Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.mft
File:                     7kw_wBItgx--qKuyCk6bZcVAObI.mft (raw, json)
Hash identifier:          E+BFcsr6wsYwmtXOJ1sifDcJqC5mB22ojfoL3ULKFKo=
Subject key identifier:   4C:15:CD:A0:44:94:68:2B:D9:BC:EB:23:43:5D:6A:2A:56:D6:64:FE
Authority key identifier: EE:4C:3F:C0:12:2D:83:1F:BE:A8:AB:B2:0A:4E:9B:65:C5:40:39:B2
Certificate issuer:       /CN=ee4c3fc0122d831fbea8abb20a4e9b65c54039b2
Certificate serial:       0197B6A18E82A1AC835C25678C99B816B949
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.mft
Manifest number:          154A
Signing time:             Sat 28 Jun 2025 13:02:10 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:10 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:10 +0000
Files and hashes:         1: 7kw_wBItgx--qKuyCk6bZcVAObI.crl (hash: c4BjUawtR6XZM3OwJtZobcOynQTPzQKH66r9Vaf3TRk=)
                          2: AKJNBvg_Wp6-g3QkU1hgfnYKS_I.roa (hash: 8/1gxZ5RhK3Xfc9FWx/YXavES1/BKptW13V8wouvEZc=)
                          3: NPvM3xVxkQ_LMP_9_lAVPXggEPY.roa (hash: WMRbhoyDgXHVdgSvk5Bk4s0agvzfv3IFLc0hFCDdwCk=)
                          4: R2R6Zwpm3C7mEGCf96myxK2TaP8.roa (hash: JHhhJ/hqneURZNBRt/i03bXTcRI7N5eSJkdKe9AFbQI=)
                          5: buWauLtfMC3GcFJJMi4SlwdwaoI.roa (hash: dGDi40pRAf4C2JEAwUiWsT7itHv7hqD0XOyXY8zr8H8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:8e:82:a1:ac:83:5c:25:67:8c:99:b8:16:b9:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee4c3fc0122d831fbea8abb20a4e9b65c54039b2
        Validity
            Not Before: Jun 28 13:02:10 2025 GMT
            Not After : Jun 29 13:02:10 2025 GMT
        Subject: CN=4c15cda04494682bd9bceb23435d6a2a56d664fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:82:bb:6b:80:a0:b2:44:cb:30:5e:a5:50:4c:
                    e6:8a:99:d7:34:2c:74:8a:9a:0f:f1:6a:5a:a1:75:
                    95:de:75:64:96:8c:c7:7f:7b:8f:f7:1e:aa:6a:3d:
                    f2:29:7d:22:0d:24:e3:e5:21:ef:6f:c0:b0:ae:aa:
                    13:1f:27:c9:49:39:38:98:97:6e:f3:8f:8f:87:8b:
                    36:76:b7:70:fa:f6:78:1c:51:62:bd:1a:0e:4e:77:
                    bd:10:96:13:54:2a:dd:b9:c0:a3:64:32:00:29:6a:
                    e2:4a:6f:3b:cd:13:e5:a0:f6:04:0c:28:7e:49:90:
                    ad:88:76:89:97:6a:9c:ea:0e:a8:e8:6b:88:4e:08:
                    3c:eb:a1:2d:0f:1a:cb:5c:32:e7:40:8a:51:e6:49:
                    87:d3:e4:5a:89:0d:0f:7a:b2:38:65:7c:03:f4:d3:
                    7c:b0:89:81:36:e6:13:bc:aa:38:31:d8:bf:55:23:
                    18:00:e8:6e:24:68:52:b4:91:80:1e:2d:6e:4b:30:
                    43:5d:e9:8a:50:1b:fc:2a:5b:32:54:c8:b4:97:80:
                    34:fc:0a:d1:89:77:07:62:7a:3c:86:85:ea:fb:2d:
                    2b:0e:40:4c:04:d6:2c:7e:bf:16:0f:d8:02:56:5e:
                    d4:33:3e:70:a6:60:5e:89:05:68:ab:68:08:56:c5:
                    18:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:15:CD:A0:44:94:68:2B:D9:BC:EB:23:43:5D:6A:2A:56:D6:64:FE
            X509v3 Authority Key Identifier:
                keyid:EE:4C:3F:C0:12:2D:83:1F:BE:A8:AB:B2:0A:4E:9B:65:C5:40:39:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:93:91:f3:40:1a:89:4c:0e:1a:6a:7e:c2:1e:eb:4c:ff:d2:
         f1:ff:bd:24:21:d1:d8:5c:75:93:c4:86:b9:44:87:0e:d9:a2:
         44:7a:fb:0d:7b:8c:1c:ef:71:d1:a6:28:5a:b0:29:a4:33:eb:
         b2:90:11:71:44:87:e4:f9:69:8b:41:4e:d5:70:5f:2c:cc:f4:
         6d:e7:55:37:89:7d:74:07:84:c4:ed:06:0c:79:b3:5d:dd:c2:
         64:02:27:1e:73:9e:c5:5e:1b:5b:e8:8f:b0:6a:d2:30:72:c2:
         d1:0b:45:ec:2e:6c:49:5a:57:31:7a:cc:d3:fa:e0:88:ca:49:
         4b:6e:44:1a:69:20:ed:fb:93:26:17:1e:e5:3f:89:7f:8d:bf:
         cd:74:49:f9:9a:10:2a:e3:31:ac:9b:ba:85:a4:cf:62:a1:5e:
         ff:da:1a:63:b9:98:5b:ac:97:07:be:24:9f:e0:c1:8f:91:a5:
         0a:ea:1b:22:57:a1:ee:ea:5d:a0:f6:36:f8:42:ee:fc:6b:25:
         0c:cf:5e:2a:f0:3b:59:c4:5f:ef:ee:09:31:03:1c:77:72:90:
         9b:d1:be:2a:e3:19:da:25:be:b7:8b:98:38:bb:e4:29:d1:ca:
         5d:7d:e0:0e:c6:11:61:a3:26:d3:ec:69:81:e0:f9:47:66:cd:
         51:97:b5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:54 2025 by rpki-client