Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
File:                     7eXtRX90OCqO0LevaG4a2yk1IlA.mft (raw, json)
Hash identifier:          I53VOB8CwLHjsDTZoNEIXOWKLMTM4mpqVFLMF9AqnWs=
Subject key identifier:   82:EF:2E:70:C5:AE:39:EF:D4:A0:4F:81:D7:C0:3E:8E:A6:45:63:F0
Authority key identifier: ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50
Certificate issuer:       /CN=ede5ed457f74382a8ed0b7af686e1adb29352250
Certificate serial:       0199FCFD8F73B038343F4F5CD6E008692866
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
Manifest number:          107A
Signing time:             Sun 19 Oct 2025 15:01:39 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:39 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:39 +0000
Files and hashes:         1: 7eXtRX90OCqO0LevaG4a2yk1IlA.crl (hash: QI0p7i3nc9VWHD9Wu/hQIAmrAP64uQP1RpV/zE3LUR4=)
                          2: YLm4c9_z6td3es7pEFKKfhsrqrQ.roa (hash: 3Gz8tlN20buPuiUO6QyV1TDNEzqFPjpr4haLDRM/ql0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:8f:73:b0:38:34:3f:4f:5c:d6:e0:08:69:28:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede5ed457f74382a8ed0b7af686e1adb29352250
        Validity
            Not Before: Oct 19 15:01:39 2025 GMT
            Not After : Oct 20 15:01:39 2025 GMT
        Subject: CN=82ef2e70c5ae39efd4a04f81d7c03e8ea64563f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:dc:75:67:f4:c1:ff:9d:f0:28:17:0f:6a:86:
                    71:ad:12:ac:b6:a0:4a:e4:8a:94:52:e3:3c:2a:92:
                    ed:48:ce:93:7d:9a:2e:d5:bc:c6:02:61:ff:98:d6:
                    1b:15:9e:04:bb:fa:b5:e8:28:a3:f4:f8:34:ef:8a:
                    af:42:68:62:59:84:4d:ee:96:03:44:2a:10:78:26:
                    b8:6d:86:84:06:5c:74:8f:27:03:a8:34:e3:b7:f2:
                    87:c1:d9:53:de:1f:3e:45:98:91:b3:0b:09:7b:1f:
                    76:a2:ea:73:c4:6d:0f:c5:7a:10:9a:a7:55:81:5e:
                    09:6f:b1:b3:63:57:7c:6b:d3:1d:c2:f6:5b:99:ca:
                    7e:2c:0c:f8:a6:32:f5:05:0c:0e:3d:88:af:d1:1d:
                    4f:c1:7f:9b:05:46:40:82:4c:1b:b3:99:69:df:7a:
                    d8:e5:1b:75:0d:78:88:d3:d0:ee:76:ad:a9:fc:38:
                    16:80:de:f7:68:44:8e:c1:72:eb:f4:7c:44:f2:a6:
                    c6:c4:68:2f:a8:40:26:50:95:ee:fd:02:02:b9:f5:
                    77:f5:ab:98:65:5d:d2:15:46:95:89:e5:a0:b9:3c:
                    68:ca:32:22:09:56:64:cf:68:ec:b8:3d:0c:60:08:
                    10:ee:3e:6f:c4:59:ab:0b:5f:b8:57:04:78:a4:4f:
                    23:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:EF:2E:70:C5:AE:39:EF:D4:A0:4F:81:D7:C0:3E:8E:A6:45:63:F0
            X509v3 Authority Key Identifier:
                keyid:ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:01:bd:86:42:02:f8:6c:d5:fc:6c:c1:9a:16:92:5f:2b:bd:
         50:20:d9:17:c1:e7:20:15:ed:bb:ba:20:94:61:db:97:12:f9:
         ac:09:13:40:87:a2:08:fa:72:00:7c:68:f8:b9:d1:8f:6f:b3:
         3b:e9:ad:da:eb:2d:4e:16:c6:7c:72:20:0c:57:19:cb:4e:46:
         56:92:08:9e:3f:f6:da:b5:d1:43:e6:eb:37:1f:f3:06:af:c7:
         c2:d1:f0:16:67:76:a9:f4:c7:0c:39:24:61:04:ef:48:58:6d:
         72:ee:84:99:94:69:32:cb:55:ab:e4:1d:a6:7f:30:26:4e:61:
         51:ae:2d:af:c6:02:ec:a2:75:01:1a:13:2b:34:43:4f:6e:75:
         0e:1e:cf:23:56:9d:d2:5c:5c:e3:5a:06:bd:6c:df:bf:32:2a:
         3a:9a:43:80:59:82:a0:4c:69:a6:70:6b:6f:59:66:a2:32:34:
         3c:f1:61:5f:0f:9a:85:81:17:d1:ae:1f:cd:2a:c0:a0:0b:63:
         6c:cd:d0:d7:99:7c:2f:68:52:df:e9:d4:d7:c2:b8:be:56:02:
         3d:69:1d:72:c0:9a:2f:99:22:9e:d2:04:8e:c6:d6:7e:fd:31:
         7f:65:82:ec:d1:4c:7e:39:8b:67:da:34:a1:ca:bc:e0:c1:ac:
         00:bb:5b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:37:58 2025 by rpki-client