Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/R7u3TUGymPWe3U2iPRi2u1FD9kQ.mft
File:                     R7u3TUGymPWe3U2iPRi2u1FD9kQ.mft (raw, json)
Hash identifier:          X6V9BFqGVxFV8M8qsKqPQxXDaRwjN/XsufiFa053XdE=
Subject key identifier:   CB:36:27:27:8F:41:27:BD:98:30:C0:54:71:06:2C:96:69:D8:3E:B1
Authority key identifier: 47:BB:B7:4D:41:B2:98:F5:9E:DD:4D:A2:3D:18:B6:BB:51:43:F6:44
Certificate issuer:       /CN=47bbb74d41b298f59edd4da23d18b6bb5143f644
Certificate serial:       0197B5FC0F9C3B3B758F49D6F02DDDE649A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R7u3TUGymPWe3U2iPRi2u1FD9kQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/R7u3TUGymPWe3U2iPRi2u1FD9kQ.mft
Manifest number:          15B7
Signing time:             Sat 28 Jun 2025 10:01:24 +0000
Manifest this update:     Sat 28 Jun 2025 10:01:24 +0000
Manifest next update:     Sun 29 Jun 2025 10:01:24 +0000
Files and hashes:         1: 6CJuWYcvaw-acDsC8fypVGv6nZs.roa (hash: wT9pXkMIK5iq/Fr3VYtO4ReEPTUzPvr9i2oggz8Pizc=)
                          2: R7u3TUGymPWe3U2iPRi2u1FD9kQ.crl (hash: 3/B7HXyGPk6RzEb1yii6hNxZNUXfAx3uAlNBfrlKLdc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/R7u3TUGymPWe3U2iPRi2u1FD9kQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/R7u3TUGymPWe3U2iPRi2u1FD9kQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R7u3TUGymPWe3U2iPRi2u1FD9kQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:fc:0f:9c:3b:3b:75:8f:49:d6:f0:2d:dd:e6:49:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47bbb74d41b298f59edd4da23d18b6bb5143f644
        Validity
            Not Before: Jun 28 10:01:24 2025 GMT
            Not After : Jun 29 10:01:24 2025 GMT
        Subject: CN=cb3627278f4127bd9830c05471062c9669d83eb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:44:36:43:16:66:6a:c2:76:4e:a9:20:cf:01:
                    77:e2:67:5f:65:5c:3a:91:bf:b4:14:b8:35:8f:ea:
                    3f:0c:1d:a6:87:0f:a4:36:b8:b1:53:c0:92:02:9c:
                    29:ed:c9:b3:d2:05:20:2f:08:4c:b3:e4:6f:db:ef:
                    66:46:62:85:f0:2c:6e:4e:d6:c4:a4:3b:7a:78:15:
                    4f:86:ed:de:8a:b7:22:9e:d6:bd:42:03:e1:6b:4a:
                    ca:91:1d:2d:96:62:59:b6:2d:88:d9:be:29:e2:87:
                    7a:59:87:b6:23:fd:20:68:c0:35:b4:46:df:82:99:
                    88:b8:99:40:70:65:d0:1b:5b:5f:fa:de:0b:62:11:
                    a4:ce:ac:25:9e:cd:60:db:82:b1:28:8a:30:43:66:
                    28:b2:9c:d0:d8:c0:5f:7b:4c:92:78:2d:ca:67:71:
                    93:a2:a1:30:06:b8:dd:53:f2:47:eb:ae:7b:37:2c:
                    eb:8f:af:48:b5:c1:02:79:8e:0f:8d:ba:49:13:6e:
                    ab:c3:5c:8e:fe:d6:2d:1c:70:c6:2f:3e:28:3a:53:
                    ad:e0:a5:e5:38:cc:0a:af:1f:26:ce:52:0c:98:4e:
                    be:18:0a:12:8a:09:a8:7d:15:f8:38:e7:27:cc:7f:
                    e8:03:ff:05:04:46:19:18:5d:ce:5e:ed:b4:11:b9:
                    f2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:36:27:27:8F:41:27:BD:98:30:C0:54:71:06:2C:96:69:D8:3E:B1
            X509v3 Authority Key Identifier:
                keyid:47:BB:B7:4D:41:B2:98:F5:9E:DD:4D:A2:3D:18:B6:BB:51:43:F6:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7u3TUGymPWe3U2iPRi2u1FD9kQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/R7u3TUGymPWe3U2iPRi2u1FD9kQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/R7u3TUGymPWe3U2iPRi2u1FD9kQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c3:f6:36:16:8c:7a:b1:9a:c4:d4:cc:89:f3:c6:64:86:28:
         44:5f:0d:00:3e:9a:bc:a1:60:79:e7:3a:19:8f:b7:55:4e:c0:
         0f:45:12:ce:46:af:a9:ba:4b:62:9f:99:02:51:db:1c:f7:e8:
         7a:bf:58:b3:2e:ef:5b:41:d6:b3:b4:c6:cb:78:e6:c6:25:88:
         6a:a0:54:c5:9a:23:d3:27:52:67:36:64:27:eb:43:df:91:79:
         94:5b:9a:42:1a:e6:81:73:e3:6f:28:1c:40:d4:be:6d:a7:d8:
         ec:f3:47:f1:21:a0:15:ac:81:21:d1:69:95:41:81:c1:17:b6:
         4e:94:35:68:b4:00:8f:80:84:d1:61:8f:b3:ed:f7:91:e0:5b:
         ee:53:0c:b0:e6:3b:81:60:e9:22:b5:3e:90:5b:3e:30:0d:1d:
         54:6d:69:3f:ee:94:83:88:98:95:5c:67:92:cc:e3:a7:d7:82:
         b7:ea:85:86:bf:85:93:56:40:3a:74:c3:94:22:18:d0:f8:b6:
         2b:9f:c4:9a:4d:98:6a:d9:43:cd:67:f8:c5:2f:39:72:a1:3b:
         00:21:55:b7:d6:1f:2f:56:68:89:9b:8e:06:3e:b2:27:ea:be:
         bd:ea:c7:a7:cd:52:d4:1f:b2:c2:b4:3f:6f:01:37:cb:84:8d:
         26:6c:88:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:06:42 2025 by rpki-client