         e9:28:60:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:17 2025 by rpki-client