Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
File:                     7iUCbllV3N0RFHb5toSdcoGFRps.mft (raw, json)
Hash identifier:          CtRf5o/vHuWeRPHgg1kq35TYQ+s3CoI5BuMqOxq2fDs=
Subject key identifier:   8E:8E:0F:73:FC:D9:24:CF:A5:09:5C:5B:40:07:C3:85:0C:5A:00:4F
Authority key identifier: EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B
Certificate issuer:       /CN=ee25026e5955dcdd111476f9b6849d728185469b
Certificate serial:       0198D5F1881664DF896F9F176A2E791F548B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
Manifest number:          04B7
Signing time:             Sat 23 Aug 2025 08:00:32 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:32 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:32 +0000
Files and hashes:         1: 7iUCbllV3N0RFHb5toSdcoGFRps.crl (hash: QqUbGpuJZQ5yRxJMRTrst33IdjC9D/NZo7v6RjosTQ8=)
                          2: jO8_WTUfYU8WgAweNsy-XdM5HxE.roa (hash: DSCWbkkOzf+/qzK5D7cI20PP8IqsbGas6Mu8jntukrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:88:16:64:df:89:6f:9f:17:6a:2e:79:1f:54:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee25026e5955dcdd111476f9b6849d728185469b
        Validity
            Not Before: Aug 23 08:00:32 2025 GMT
            Not After : Aug 24 08:00:32 2025 GMT
        Subject: CN=8e8e0f73fcd924cfa5095c5b4007c3850c5a004f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2d:dc:ae:af:a8:6f:01:fe:e6:96:d0:eb:e7:
                    1f:19:0e:cf:dc:e2:7c:0e:5a:42:93:14:7e:e6:e3:
                    2e:90:1a:8b:02:18:08:5c:b4:67:64:a5:3e:d9:d0:
                    20:ed:0c:dd:6e:81:78:04:bc:11:b6:f0:ae:60:47:
                    8e:c4:13:c9:e7:83:7e:f3:e1:10:31:42:70:7b:77:
                    ba:5a:4c:95:d1:57:59:a1:13:60:54:2a:0b:24:2d:
                    55:1f:c0:84:29:d0:82:37:7b:6d:23:62:02:c8:bc:
                    f7:97:1b:e3:38:e3:31:45:64:2a:1f:e6:e6:1a:16:
                    b3:ad:97:f8:44:41:3c:66:84:15:f4:92:f2:7f:a8:
                    0d:81:0e:5a:bc:88:38:e7:38:28:f2:7b:3e:80:32:
                    fe:1c:bb:fa:37:0c:8f:10:cb:18:aa:b8:8f:da:d8:
                    fa:0f:1f:46:8f:12:bd:91:38:a5:8c:01:81:98:69:
                    bf:f3:ea:99:07:69:31:d1:ca:bf:6f:9f:bf:79:1c:
                    2a:90:a6:be:0b:7d:85:61:56:f7:01:80:ab:56:4b:
                    48:61:c7:ae:60:94:9d:f2:cf:dc:06:bd:bf:96:57:
                    28:56:16:6b:4f:a8:f0:d5:27:2d:52:7c:1c:88:29:
                    72:c6:11:f3:72:7d:f7:e3:6b:68:ab:8e:33:42:19:
                    ae:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8E:0F:73:FC:D9:24:CF:A5:09:5C:5B:40:07:C3:85:0C:5A:00:4F
            X509v3 Authority Key Identifier:
                keyid:EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:6f:56:42:72:ab:b5:70:3c:c9:40:62:79:9a:17:3a:84:d7:
         94:d2:e4:07:1f:b0:80:f9:bc:eb:7c:67:60:e4:4a:b2:3c:b7:
         f8:ec:14:48:b4:ab:b1:ca:7d:af:60:ae:81:d4:db:fb:ba:6a:
         61:dd:76:1c:02:77:4c:17:61:5f:40:03:eb:47:32:28:b3:52:
         31:9f:20:60:09:23:19:d0:df:b0:7a:6c:a0:6e:5c:47:a4:e2:
         d1:df:ab:1a:b2:c1:f3:c3:56:bc:6f:a0:58:07:3b:a2:8a:e8:
         d0:5c:02:79:d5:26:33:f3:bc:5d:a3:6d:a1:85:20:f0:fd:f8:
         83:d7:39:a7:7e:82:74:90:7d:66:38:38:57:5d:9b:7c:f9:31:
         23:7c:ce:22:d1:e3:1f:9c:11:52:b8:ee:b6:b5:13:cd:ca:dc:
         be:e6:32:6c:b2:0b:3c:c6:93:72:2c:6f:6f:96:37:f1:1e:80:
         12:4a:65:56:52:c0:33:f3:d0:b1:40:87:44:21:e2:c4:a4:a1:
         0f:16:4a:26:fa:cb:8e:8c:d7:39:21:ed:5b:2f:ca:33:10:81:
         f5:37:f8:56:54:2d:be:2b:e7:9b:8f:62:46:9e:06:28:b8:d1:
         0e:10:1c:34:f6:5e:2b:5c:ea:30:d2:dc:c0:5d:bc:a4:91:f0:
         ab:18:72:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:52:14 2025 by rpki-client