Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
File:                     t7GVtlEuyHh9maGy5OvYCIT5gLI.mft (raw, json)
Hash identifier:          6hDGPXYaMrordpctQgs502OqqOV6XfEr9vrWEG61DC4=
Subject key identifier:   02:FE:2B:2E:82:46:77:CD:3C:82:B8:ED:17:2E:C4:4C:CA:90:3E:05
Authority key identifier: B7:B1:95:B6:51:2E:C8:78:7D:99:A1:B2:E4:EB:D8:08:84:F9:80:B2
Certificate issuer:       /CN=b7b195b6512ec8787d99a1b2e4ebd80884f980b2
Certificate serial:       0197B77CA71A5A0ECA0E1EE78A490CFE7B5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
Manifest number:          0190
Signing time:             Sat 28 Jun 2025 17:01:29 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:29 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:29 +0000
Files and hashes:         1: 5w_9JQX98jnIEcg67nkgGTJIRO0.roa (hash: UWly5Q/cVxLTnL0NxMmtD+E+9W1QFCDtSfYzLoDl3EA=)
                          2: t7GVtlEuyHh9maGy5OvYCIT5gLI.crl (hash: jLSLPp6ko4bI5mbcXAxitac0qREGNBX5mwIdILgN47o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:a7:1a:5a:0e:ca:0e:1e:e7:8a:49:0c:fe:7b:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7b195b6512ec8787d99a1b2e4ebd80884f980b2
        Validity
            Not Before: Jun 28 17:01:29 2025 GMT
            Not After : Jun 29 17:01:29 2025 GMT
        Subject: CN=02fe2b2e824677cd3c82b8ed172ec44cca903e05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:04:71:7d:63:3f:fb:66:d7:ce:d9:22:bf:5c:
                    c8:3b:be:1a:93:28:d7:b3:10:09:c6:cf:96:19:ab:
                    82:3f:9f:f8:bf:ba:31:9d:91:e2:4f:c1:57:fe:aa:
                    c9:e9:e4:c8:37:85:8b:82:29:34:6c:10:3e:9a:a1:
                    6b:05:03:03:72:e0:15:6d:69:03:6a:56:2c:1f:fe:
                    5b:74:f5:5c:fd:8d:1d:98:e1:1f:f1:8c:b8:b5:41:
                    a3:d7:b7:88:67:41:20:77:42:57:91:1b:46:e1:a8:
                    23:bd:fa:29:42:ea:ca:75:8c:94:7c:ac:92:1c:00:
                    bf:10:81:c5:61:43:16:17:2e:07:2b:83:22:fd:ff:
                    aa:ec:29:42:96:a0:b8:8d:6d:57:d0:a2:93:23:96:
                    14:dd:67:b6:25:81:84:09:80:55:f4:00:52:3e:51:
                    66:4f:2f:91:e4:f2:61:3a:b0:8d:1c:98:56:3e:1b:
                    c0:c6:4a:cc:65:68:28:8d:2f:9d:5b:78:37:60:50:
                    de:47:7b:3b:d1:f7:1f:e5:7f:ef:c5:74:14:ab:9d:
                    57:0b:9c:37:60:92:89:aa:22:40:17:5e:cc:d6:80:
                    b3:09:fc:48:4f:54:de:c0:ff:b6:88:4b:c2:18:29:
                    98:a7:6d:78:85:83:2e:fc:8a:1e:34:e0:eb:6c:60:
                    da:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:FE:2B:2E:82:46:77:CD:3C:82:B8:ED:17:2E:C4:4C:CA:90:3E:05
            X509v3 Authority Key Identifier:
                keyid:B7:B1:95:B6:51:2E:C8:78:7D:99:A1:B2:E4:EB:D8:08:84:F9:80:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:a6:17:4b:d7:a8:78:98:88:6f:e4:77:5b:36:cc:44:a9:02:
         c8:d4:2d:89:9b:2f:10:8b:a1:d2:45:ad:29:11:23:ce:d2:77:
         1f:56:a2:81:53:31:4e:86:f1:aa:05:5c:3e:66:88:fd:a2:7e:
         4d:0a:cc:ae:7a:9c:a4:62:43:4d:ff:13:f8:84:bd:0d:de:5f:
         6e:26:df:f2:8b:55:5f:10:60:6d:41:eb:3b:17:7b:4c:c5:87:
         db:58:56:5c:3b:73:ea:b8:94:8e:73:24:af:56:7c:c3:84:ca:
         6d:7a:46:00:bc:11:d0:36:50:a0:0f:63:04:4a:12:6f:70:f5:
         05:4e:3b:c6:df:b2:99:0d:91:f0:2e:41:19:52:ef:e3:71:26:
         c4:b5:8c:5b:53:68:49:0f:f4:1d:a8:68:02:51:05:62:51:78:
         b7:fe:9f:82:11:96:79:51:4a:14:b7:f5:a9:86:0d:ed:d5:58:
         c8:1a:43:5f:53:36:15:8f:51:af:2f:ca:2f:0a:8c:3f:11:ea:
         20:bd:57:af:22:54:9a:44:57:b3:80:49:8b:e5:ae:f0:85:ac:
         51:82:a3:07:fa:4e:f7:47:94:28:30:76:61:4a:15:d2:59:01:
         6b:99:39:5e:ff:19:ae:0b:34:57:5d:61:90:c1:d4:f4:80:b4:
         9f:3f:5d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:24 2025 by rpki-client