Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft
File:                     7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft (raw, json)
Hash identifier:          aQtHJVSpVLD5rWuTeXO5vtb1IuBNLpi0roBx17cRo30=
Subject key identifier:   7A:A1:E2:7C:7A:E3:29:DD:FA:A3:59:10:6B:C0:85:9A:BC:13:A6:28
Authority key identifier: EE:D7:55:C5:12:75:AB:23:42:D8:F6:FC:A5:B5:66:06:AB:9C:3B:4F
Certificate issuer:       /CN=eed755c51275ab2342d8f6fca5b56606ab9c3b4f
Certificate serial:       0198D54DE1DEEB4F273FA424F8FED57251AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft
Manifest number:          1647
Signing time:             Sat 23 Aug 2025 05:01:47 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:47 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:47 +0000
Files and hashes:         1: 7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl (hash: pjwo/AvgbKSctmVXusbq6nL0FPgKdfiLC4tGRNxZrt0=)
                          2: 8MaVf5sp5CsTyAhAGLZcOfsaJXw.roa (hash: 1dw+M1Du1swLbJQllbUZmU++FExETkfzODZl6r8vVPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:e1:de:eb:4f:27:3f:a4:24:f8:fe:d5:72:51:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eed755c51275ab2342d8f6fca5b56606ab9c3b4f
        Validity
            Not Before: Aug 23 05:01:47 2025 GMT
            Not After : Aug 24 05:01:47 2025 GMT
        Subject: CN=7aa1e27c7ae329ddfaa359106bc0859abc13a628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4b:1b:a7:25:21:29:b3:bd:1e:df:4e:89:33:
                    a0:93:17:19:85:7f:48:27:1f:be:fd:69:16:71:ae:
                    f9:a4:32:39:d8:b3:78:48:a1:c9:de:b5:4b:68:e4:
                    4c:20:2c:17:dd:c3:01:46:90:b4:74:6a:ba:4d:44:
                    57:89:a7:19:5f:29:0f:e5:58:d3:8c:6a:34:89:c5:
                    08:88:2e:24:7d:27:a5:b6:23:78:84:3a:0c:48:d1:
                    c8:9e:cb:04:da:7a:51:f3:02:52:1d:1b:ff:82:db:
                    b0:b7:15:1b:31:e4:93:62:c0:b0:8e:4e:ca:b2:da:
                    f3:bf:ab:1b:81:89:df:94:c0:26:05:50:b5:c4:0f:
                    cb:85:af:8e:fd:93:d5:30:ae:9e:04:4f:a9:a5:c7:
                    51:cf:1e:46:4a:85:17:c0:88:45:fc:4a:ed:41:06:
                    2d:83:35:3b:a0:c5:32:1d:97:48:dc:26:4e:a5:08:
                    d5:89:09:49:0e:46:6a:d1:64:53:b4:a0:f4:ea:8a:
                    ac:1a:61:5f:01:c7:45:bf:f7:7f:f7:9a:89:88:e0:
                    61:e0:93:5d:7b:e9:7b:27:09:8e:04:5b:87:4e:a1:
                    d4:4c:25:71:a8:ee:57:b3:6b:e7:2c:99:ee:07:a4:
                    12:33:56:0d:61:01:7e:03:cc:f8:73:31:66:7f:3d:
                    88:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A1:E2:7C:7A:E3:29:DD:FA:A3:59:10:6B:C0:85:9A:BC:13:A6:28
            X509v3 Authority Key Identifier:
                keyid:EE:D7:55:C5:12:75:AB:23:42:D8:F6:FC:A5:B5:66:06:AB:9C:3B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:c5:63:de:0f:34:3e:70:5d:58:73:00:1f:12:b2:a3:15:3e:
         62:7e:24:b4:8d:87:a1:db:85:a2:e8:74:2b:fb:de:fe:12:8e:
         2f:21:94:6d:47:de:58:62:94:e6:62:f5:58:86:a9:14:fe:34:
         f8:e5:15:ab:7b:04:4f:c2:1d:92:b6:c1:ac:e3:06:f3:87:77:
         d8:01:33:79:3b:00:78:83:55:46:89:75:73:93:96:d1:c6:6a:
         45:5f:cc:5a:0d:e1:c5:9e:05:8f:ea:12:6c:40:3b:4d:9b:7e:
         ff:8d:69:36:ed:e4:1b:94:ac:f8:7c:1d:7a:a4:a4:4a:d4:b8:
         02:26:5c:85:51:9f:d5:6c:85:fd:2d:b9:10:a6:d2:4e:67:50:
         3b:c6:36:7e:a9:87:9f:9b:fa:83:22:8e:7e:3a:27:87:88:75:
         95:5c:52:93:1d:e4:95:ce:dc:f5:bb:c2:8a:6c:17:23:90:e6:
         76:8f:c0:72:40:0b:3d:91:84:a9:8a:15:c5:6e:da:31:e7:56:
         35:58:a9:6c:5c:fe:56:d5:0a:de:dd:e0:79:9e:cf:76:87:ba:
         8b:f7:34:c8:a4:c9:ab:3f:7c:95:fd:e5:22:73:54:77:bc:3f:
         0a:33:67:96:dc:55:b7:a3:28:cb:6e:82:65:f7:20:39:c7:3d:
         28:df:f0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:26 2025 by rpki-client