Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
File:                     7N86SgXzcFD3wDedNPT0gUvSCd8.mft (raw, json)
Hash identifier:          NanfQ6EFjOxeAS2QS+ENzQrcODz8gY06SsJ9kJrsoF4=
Subject key identifier:   DE:CB:B0:47:61:93:82:1F:86:7A:66:16:97:06:B6:5B:98:1F:27:A4
Authority key identifier: EC:DF:3A:4A:05:F3:70:50:F7:C0:37:9D:34:F4:F4:81:4B:D2:09:DF
Certificate issuer:       /CN=ecdf3a4a05f37050f7c0379d34f4f4814bd209df
Certificate serial:       0196A0BFCCC729C2F9F0DF8C0216FE6F6BBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
Manifest number:          7E
Signing time:             Mon 05 May 2025 14:00:46 +0000
Manifest this update:     Mon 05 May 2025 14:00:46 +0000
Manifest next update:     Tue 06 May 2025 14:00:46 +0000
Files and hashes:         1: 7N86SgXzcFD3wDedNPT0gUvSCd8.crl (hash: H8ADXyC1swzbw/JI158y87JEuep9+j2vRP3r3Iu+GiI=)
                          2: J7ccboXG_UdW-dO_P9yIGyLOtpI.roa (hash: J3h8LzNUJs+ItWilJVyvNTPqs1kEml18D1KkQ0ZxkAE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a0:bf:cc:c7:29:c2:f9:f0:df:8c:02:16:fe:6f:6b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecdf3a4a05f37050f7c0379d34f4f4814bd209df
        Validity
            Not Before: May  5 14:00:46 2025 GMT
            Not After : May  6 14:00:46 2025 GMT
        Subject: CN=decbb0476193821f867a66169706b65b981f27a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9a:3e:3d:80:93:0a:3a:a8:86:c2:7e:18:b5:
                    2c:a0:f9:e8:19:5f:67:ad:ff:19:82:37:39:e5:79:
                    8c:e7:84:ee:4e:76:b1:51:f9:c2:ea:9c:a4:25:ed:
                    67:6e:dc:10:77:e1:94:69:22:4f:ec:ad:0c:b5:ba:
                    6c:c3:55:ce:9f:31:ad:bd:ac:28:3e:31:a1:7d:a8:
                    7e:88:97:8c:1b:a8:55:cc:f7:e3:70:6b:31:2d:24:
                    b4:3b:46:62:39:1b:0f:ff:3e:b6:d2:49:0a:43:d5:
                    16:a1:73:c6:e2:78:65:9b:98:98:c8:38:0f:1f:24:
                    55:99:0a:ec:7a:7a:a0:5d:96:04:47:89:96:16:56:
                    26:8a:a9:18:31:db:55:bd:a0:32:02:ba:20:1f:54:
                    65:ca:33:42:e6:1a:78:92:16:c4:45:34:35:99:b2:
                    be:1f:ec:2b:b2:3e:30:33:40:80:42:a2:db:9a:76:
                    83:70:35:17:fd:7a:4b:03:60:af:23:2b:85:56:08:
                    af:37:4f:7f:1b:89:f1:6a:6c:d7:93:ad:ea:30:42:
                    85:63:4c:62:ec:4d:9d:d2:35:83:84:d5:f1:a4:b4:
                    69:8d:75:bc:3c:e3:8f:2e:a1:ed:19:9a:d2:e3:f6:
                    89:94:ed:09:72:02:2a:cb:f4:41:20:94:81:d1:db:
                    e7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:CB:B0:47:61:93:82:1F:86:7A:66:16:97:06:B6:5B:98:1F:27:A4
            X509v3 Authority Key Identifier:
                keyid:EC:DF:3A:4A:05:F3:70:50:F7:C0:37:9D:34:F4:F4:81:4B:D2:09:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:c7:c5:ff:1f:90:6a:58:1f:cb:9f:4a:49:be:07:d5:35:98:
         20:34:8f:48:c3:0f:6e:d6:57:31:cc:4b:12:9a:68:91:f6:c4:
         b3:70:22:f6:27:42:c7:ce:45:b7:86:87:2c:89:5a:be:9c:57:
         67:7b:a0:85:2d:6c:99:e1:78:d1:92:ea:d1:81:ca:77:a7:a8:
         c7:c7:3a:ae:94:9e:b6:12:8c:70:0b:0e:9a:b5:ab:f7:a0:6b:
         31:32:a2:f5:ee:ac:48:56:13:8f:07:03:01:9d:0c:c5:e7:c7:
         bf:b1:94:a0:11:78:df:9b:0d:a2:04:8f:ea:e9:14:4e:45:d4:
         ac:86:61:d8:0f:0c:0c:bc:ef:00:c1:3d:e2:04:c3:1f:c0:dc:
         bd:47:52:24:09:7e:c2:ec:e8:ae:b6:d2:0b:92:1a:ec:d0:c4:
         20:7f:92:80:af:ce:3e:1b:51:90:cc:de:e0:1a:55:5a:d2:71:
         a6:64:09:d9:73:a1:7d:ad:dc:32:d9:43:db:f1:d8:8d:8c:32:
         41:ac:51:07:23:51:11:f5:25:c1:56:93:df:26:54:82:70:09:
         7e:05:82:60:27:ca:34:9b:53:45:b2:1a:1e:90:0e:ee:d9:d1:
         29:4b:bc:d3:cd:53:c5:74:aa:68:6b:4b:2c:b3:68:cd:c0:01:
         06:ce:c3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:15:21 2025 by rpki-client