Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
File:                     7w7IG5xlO440BQj_hI2wZuNncrA.mft (raw, json)
Hash identifier:          5Fv2nSQq4OjQhLELfnWYZu/U/8BXoHf/4gGl5J1yjFc=
Subject key identifier:   8E:B5:AF:F9:A5:50:C4:70:16:34:67:F1:29:07:10:D9:4B:4F:C0:E7
Authority key identifier: EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
Certificate issuer:       /CN=ef0ec81b9c653b8e340508ff848db066e36772b0
Certificate serial:       0197CC15BF813EDCBB40E4E7205AEB01202D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
Manifest number:          05F1
Signing time:             Wed 02 Jul 2025 17:01:06 +0000
Manifest this update:     Wed 02 Jul 2025 17:01:06 +0000
Manifest next update:     Thu 03 Jul 2025 17:01:06 +0000
Files and hashes:         1: 7w7IG5xlO440BQj_hI2wZuNncrA.crl (hash: JNr1MFYJKE5WEbEwbmNkTcau0cNEbh92+Ywu9EMBn7A=)
                          2: _JZCaLt9Be62ENSNemRuRzThRaM.roa (hash: URuN9NpiQl5cKKOQiReY1w86ew5C0wnGONnwQYzQctk=)
                          3: fT9EDZcB-n7jKd_0sXTlTpOCVoU.roa (hash: ErzOKvcft9LuwLT6n685AHi6g3MUyqRhRkHGEZcgw3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 17:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cc:15:bf:81:3e:dc:bb:40:e4:e7:20:5a:eb:01:20:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef0ec81b9c653b8e340508ff848db066e36772b0
        Validity
            Not Before: Jul  2 17:01:06 2025 GMT
            Not After : Jul  3 17:01:06 2025 GMT
        Subject: CN=8eb5aff9a550c470163467f1290710d94b4fc0e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:74:75:74:aa:68:6f:89:a5:4e:02:a4:fd:8d:
                    64:8d:77:71:79:0a:6f:4b:a3:fa:cd:dd:eb:e3:5b:
                    8e:f0:91:20:11:39:b8:a5:f5:03:89:6d:85:60:ba:
                    30:a5:6e:a1:ec:67:4d:cb:b0:b0:25:84:5a:d9:66:
                    0e:be:87:fa:10:5d:8d:ae:30:6f:72:4f:60:0b:94:
                    60:55:ae:4a:12:7f:88:87:01:33:2c:8e:41:bb:9a:
                    21:85:c4:cd:86:b1:40:9a:b3:2b:38:b4:bb:bd:1a:
                    37:2e:f8:c7:c9:5e:d0:8f:a5:4b:79:4a:20:22:a9:
                    d2:be:e6:6a:cb:8b:c4:cb:ba:b6:a3:9c:c1:77:a9:
                    be:9a:ba:50:4f:29:af:6d:74:69:68:62:ec:af:a9:
                    7c:f6:6f:0d:ce:4e:8d:4c:ac:5a:4f:62:29:7d:8c:
                    20:3c:61:f7:b7:e4:13:99:6f:11:88:02:d0:9e:ed:
                    2f:0e:59:7b:82:34:06:37:e9:8b:88:e9:cd:71:0b:
                    ef:7f:77:33:7f:22:dd:55:e9:73:4e:52:77:88:bc:
                    54:e8:23:03:b1:d5:a4:92:97:6d:c2:32:2b:a1:aa:
                    46:51:2b:08:92:fe:c4:1c:22:bf:e7:ab:73:54:bf:
                    21:e3:46:7c:4c:74:a6:6d:30:04:22:5f:7a:7b:06:
                    2a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B5:AF:F9:A5:50:C4:70:16:34:67:F1:29:07:10:D9:4B:4F:C0:E7
            X509v3 Authority Key Identifier:
                keyid:EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:fc:b6:63:8a:5a:c4:05:0b:dc:77:b3:d2:b9:d1:60:b6:d1:
         d7:f4:4c:9e:19:74:f2:bc:b7:9c:c9:ba:0d:68:a9:bf:8b:86:
         c0:5b:c0:e9:ff:02:af:a0:86:f1:35:50:a2:5f:7d:47:cb:30:
         d9:7f:a4:c6:1f:d9:91:58:90:ef:dc:8d:f3:ed:f0:ff:92:df:
         f3:30:a5:7b:be:f1:a3:aa:c2:ed:c6:c2:6d:14:e0:73:a5:c0:
         08:50:82:92:26:1c:48:e6:67:3e:bf:71:cf:e6:0c:20:eb:38:
         d2:08:da:7d:62:75:bd:2a:d1:a3:ab:15:97:87:d2:fe:f3:40:
         95:57:f6:91:15:2e:90:52:d7:23:6a:b2:d8:b3:ea:c4:b5:aa:
         90:18:91:29:f9:6e:d8:1e:ab:a9:50:58:ac:de:b3:5c:c4:67:
         2b:c7:72:2b:5b:a1:a1:b8:cf:1d:e6:50:11:59:13:a0:8b:e7:
         3e:81:c2:cd:6c:81:9c:10:5a:ee:8c:68:a2:5e:37:8b:9e:59:
         0f:a8:23:f4:77:c2:3b:9f:7d:3f:a9:3c:14:08:cc:3d:52:23:
         3b:a1:ee:3e:93:99:4c:c4:2f:05:cf:51:67:2e:dd:ff:0d:ba:
         b6:bd:60:85:f9:c8:5a:59:35:37:d4:a5:32:f5:d1:c6:94:7a:
         de:67:dd:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 21:42:16 2025 by rpki-client