Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
File:                     7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft (raw, json)
Hash identifier:          2Kfs7ApFLFiRlMk8m6B2OZ1ayy45PfDwesr5QBualW8=
Subject key identifier:   1E:0B:02:50:AF:D4:13:40:1A:15:A8:1B:36:9A:C0:E3:06:31:EB:B5
Authority key identifier: EF:2A:8E:C0:3E:EC:3B:CF:C3:3C:F9:0F:1F:4F:8E:7E:90:23:4E:69
Certificate issuer:       /CN=ef2a8ec03eec3bcfc33cf90f1f4f8e7e90234e69
Certificate serial:       0198D73B08929A7EADD8466DE8AEB26F62A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
Manifest number:          05A7
Signing time:             Sat 23 Aug 2025 14:00:26 +0000
Manifest this update:     Sat 23 Aug 2025 14:00:26 +0000
Manifest next update:     Sun 24 Aug 2025 14:00:26 +0000
Files and hashes:         1: 7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl (hash: imLxQnCyQuWa23YP/5IBlC7o09Kjp48GedRSmpdsXz8=)
                          2: eVimXbeUG-mEaqJ8wWvzirp1aiE.roa (hash: O9VHdGh9iSLdn0Tv56KJfU/KKXIBvl+hkZsad3bOt5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3b:08:92:9a:7e:ad:d8:46:6d:e8:ae:b2:6f:62:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef2a8ec03eec3bcfc33cf90f1f4f8e7e90234e69
        Validity
            Not Before: Aug 23 14:00:26 2025 GMT
            Not After : Aug 24 14:00:26 2025 GMT
        Subject: CN=1e0b0250afd413401a15a81b369ac0e30631ebb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:55:0a:d5:04:40:40:30:cf:0d:54:c8:72:8c:
                    3d:72:bb:9b:67:98:93:0e:42:35:93:f6:29:0a:b0:
                    a7:f8:07:ba:6d:09:0b:3d:67:29:46:d4:81:e7:fe:
                    ef:fa:00:24:0c:d8:69:82:5e:72:68:18:1f:86:e1:
                    8c:38:ef:0a:f6:2d:4f:78:aa:8a:b2:79:8b:82:60:
                    b4:5b:7e:e5:1a:dd:31:66:d1:5c:40:7f:92:ee:16:
                    b9:b1:c5:4a:98:26:1b:7d:ce:01:d8:3b:3f:41:60:
                    43:8e:d9:6d:f5:10:ec:a5:23:39:a8:87:cc:5e:cf:
                    17:61:fe:f4:05:82:d6:eb:71:7f:17:a4:0e:ed:a7:
                    be:02:f6:c6:40:1f:b3:fc:3b:ba:af:8b:f6:bc:e4:
                    58:84:aa:6b:27:5e:08:fd:72:96:5a:35:d7:8e:f6:
                    76:0b:bd:fd:2e:31:3a:d7:3c:4d:db:36:44:75:6a:
                    7b:ab:bf:f6:e2:8a:80:02:77:5c:59:05:e2:ff:d7:
                    3f:1f:eb:5f:f0:ad:bf:e9:92:c4:79:19:3c:5f:4e:
                    d0:a6:f8:3a:1f:f8:4a:6a:ad:4d:c3:08:20:e1:cf:
                    3e:d7:fe:85:40:a1:d5:a8:19:b3:9c:49:49:9d:8b:
                    e4:9d:dc:f5:cb:24:22:bd:80:f8:9b:7c:51:6d:5a:
                    6d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:0B:02:50:AF:D4:13:40:1A:15:A8:1B:36:9A:C0:E3:06:31:EB:B5
            X509v3 Authority Key Identifier:
                keyid:EF:2A:8E:C0:3E:EC:3B:CF:C3:3C:F9:0F:1F:4F:8E:7E:90:23:4E:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:11:1a:f5:90:bd:b5:00:88:7c:8a:33:fe:18:b9:e6:c9:40:
         45:c4:1b:ee:80:75:0f:c8:a7:c6:3a:ca:e4:37:02:72:f6:5d:
         17:ae:fd:50:ce:75:ce:1b:dd:f7:3d:b3:f5:8e:1f:dd:8b:2d:
         9a:9a:82:d0:e8:87:6a:5d:f2:c3:cd:81:f7:f7:cc:6a:e5:5d:
         bd:03:33:9c:2b:57:5c:ec:6c:b0:df:83:f3:51:66:96:7e:b7:
         d8:b3:17:ae:2c:e3:61:05:20:d3:1d:60:4a:22:fc:8e:c8:b9:
         c0:09:64:16:a1:04:62:7c:95:07:b3:65:2d:72:a4:d4:fc:42:
         7a:78:b0:2a:39:e7:3d:b9:f4:8d:96:e6:cd:5f:a4:58:32:0a:
         ff:d8:65:6f:29:20:f2:61:46:36:7a:a9:8d:c5:15:a8:19:c5:
         22:a3:3a:7d:c8:1e:2d:e9:a5:bb:12:93:d5:1b:96:db:ce:60:
         0a:8e:5f:01:ee:84:ce:69:cd:fb:94:6d:f2:46:24:21:b1:ed:
         05:55:92:28:10:b2:3b:c7:06:60:aa:62:39:5a:f4:30:f4:a7:
         1f:a2:3d:ce:a6:c8:83:4e:0b:e8:b8:4e:82:49:8d:e3:96:6c:
         da:7f:5a:d1:a6:b3:5c:e2:0d:8e:2f:22:27:65:90:cc:2f:48:
         b2:a7:d1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:05:44 2025 by rpki-client