Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft
File:                     fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft (raw, json)
Hash identifier:          h1wiFt7C3dvE1X+Z4ZVWRDqpt4/rExXbDhn1tIw15Oo=
Subject key identifier:   9A:F3:4F:6F:8D:A3:D6:5F:A4:A7:60:3F:77:C7:DC:97:D6:7E:FC:C2
Authority key identifier: 7D:EE:C7:EB:B5:CC:87:3C:C7:17:96:60:AC:FC:A8:04:D9:11:AB:66
Certificate issuer:       /CN=7deec7ebb5cc873cc7179660acfca804d911ab66
Certificate serial:       0198D6CCE67FBC881894873E04E540564DD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft
Manifest number:          047F
Signing time:             Sat 23 Aug 2025 12:00:09 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:09 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:09 +0000
Files and hashes:         1: OxZ_SQFVJ8uzPWSjGADnIMI-uGA.roa (hash: cxXlIHKPRbElTrIxapfIyNaAYnC9ppfTzQIGpRQ/AhY=)
                          2: fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl (hash: 2zVDrTn9sqWkaLsR2GFSoD1DdZJ7Nyxh1HMzH/3/omA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cc:e6:7f:bc:88:18:94:87:3e:04:e5:40:56:4d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7deec7ebb5cc873cc7179660acfca804d911ab66
        Validity
            Not Before: Aug 23 12:00:09 2025 GMT
            Not After : Aug 24 12:00:09 2025 GMT
        Subject: CN=9af34f6f8da3d65fa4a7603f77c7dc97d67efcc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:12:a2:c2:12:4d:ef:c6:60:79:82:e3:e6:c6:
                    b1:df:a9:0b:3c:67:ab:9e:89:7e:28:9f:cf:d6:9f:
                    12:61:83:92:1f:26:ed:b0:84:6c:d4:28:15:c2:bf:
                    8e:78:50:4c:90:95:4a:3f:a0:ad:9c:f0:62:2e:ea:
                    d6:65:8c:aa:45:53:a3:9f:17:31:d2:30:b6:8b:73:
                    ad:7d:28:52:42:4d:95:56:4b:67:87:da:50:c9:bb:
                    93:d0:78:df:c4:e6:6d:81:95:a2:03:49:9a:d0:14:
                    39:43:0c:b0:b0:6f:91:75:80:c5:83:90:30:44:76:
                    62:f7:2c:fb:9c:d0:70:28:3c:1d:83:eb:68:ab:46:
                    c7:62:f7:38:e6:bc:e5:10:2c:fe:b7:16:81:9a:ca:
                    24:bf:b3:71:45:29:d5:3f:35:86:da:28:13:a9:8f:
                    09:7f:c5:a1:58:89:9f:70:3f:01:2a:45:55:9f:96:
                    08:81:70:7d:02:11:d3:64:f4:14:55:11:cf:30:b6:
                    6d:6b:9d:c8:d2:e8:30:cb:41:44:a7:04:9b:f4:37:
                    f8:4b:e5:85:1d:96:9b:79:4d:52:01:8f:43:21:d9:
                    77:4f:54:e5:cb:ce:2d:76:f2:56:d8:4c:40:62:15:
                    21:7f:bd:7e:bf:17:cf:30:db:f4:6b:4a:2f:92:7f:
                    3b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F3:4F:6F:8D:A3:D6:5F:A4:A7:60:3F:77:C7:DC:97:D6:7E:FC:C2
            X509v3 Authority Key Identifier:
                keyid:7D:EE:C7:EB:B5:CC:87:3C:C7:17:96:60:AC:FC:A8:04:D9:11:AB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:88:29:05:2a:38:ce:12:c8:0c:ef:47:92:35:a2:d3:89:8f:
         1b:0a:a2:df:cc:4c:3b:1c:52:ab:db:89:b9:68:fe:d4:75:33:
         79:d2:56:fd:1d:9a:c6:25:8f:6d:a7:67:ab:7c:a2:90:af:a2:
         12:36:21:b8:a3:6d:cb:30:62:6e:cc:9b:f1:47:80:10:2d:1d:
         82:27:f6:90:0b:4a:6d:4b:e6:13:a1:c7:20:c5:48:3b:89:cb:
         a5:18:e2:1a:1a:a7:ab:8e:d4:91:2b:c5:81:6d:c7:11:21:ca:
         4d:fd:f7:a1:b0:90:a2:32:0b:ec:85:36:af:a2:7c:e9:a5:3d:
         54:b2:e6:da:bd:1d:b1:69:7c:a2:40:3c:31:98:e6:be:8b:12:
         9e:0b:b1:b8:02:83:76:e7:07:5f:ce:32:d0:94:c8:6c:f2:21:
         5d:db:f2:83:5a:6c:5d:a5:15:ff:bf:a9:69:b8:2f:ee:43:62:
         9b:cc:0f:d3:7e:89:64:68:aa:af:d4:4d:9a:04:a7:26:ef:bd:
         1e:cf:73:10:44:1f:b0:d0:17:32:38:98:fe:c0:6e:b0:f7:df:
         80:fe:d3:02:dd:46:f1:f9:f9:93:f7:7b:ae:2a:66:36:a3:f9:
         d5:60:8b:f9:da:83:4e:3b:9a:52:97:ae:a7:e9:4d:d2:f0:89:
         d7:41:87:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:46:52 2025 by rpki-client