Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
File:                     7s8_de-DBrbFk6QjzaGYa9496Ug.mft (raw, json)
Hash identifier:          xLgTEZdbetFVlkopK5qpQgSWmGhG88Abz7MLZAeClKY=
Subject key identifier:   4E:90:06:2A:7C:14:4A:A9:09:2F:F3:5B:D3:CB:91:F3:45:B3:2F:4A
Authority key identifier: EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
Certificate issuer:       /CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Certificate serial:       0196C9BB81AB62CBFD244B800A8C6CF4071A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
Manifest number:          153A
Signing time:             Tue 13 May 2025 13:00:30 +0000
Manifest this update:     Tue 13 May 2025 13:00:30 +0000
Manifest next update:     Wed 14 May 2025 13:00:30 +0000
Files and hashes:         1: 7s8_de-DBrbFk6QjzaGYa9496Ug.crl (hash: gCg+7VD1/CrFypoNCrFsAf+Ri+NyK3fr9ZiEFI7tYzs=)
                          2: EGlVEH0t1gc2k3CbZYwnROsYmlo.roa (hash: QuNd2zucwGufr5KDRuyXtcoNqdw2w2ni9eYQfrLXoy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 13:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c9:bb:81:ab:62:cb:fd:24:4b:80:0a:8c:6c:f4:07:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf3f75ef8306b6c593a423cda1986bde3de948
        Validity
            Not Before: May 13 13:00:30 2025 GMT
            Not After : May 14 13:00:30 2025 GMT
        Subject: CN=4e90062a7c144aa9092ff35bd3cb91f345b32f4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b4:5b:5b:db:bc:4b:ef:d4:55:f7:3f:ed:24:
                    a4:3b:08:b5:8c:59:2a:9c:9f:c6:1c:df:db:e7:5b:
                    c3:ea:17:7a:25:9a:b5:3e:46:99:dd:69:38:25:2d:
                    b0:4d:c7:28:50:4e:a8:bd:15:7c:64:0d:ec:04:14:
                    3e:6c:68:0d:b9:ef:53:ff:fc:ad:bf:03:d1:e3:c9:
                    3f:e6:8c:5b:94:59:1b:f5:6c:a7:87:5c:79:c5:64:
                    40:e3:5f:90:5a:ae:50:a3:88:93:b5:8e:bb:f9:8c:
                    fb:6d:39:78:33:50:4e:03:3a:b1:d6:1c:c7:e6:f3:
                    9d:9d:94:c3:d9:e8:a5:7c:86:66:2c:c3:f7:2e:89:
                    2f:8d:16:c1:0b:38:ac:a9:9b:05:c4:7b:29:5f:52:
                    47:23:0c:e5:32:44:22:49:ef:a9:b4:76:87:af:da:
                    d6:a6:5f:3f:c1:06:b9:9f:cf:b2:f6:13:26:10:fd:
                    38:4d:c6:86:a8:12:e1:56:99:eb:09:f4:cf:48:5d:
                    07:0d:18:9e:6d:70:ec:b6:46:9a:93:1a:4d:4e:a0:
                    ae:6a:a5:4d:e0:e7:c1:9c:b7:e4:7c:77:e4:e6:75:
                    bc:12:c0:5c:14:bd:34:de:fc:bc:eb:b6:57:0e:9a:
                    71:bc:df:ac:b3:cd:cc:3a:26:01:e0:c7:cd:dd:ec:
                    6d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:90:06:2A:7C:14:4A:A9:09:2F:F3:5B:D3:CB:91:F3:45:B3:2F:4A
            X509v3 Authority Key Identifier:
                keyid:EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:75:5d:35:22:7e:ca:5c:35:35:88:14:fa:53:6e:ae:cd:13:
         44:70:8c:86:25:e5:12:e9:47:52:7c:ec:d4:3c:9e:1f:62:5d:
         2a:43:a1:15:d9:14:5b:7e:48:20:ae:1e:3a:24:24:e7:32:77:
         62:71:80:e5:0d:7d:71:42:9e:25:b0:bf:74:d6:c8:d0:ab:54:
         ed:2c:c3:c5:26:81:8d:ca:cf:86:ea:55:56:20:95:e8:18:6c:
         04:e3:5a:72:bb:47:c4:ee:a6:42:1d:a7:06:45:68:49:9d:74:
         bb:17:b8:61:b1:9f:3f:9d:e6:41:63:1a:ca:32:c1:94:d0:10:
         05:10:cf:e8:44:b5:c5:ad:0b:ee:bd:31:04:0e:5b:85:b2:d2:
         80:1f:35:60:1d:81:4e:6b:e0:e7:6d:e0:21:44:8f:6a:21:8e:
         08:cc:d2:be:f3:c1:63:64:ed:2f:80:0b:5a:0c:b8:11:b2:0e:
         40:4b:ee:24:10:1e:2a:56:34:ff:93:1c:06:c5:ef:2d:36:5b:
         69:bb:02:d0:73:d5:94:ef:91:5a:af:c2:1c:eb:f9:37:97:77:
         d6:81:68:6a:c7:7d:4c:aa:5d:f0:5f:5e:a7:ff:69:f9:46:7a:
         f3:87:1e:a7:01:25:d8:c0:7a:57:a9:c0:b2:ad:31:b3:55:8a:
         04:08:29:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:39:19 2025 by rpki-client