Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.mft
File:                     Mo7_u7_VU10-cbpuqBXuSQXBwg0.mft (raw, json)
Hash identifier:          +/EXArt5PF5w9FtbxjI1Wag57zgxOlyTrpqosMKZ9WI=
Subject key identifier:   72:A2:CC:27:B9:9D:9B:46:22:3D:06:7E:8E:EA:43:83:37:18:06:7D
Authority key identifier: 32:8E:FF:BB:BF:D5:53:5D:3E:71:BA:6E:A8:15:EE:49:05:C1:C2:0D
Certificate issuer:       /CN=328effbbbfd5535d3e71ba6ea815ee4905c1c20d
Certificate serial:       0198DA3C3FDB94D287FE989E6698CDDF0A63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mo7_u7_VU10-cbpuqBXuSQXBwg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.mft
Manifest number:          0BF4
Signing time:             Sun 24 Aug 2025 04:00:38 +0000
Manifest this update:     Sun 24 Aug 2025 04:00:38 +0000
Manifest next update:     Mon 25 Aug 2025 04:00:38 +0000
Files and hashes:         1: Mo7_u7_VU10-cbpuqBXuSQXBwg0.crl (hash: LJ8tnKSY27K/IdEX7HhhPtPqtrrLD2UQlKgjFCHkD9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mo7_u7_VU10-cbpuqBXuSQXBwg0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 23:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:da:3c:3f:db:94:d2:87:fe:98:9e:66:98:cd:df:0a:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328effbbbfd5535d3e71ba6ea815ee4905c1c20d
        Validity
            Not Before: Aug 24 04:00:38 2025 GMT
            Not After : Aug 25 04:00:38 2025 GMT
        Subject: CN=72a2cc27b99d9b46223d067e8eea43833718067d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4b:26:d8:a7:bf:1f:47:c3:d1:9a:2a:5d:2d:
                    a8:16:4a:7b:1b:5c:b0:e7:2e:a8:8e:57:a8:e0:f4:
                    8e:8e:d1:05:7f:e8:7b:26:fc:a4:9d:7c:6f:53:3b:
                    9a:37:b3:b1:75:96:f8:11:bd:f2:ec:f4:ad:1e:17:
                    68:8e:74:ab:8e:83:35:f8:86:82:ba:ef:b0:97:92:
                    a4:d2:34:14:1f:15:bb:3a:d9:88:9e:d2:42:30:ab:
                    6a:80:3a:c4:73:4a:cb:ac:ef:a0:33:33:9a:04:d0:
                    73:3d:42:28:75:a2:7d:c3:d6:4a:78:31:de:88:d6:
                    5a:3d:28:7b:ee:3d:9c:fe:93:e1:a2:1e:8a:a5:26:
                    7e:ce:9e:97:8e:a7:79:1b:f8:10:13:e3:e8:37:62:
                    76:b4:1a:34:d2:82:08:1e:e2:4e:2d:31:e9:55:83:
                    f8:4d:86:7e:61:82:23:1d:5f:bb:27:98:2a:46:ef:
                    6f:4f:ad:51:91:45:79:b0:e2:9e:5a:70:05:63:b3:
                    6b:d9:4b:ee:0c:4c:1d:62:1d:92:ad:2f:69:fa:32:
                    64:29:17:b3:c1:9d:c7:1f:5b:1b:a9:28:16:ee:80:
                    b7:07:4f:df:29:62:4e:9c:f6:8c:f9:86:9b:0e:2c:
                    62:dd:b9:ff:03:f3:0c:34:d5:31:db:5e:0a:ae:6a:
                    1a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A2:CC:27:B9:9D:9B:46:22:3D:06:7E:8E:EA:43:83:37:18:06:7D
            X509v3 Authority Key Identifier:
                keyid:32:8E:FF:BB:BF:D5:53:5D:3E:71:BA:6E:A8:15:EE:49:05:C1:C2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mo7_u7_VU10-cbpuqBXuSQXBwg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:4a:a8:60:ee:41:60:e8:01:03:95:7b:4d:95:8f:9b:bf:7d:
         d7:da:ed:ec:4d:4d:7f:89:1e:b2:37:cc:8f:cb:80:6a:44:ce:
         48:b4:17:d6:7d:17:f1:0b:3a:30:a1:b1:6c:cd:47:ff:4f:8c:
         83:67:d7:6c:8a:5f:b4:3e:cc:e7:71:d8:00:49:3c:f6:93:dc:
         25:bd:26:36:ea:79:67:dc:fa:ca:90:75:9c:26:7b:6d:8c:21:
         8c:3e:12:72:a6:92:47:88:96:13:24:6e:97:f0:56:25:5f:78:
         b7:f7:56:6a:93:45:b6:82:52:15:c3:ea:c4:5b:95:a2:90:71:
         2c:b1:e1:04:b7:bc:7d:8b:9a:d5:fc:0e:8a:84:45:00:8f:4f:
         0e:b2:f3:05:2a:19:76:a7:cb:3b:7b:ce:2e:0d:19:14:b3:00:
         54:77:65:4f:37:d8:66:b2:4a:7b:7c:2a:50:70:88:8b:16:2a:
         07:af:ae:d3:64:5a:8c:b6:8d:33:d2:8b:33:77:17:44:08:d4:
         e3:a1:ce:7b:12:a1:f9:2c:cc:a1:a2:c3:95:a8:92:f1:36:ab:
         7f:f1:cb:df:2a:9b:f2:6a:19:c5:f4:1a:fc:c8:e9:2b:c0:e9:
         be:e4:b5:6b:4f:e1:b6:ce:33:ea:95:95:ba:71:38:08:76:de:
         e0:e9:db:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:55:22 2025 by rpki-client