Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
File:                     7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft (raw, json)
Hash identifier:          kY9KtE7ZmW+xMJdL/mJdEgOLAb/QRAfFv0a3Ju30GiE=
Subject key identifier:   09:CC:05:35:A0:58:5F:59:29:B4:01:0E:EB:00:FC:A6:69:94:FF:9A
Authority key identifier: ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
Certificate issuer:       /CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Certificate serial:       0198D4A7B1320A99274B3BED90D05CC0403F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
Manifest number:          059A
Signing time:             Sat 23 Aug 2025 02:00:16 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:16 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:16 +0000
Files and hashes:         1: 7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl (hash: TxCe5NH33T0L85lEyQ/eL4Im+O+uSxd5vDIooDBD6Rw=)
                          2: V8rwHt-KBtkyfMDcY6GbBS5O3lg.roa (hash: VKRjbMp2cA/7F+gIKAoYPT0t4kmN1vcNg+P5YqdMBPI=)
                          3: vLkg6vsM00eiYmKWC5SDs25Gs0o.roa (hash: laQ0wIfMQs3t8Q/rYbMaQJvlRI3pM205xGMs2yoH4OQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:b1:32:0a:99:27:4b:3b:ed:90:d0:5c:c0:40:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
        Validity
            Not Before: Aug 23 02:00:16 2025 GMT
            Not After : Aug 24 02:00:16 2025 GMT
        Subject: CN=09cc0535a0585f5929b4010eeb00fca66994ff9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8a:46:81:6e:93:2b:dd:0e:af:c2:2e:29:50:
                    d4:c4:38:6c:b1:df:6b:06:c3:fd:a8:96:a7:e2:d1:
                    37:e3:2b:39:c0:cf:e3:60:15:d1:1b:67:a5:d1:c7:
                    0b:7d:a7:12:29:b5:a4:84:b2:42:61:6b:62:8c:c2:
                    d1:01:35:51:71:2d:2f:5f:73:68:0f:02:6b:38:d9:
                    61:53:95:d7:27:f3:c4:f4:4a:70:56:2b:c1:47:8f:
                    c3:1d:74:22:19:2d:ae:ed:29:49:2b:3a:9f:e1:d0:
                    64:64:9c:94:7e:e2:42:d3:63:a1:c9:bf:8f:88:b8:
                    24:41:31:11:57:64:bb:bf:03:df:e5:3b:a0:6d:ef:
                    f0:d1:cb:06:91:5d:a0:57:1b:4a:74:12:f4:c2:97:
                    a2:6d:80:b4:b9:9a:ea:81:ee:a9:3b:45:06:d2:dc:
                    75:c4:8f:33:9e:dc:d8:31:3c:92:1a:dd:d1:b3:99:
                    e3:76:f1:73:7e:28:96:4a:43:f0:dc:7d:34:2f:8b:
                    5c:ff:db:17:8d:75:f8:47:44:9c:46:59:d9:21:56:
                    bd:11:90:20:0f:4b:41:af:7e:58:7b:82:e2:01:a3:
                    3d:53:fd:bc:fc:4d:8f:c4:7c:67:91:c2:08:85:b1:
                    5d:f4:d1:29:5b:e6:2e:24:b0:76:20:58:64:ef:0d:
                    cc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:CC:05:35:A0:58:5F:59:29:B4:01:0E:EB:00:FC:A6:69:94:FF:9A
            X509v3 Authority Key Identifier:
                keyid:ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:de:7c:dd:97:97:d5:8a:28:21:c9:8a:9a:4a:13:2c:92:e1:
         74:fc:c5:46:96:1d:01:48:cc:1c:e3:d5:df:cd:58:90:f6:a6:
         46:bc:3c:7d:ab:b2:f8:ed:62:e3:d1:34:c6:a1:95:43:b0:59:
         66:53:89:03:84:20:af:81:ec:ce:d0:28:7e:37:e3:68:4d:8c:
         0b:07:a2:97:72:a1:4f:d8:af:dc:4b:8d:75:c5:08:d8:e7:31:
         c7:a5:82:3b:22:03:82:fe:97:b3:df:92:9f:6d:72:45:4b:1f:
         8f:3e:5d:c7:ce:cc:64:d2:52:87:78:26:46:f9:22:98:16:33:
         91:18:e5:c9:64:45:95:65:66:3a:34:27:a8:2b:83:43:98:04:
         bd:3f:c3:5f:99:ff:34:43:d5:bd:1b:64:ea:bb:e6:c0:78:ed:
         76:84:93:72:2b:ec:5b:ec:80:49:98:42:10:2d:c8:7e:22:d3:
         68:35:59:19:fe:27:40:c2:64:6e:85:73:90:0e:62:ec:86:9c:
         27:e7:97:0e:93:53:01:32:53:0a:9b:0a:01:9a:2e:b7:ef:c2:
         ef:69:45:39:98:a8:eb:06:04:67:1d:68:81:f6:90:d1:b0:a8:
         6e:3b:56:63:7b:66:47:40:1d:99:16:81:0c:4b:15:4b:54:19:
         1f:6d:e3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:10 2025 by rpki-client