Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
File:                     7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft (raw, json)
Hash identifier:          7Bl5JTXehPVZJGM0TuT+JlMv8qD+C2Hi1gPEEmZJ8Fc=
Subject key identifier:   1C:D2:D7:59:8B:EA:98:D5:FF:71:A8:C2:B1:17:10:9E:1D:A7:73:29
Authority key identifier: EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4
Certificate issuer:       /CN=ee82395001b03c663509909979dfb78445b3d9c4
Certificate serial:       0197CB035D1F0505084F2BE97258B84092EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
Manifest number:          15C1
Signing time:             Wed 02 Jul 2025 12:01:24 +0000
Manifest this update:     Wed 02 Jul 2025 12:01:24 +0000
Manifest next update:     Thu 03 Jul 2025 12:01:24 +0000
Files and hashes:         1: 7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl (hash: niprV6lhkdU9GBYPZk9CFLrVWwQKfFGUdJRSkivGP0A=)
                          2: ucKWTlPN-FuM9B9rpIaHmjJB0uU.roa (hash: NuV8RJZOUsktn6zLXnq7yOANvHrLINcgvHUFAyEOS84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cb:03:5d:1f:05:05:08:4f:2b:e9:72:58:b8:40:92:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee82395001b03c663509909979dfb78445b3d9c4
        Validity
            Not Before: Jul  2 12:01:24 2025 GMT
            Not After : Jul  3 12:01:24 2025 GMT
        Subject: CN=1cd2d7598bea98d5ff71a8c2b117109e1da77329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:eb:1c:0b:ec:06:00:29:59:d2:26:87:46:13:
                    0b:75:a6:b5:b0:c2:1c:06:16:9f:e7:72:f1:65:5e:
                    31:ed:a3:d1:af:65:ab:e0:93:97:1d:9c:b7:ea:7e:
                    01:53:c0:06:3c:1b:65:4d:c9:53:d3:c0:23:80:5e:
                    a0:ff:e0:4b:76:76:6b:73:a8:de:98:eb:f2:d5:b8:
                    21:4e:b7:5e:a6:5d:13:99:30:4c:32:66:8b:c3:9c:
                    7e:be:a8:3e:b1:2a:fa:eb:10:7a:05:6b:b3:03:51:
                    96:23:e4:fa:98:80:d2:f9:c3:7c:1e:e2:fb:df:b6:
                    d0:ca:0a:30:55:07:6f:70:12:22:f7:4c:58:18:a4:
                    86:e5:a3:c4:c6:63:3e:92:be:6c:ea:3f:3c:1e:57:
                    f1:e7:fe:fc:e6:f1:65:b2:30:0d:89:fc:d3:b6:8b:
                    ce:c3:80:ff:c1:09:38:6d:fb:72:da:30:ec:1a:1f:
                    b9:83:68:e4:d7:d0:03:1a:6b:34:15:f0:a1:d7:f6:
                    c7:6c:bd:7d:89:41:04:b1:90:ad:3f:13:29:e0:c0:
                    e7:6b:7a:7f:ce:7b:ff:f5:db:c1:62:bf:92:2b:5a:
                    42:44:6c:6b:53:3d:30:4b:96:2a:dd:b0:c8:93:4e:
                    af:83:40:af:d1:51:82:19:09:3f:ca:fe:3e:87:71:
                    1e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D2:D7:59:8B:EA:98:D5:FF:71:A8:C2:B1:17:10:9E:1D:A7:73:29
            X509v3 Authority Key Identifier:
                keyid:EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:9e:c5:cf:75:a0:ca:a4:59:12:7d:49:a4:a7:78:b6:1c:c1:
         66:83:17:f9:f1:c3:33:a8:33:c0:34:ef:85:9c:16:7f:88:af:
         de:35:50:af:f5:e6:01:f0:ef:2b:08:f1:c9:9f:93:26:46:da:
         22:2d:10:89:cc:b4:11:9e:80:90:b1:5c:ac:6c:bb:f8:b0:c0:
         b2:b4:50:45:0b:0f:e1:57:91:60:fa:a6:6a:d1:2b:7e:1f:38:
         48:01:68:dd:1f:84:6d:70:00:ec:5c:69:8f:3b:3a:cd:39:7d:
         44:5b:b9:74:dd:23:67:51:d3:ba:41:2f:11:54:9e:42:5d:4d:
         fd:32:42:36:00:e9:89:a4:25:72:67:d6:4a:e4:bb:f3:77:1b:
         60:cc:25:0e:95:4a:20:35:19:25:d0:74:d2:a3:89:17:ca:ca:
         c1:da:d4:6f:8d:02:39:0a:43:a2:fb:7c:04:32:76:e5:4c:d9:
         b5:be:de:00:1f:db:ba:2c:66:ea:31:13:ab:16:a4:05:18:cf:
         42:c5:f3:7f:67:e5:5c:8c:e5:18:d3:98:b7:b7:34:1c:40:69:
         b9:4a:d6:48:1b:de:5a:a0:0e:4c:0d:0a:29:b7:90:b9:85:96:
         b4:ee:dd:fd:7b:c4:7c:86:0e:3c:1f:ab:ae:a9:85:e2:2b:0c:
         a6:f2:d5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:08:58 2025 by rpki-client