Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
File:                     Mu0BRXesc_-H7yDKb3V5XkyTf84.mft (raw, json)
Hash identifier:          pfi///4fOsN6+KAc6BmT7EL072zW6zzmXOszb5/Ki2Y=
Subject key identifier:   31:A3:39:FC:C3:7E:74:6F:B4:A2:70:0B:E2:D5:1C:7F:C6:20:8F:EE
Authority key identifier: 32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE
Certificate issuer:       /CN=32ed014577ac73ff87ef20ca6f75795e4c937fce
Certificate serial:       0197B77CBAB6BCB02010D2A63B3C0B881B48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
Manifest number:          07A6
Signing time:             Sat 28 Jun 2025 17:01:34 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:34 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:34 +0000
Files and hashes:         1: Mu0BRXesc_-H7yDKb3V5XkyTf84.crl (hash: SIX7buUT1PFfm8kIytYBhu5WPWMqLNGW4GBqQ/iQqzY=)
                          2: Szpv7SbbTq_ZPkpVt0ZS-yigLYQ.roa (hash: tot/yU4vNOc3RqisHsJwZZdti1Jdkg5nZCtY1DuBRp8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:ba:b6:bc:b0:20:10:d2:a6:3b:3c:0b:88:1b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ed014577ac73ff87ef20ca6f75795e4c937fce
        Validity
            Not Before: Jun 28 17:01:34 2025 GMT
            Not After : Jun 29 17:01:34 2025 GMT
        Subject: CN=31a339fcc37e746fb4a2700be2d51c7fc6208fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b8:69:71:10:71:be:53:9f:e9:56:ec:81:49:
                    86:55:2c:cb:e2:2a:12:51:2c:32:6f:e3:55:a6:f6:
                    c2:b2:c1:36:fb:44:3e:97:96:ef:97:c4:5e:10:c6:
                    01:58:ef:c2:c2:a9:8e:28:df:8b:42:aa:d6:6c:d9:
                    55:56:67:d5:8e:26:2b:fb:c3:1e:2e:da:a9:11:51:
                    50:b2:b7:65:da:1a:7f:bb:2c:f6:79:98:e2:15:59:
                    02:f2:06:fe:0d:8c:f1:98:57:74:f1:94:7b:81:8d:
                    ea:62:ba:27:68:72:0a:c4:9c:d7:ea:87:f7:9f:b1:
                    f6:4c:76:5d:14:a9:9d:0e:d8:78:6b:46:55:49:b0:
                    eb:ee:b3:44:72:bf:4f:4a:1e:14:87:42:e6:e4:e5:
                    5d:15:55:84:92:73:b8:c9:99:53:dc:7e:f4:6b:aa:
                    cd:81:57:a0:95:a8:2d:0e:62:2c:a7:34:d0:5b:f0:
                    d9:19:ad:f2:92:18:c6:7e:b9:ab:aa:b3:06:18:fe:
                    c5:24:83:e7:5b:72:19:6f:84:7c:a5:a0:65:57:64:
                    aa:63:5f:f7:00:d8:43:c8:38:6d:73:05:4c:dd:76:
                    dd:a3:3b:a2:76:69:af:e9:2b:f2:13:b3:96:8b:d3:
                    3d:41:1a:71:44:84:7f:cb:40:46:88:08:65:78:41:
                    e2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A3:39:FC:C3:7E:74:6F:B4:A2:70:0B:E2:D5:1C:7F:C6:20:8F:EE
            X509v3 Authority Key Identifier:
                keyid:32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:68:13:a4:43:36:42:fe:eb:c7:15:33:3c:d3:91:d1:fb:83:
         2d:b6:0d:5f:e4:18:36:1a:05:b8:13:fb:6b:06:79:9a:ea:83:
         dc:ee:75:60:4e:e1:55:b3:0f:ea:ad:84:e8:1e:31:b3:38:21:
         e0:de:39:09:0b:57:0c:e7:c2:e3:b0:03:b0:4a:3f:46:74:7b:
         26:0b:89:27:9d:0f:c4:e7:1a:e9:b0:60:e0:48:d5:39:29:5c:
         61:9e:6f:f1:ba:ef:24:ca:94:3a:81:89:06:ce:0c:32:ad:f3:
         ae:35:98:a3:10:bf:6d:59:d2:05:00:16:d9:e8:32:bb:c9:51:
         b1:c2:98:fc:b1:5c:a2:fa:4d:8f:a2:98:44:c9:80:a3:57:64:
         cb:4a:7d:57:6e:c9:79:61:05:0c:b6:69:72:f3:33:9d:e0:c6:
         fc:af:92:3e:3b:e6:cb:d6:c5:fd:03:2d:ba:e4:ce:89:a3:34:
         34:da:01:07:7a:80:f5:b1:ef:29:24:07:33:49:30:78:e0:d8:
         99:00:4b:87:41:ab:69:44:66:33:d9:35:92:90:9b:86:63:12:
         ae:f8:14:d2:50:1c:ea:49:73:8f:c4:e0:da:3d:ed:f1:51:9f:
         7c:d1:58:ee:05:12:7d:bb:d4:88:75:ab:ca:56:70:33:93:b5:
         24:46:fa:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:07:41 2025 by rpki-client