Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft
File:                     7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft (raw, json)
Hash identifier:          286CydxGTMRejsZtbWeFYUSW7mOGb/x8sx/fxK8bmKI=
Subject key identifier:   93:BA:DB:8D:9F:B1:FC:7E:6C:E8:5E:84:BA:C0:26:71:C8:97:82:95
Authority key identifier: EF:E1:53:41:D2:AF:C6:A8:57:A5:84:19:9F:C7:FB:07:C1:70:1F:C6
Certificate issuer:       /CN=efe15341d2afc6a857a584199fc7fb07c1701fc6
Certificate serial:       0198D65F2D57420F13C5D641862464A1B511
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft
Manifest number:          0D90
Signing time:             Sat 23 Aug 2025 10:00:18 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:18 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:18 +0000
Files and hashes:         1: 7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl (hash: 7J1PElUCIDtY04c/0wfh4d47QPdLGnKTq6nFKRBand8=)
                          2: ZJw_Jukbo_heQPRMAmDWcBlKQaQ.roa (hash: bPVF2gLa5okAyNdgsZQT7rjoKFmL6l2YkqA4bzlxF0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:2d:57:42:0f:13:c5:d6:41:86:24:64:a1:b5:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efe15341d2afc6a857a584199fc7fb07c1701fc6
        Validity
            Not Before: Aug 23 10:00:18 2025 GMT
            Not After : Aug 24 10:00:18 2025 GMT
        Subject: CN=93badb8d9fb1fc7e6ce85e84bac02671c8978295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e9:a0:76:2a:83:f6:89:e3:00:0b:69:78:a0:
                    3a:d2:57:76:a7:b8:84:ac:70:08:35:80:9a:db:9a:
                    52:e4:ab:02:9b:74:e5:b1:6b:36:6c:e7:66:60:bb:
                    e5:bf:e6:23:e0:f1:60:65:2f:f1:b2:a5:14:10:06:
                    07:75:56:f4:ab:0e:ac:08:32:4a:4f:fd:ad:c7:cf:
                    2a:70:9d:2a:13:64:36:c0:55:f6:df:26:73:21:31:
                    ec:34:f7:fc:c8:0b:9e:82:16:a8:b5:d4:5b:4b:9b:
                    b9:59:ba:34:ae:49:df:6e:7f:3b:0e:08:ec:0f:7d:
                    7d:53:26:b4:30:fd:23:f2:6a:46:e7:b9:d4:f2:a1:
                    59:4b:04:57:98:75:a0:3b:10:24:36:17:23:1c:f8:
                    4d:2b:45:e4:76:9f:54:e7:ca:74:11:46:6b:d3:b8:
                    7b:89:b7:db:97:f2:f2:01:54:3b:40:25:2c:8d:c4:
                    2c:1e:d6:d2:af:86:8e:fb:49:cf:1a:6b:70:51:a7:
                    03:67:27:90:a1:69:e2:8e:a1:5c:26:21:c6:2c:b5:
                    82:7a:c1:b3:1e:24:64:5c:6e:b5:7f:35:d7:8c:9f:
                    3c:26:cc:c0:ec:c8:f7:0d:87:da:96:2a:cb:4b:40:
                    81:97:cf:23:d2:b9:bc:af:c4:7d:4c:f0:96:63:7c:
                    96:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:BA:DB:8D:9F:B1:FC:7E:6C:E8:5E:84:BA:C0:26:71:C8:97:82:95
            X509v3 Authority Key Identifier:
                keyid:EF:E1:53:41:D2:AF:C6:A8:57:A5:84:19:9F:C7:FB:07:C1:70:1F:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:f9:27:7c:e6:aa:ed:a3:41:c0:f4:7f:33:ac:9f:11:80:8b:
         a1:ea:95:55:25:9a:b5:f1:45:df:3c:e6:96:1e:f3:1b:70:22:
         f7:d6:79:de:1b:b9:20:90:8b:4c:d6:e4:75:4f:7c:3b:5e:94:
         de:b9:4d:ba:a0:00:5d:dd:05:da:3c:2c:7b:51:c7:b3:0d:83:
         bc:62:b4:b4:b4:3e:e1:4b:ac:27:ad:99:de:d0:34:c3:2d:8b:
         8a:0f:bb:16:e8:e4:f1:d1:b0:a2:ec:05:89:04:3b:34:87:77:
         7d:24:dc:23:d4:f3:11:01:bc:2c:40:df:8a:c3:93:92:7a:22:
         d0:f5:bc:d0:67:85:95:b5:fd:dc:90:57:69:4b:9d:fd:03:b6:
         44:85:29:2e:72:57:a9:51:19:a3:3b:fb:b1:01:ad:48:f4:7e:
         94:5c:30:59:1d:4f:79:72:be:bd:ef:a3:d2:9d:f8:ce:ea:17:
         fc:28:fa:70:8d:92:5b:74:38:ae:82:08:9d:f7:77:5e:9e:48:
         00:62:4b:5d:72:b7:60:58:18:c3:cb:0c:4b:3d:39:fc:48:8c:
         27:d8:d7:35:7c:f8:42:d9:3a:5d:2f:78:c5:fd:36:26:0a:37:
         14:9d:ce:dc:90:20:96:d0:23:49:21:84:2f:e1:d3:e7:d5:bb:
         d7:be:c0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:25 2025 by rpki-client