Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
File:                     e7M4LBagpWFZkNS85jTcUWgvLqo.mft (raw, json)
Hash identifier:          Agq4enDtWN9jEU8zCBkVhFN0l/oxshHI1ti6xkzGuqQ=
Subject key identifier:   B4:6D:29:38:92:2B:72:A3:04:0D:BB:32:E0:A5:02:FA:1D:E1:D5:17
Authority key identifier: 7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA
Certificate issuer:       /CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa
Certificate serial:       0198D5BBA1DA75775256C1173239E55AAA9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
Manifest number:          093D
Signing time:             Sat 23 Aug 2025 07:01:40 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:40 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:40 +0000
Files and hashes:         1: e7M4LBagpWFZkNS85jTcUWgvLqo.crl (hash: QHr5oLbJw7q0S7A2fsEgUTMfnKbtGVvKsIPQGy616Jg=)
                          2: qGUXVQ_YIWaxyPrsBvv99Mi17Xk.roa (hash: ahyxLXkQdJnYzPf9suZu/LdsDie1JIPApAeOAOCQ4OE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:a1:da:75:77:52:56:c1:17:32:39:e5:5a:aa:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa
        Validity
            Not Before: Aug 23 07:01:40 2025 GMT
            Not After : Aug 24 07:01:40 2025 GMT
        Subject: CN=b46d2938922b72a3040dbb32e0a502fa1de1d517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d6:62:48:b6:91:91:48:c3:01:08:fe:69:dd:
                    c9:6a:5f:01:1c:07:30:7d:3e:6e:fd:b7:f2:4b:e7:
                    12:ee:de:13:f9:4a:e7:59:c8:3f:b5:a6:ee:76:30:
                    9b:c3:8b:c5:38:e3:94:5a:ad:6c:ef:54:93:3f:bb:
                    f6:4d:3f:04:68:7a:15:9b:af:36:a4:42:aa:97:2f:
                    8a:55:4e:f6:a0:54:35:d2:6a:c2:07:54:2e:7c:cf:
                    5b:eb:9f:32:ae:6c:94:de:9a:b1:82:28:55:30:d1:
                    12:7c:d2:81:55:54:c5:cc:73:41:e2:d5:b3:4a:e1:
                    6f:f5:dc:98:6b:e1:10:2c:b9:f1:90:ef:f4:fb:52:
                    82:b6:cb:6e:6a:5a:77:bc:18:e2:b8:5b:b1:e8:05:
                    ec:77:c9:33:e5:b0:35:84:52:67:7b:cb:b1:6b:cf:
                    5c:f3:6d:81:e0:57:19:f6:bd:fd:b9:21:b1:c9:2c:
                    2e:7c:2a:78:ba:59:a9:57:c1:99:0e:a0:6b:ec:c8:
                    3e:65:d0:47:7c:ff:90:39:78:31:c0:b9:a9:08:e5:
                    c7:c0:96:28:42:c2:80:91:db:3c:23:67:f9:95:81:
                    ea:79:c4:b2:ba:7b:a6:8f:5c:af:85:8c:7f:d2:33:
                    00:e0:bf:8c:23:b1:4e:db:10:d9:a7:ff:53:03:08:
                    f5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6D:29:38:92:2B:72:A3:04:0D:BB:32:E0:A5:02:FA:1D:E1:D5:17
            X509v3 Authority Key Identifier:
                keyid:7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:c6:24:c2:30:65:af:9d:2f:5f:95:5e:ce:62:0a:60:32:d4:
         df:fd:a2:a6:bd:4e:93:cc:df:e7:9e:72:e5:5b:84:7e:79:ba:
         35:e0:17:1f:7f:f9:3d:fc:aa:37:fd:49:f1:d5:60:9c:99:d3:
         db:89:76:1f:e3:46:5f:db:ec:6d:31:2f:07:53:9c:cf:34:d1:
         5c:7f:9a:57:fe:68:6a:cb:35:ea:2a:d0:13:e0:14:6a:04:78:
         76:06:36:8d:65:93:08:79:54:3a:b2:c5:b8:8a:e0:b2:b3:ee:
         0a:7e:80:b3:97:42:a8:f2:c4:37:d3:8a:80:a5:6c:c9:b6:04:
         f2:e1:9c:4d:c6:13:63:67:a9:59:db:7a:bc:47:1d:a3:1a:9f:
         04:35:95:7c:89:e3:18:51:66:ab:f7:e7:c5:ed:15:d2:02:e9:
         b3:84:e0:b0:dc:6e:dc:1d:50:8f:8f:f1:81:41:a4:e2:7b:30:
         2e:26:d9:7d:ec:cc:e0:3e:ef:08:07:a3:ad:07:f9:a8:d8:21:
         2d:99:9b:eb:47:64:ec:7f:94:bd:6a:9c:48:bd:0a:c2:7f:be:
         66:eb:1d:92:f6:b4:02:64:80:8f:d8:c0:ac:c9:53:c8:07:6e:
         ff:b6:f3:95:45:4e:91:5a:6b:6f:81:d7:82:55:ce:54:2e:bf:
         8c:e5:24:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:14 2025 by rpki-client