Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/62d9e4-1df7-4201-88b6-6dd74272c4c6/1/_u7-64gyDdP1gKaLWxzwpiQxBcw.mft
File:                     _u7-64gyDdP1gKaLWxzwpiQxBcw.mft (raw, json)
Hash identifier:          1OwmqXVEb1yTiY6qYYE/w4GLAhQiOhXSQD0AdmttUD0=
Subject key identifier:   46:62:8D:C3:FA:20:5D:C6:99:C3:30:05:08:13:8E:C0:69:D7:EB:4E
Authority key identifier: FE:EE:FE:EB:88:32:0D:D3:F5:80:A6:8B:5B:1C:F0:A6:24:31:05:CC
Certificate issuer:       /CN=feeefeeb88320dd3f580a68b5b1cf0a6243105cc
Certificate serial:       0198D4725FEFD626821DBC463C195D67E6D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_u7-64gyDdP1gKaLWxzwpiQxBcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/62d9e4-1df7-4201-88b6-6dd74272c4c6/1/_u7-64gyDdP1gKaLWxzwpiQxBcw.mft
Manifest number:          09E7
Signing time:             Sat 23 Aug 2025 01:02:01 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:01 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:01 +0000
Files and hashes:         1: _u7-64gyDdP1gKaLWxzwpiQxBcw.crl (hash: zkprsCu4BZTzWTX9H5TozW7Fy71eJph47b3ZOl2RU1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/62d9e4-1df7-4201-88b6-6dd74272c4c6/1/_u7-64gyDdP1gKaLWxzwpiQxBcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/62d9e4-1df7-4201-88b6-6dd74272c4c6/1/_u7-64gyDdP1gKaLWxzwpiQxBcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_u7-64gyDdP1gKaLWxzwpiQxBcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:5f:ef:d6:26:82:1d:bc:46:3c:19:5d:67:e6:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feeefeeb88320dd3f580a68b5b1cf0a6243105cc
        Validity
            Not Before: Aug 23 01:02:01 2025 GMT
            Not After : Aug 24 01:02:01 2025 GMT
        Subject: CN=46628dc3fa205dc699c3300508138ec069d7eb4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:eb:d6:27:4b:12:92:c5:61:5d:e8:c5:3e:06:
                    1f:ed:5c:7a:55:95:30:64:8e:d7:90:fb:38:05:22:
                    0d:38:b0:c9:5f:9d:0e:e1:74:16:71:8a:bb:90:23:
                    11:e2:d9:bd:c3:a5:42:fa:f8:53:65:7b:26:3b:fe:
                    40:22:1e:74:0f:97:9c:7a:99:8a:d3:fa:de:a8:cc:
                    6e:12:be:5c:90:34:2e:7d:40:99:44:ae:f6:dd:47:
                    6f:d8:a2:92:0e:b2:ad:2f:da:8d:55:cd:21:b1:e5:
                    d3:26:f4:a1:25:e3:d3:e2:d1:8b:6c:a7:e0:e3:19:
                    b6:21:a9:8e:38:ff:cb:54:ed:aa:c4:41:c7:fd:e0:
                    bf:11:24:97:90:78:17:b0:59:e2:02:bf:34:7e:56:
                    1e:ee:70:14:19:42:50:4c:7b:ba:3d:99:b8:47:3a:
                    9d:02:9c:9d:7b:db:c9:53:c2:b1:6f:9f:ba:11:bc:
                    00:b0:38:8a:8c:7d:d5:ab:62:c7:48:0d:e4:5e:d7:
                    21:9e:d2:ec:e9:6e:6f:af:96:1f:98:5f:5b:c3:64:
                    8e:3a:65:cc:27:a2:99:1d:1c:5b:15:a1:bc:c7:b2:
                    7c:8e:ae:77:2d:63:eb:7b:99:98:fb:fd:0e:61:16:
                    6d:52:9e:2c:ba:7a:1c:46:c0:86:16:2b:c0:fc:eb:
                    00:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:62:8D:C3:FA:20:5D:C6:99:C3:30:05:08:13:8E:C0:69:D7:EB:4E
            X509v3 Authority Key Identifier:
                keyid:FE:EE:FE:EB:88:32:0D:D3:F5:80:A6:8B:5B:1C:F0:A6:24:31:05:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u7-64gyDdP1gKaLWxzwpiQxBcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/62d9e4-1df7-4201-88b6-6dd74272c4c6/1/_u7-64gyDdP1gKaLWxzwpiQxBcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/62d9e4-1df7-4201-88b6-6dd74272c4c6/1/_u7-64gyDdP1gKaLWxzwpiQxBcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:28:4a:94:e9:64:5b:d9:34:4c:58:3e:54:4a:ff:91:31:ed:
         b3:6f:25:57:37:20:2e:2c:30:26:71:62:ad:83:a9:82:d7:14:
         d5:76:57:6e:a8:52:13:c4:a0:3d:83:b2:0e:60:14:fe:0a:38:
         09:49:67:ef:9d:2e:f5:29:0a:39:5c:8a:31:4d:52:79:e0:57:
         4c:ce:b4:dd:4d:b3:f2:10:06:2f:57:e3:c1:35:fe:ae:6f:3a:
         8e:a7:31:06:6e:b1:9f:c9:58:f1:e1:ce:e1:a6:0a:36:ef:99:
         25:03:d9:69:87:8c:58:96:76:75:4f:24:15:d7:43:ef:b3:86:
         71:92:21:8d:f2:de:3d:50:a6:e2:a0:d3:a4:b6:d9:92:6b:d6:
         5d:dd:d1:ed:b0:ae:19:bf:88:75:ab:54:ba:f2:45:d4:5b:27:
         1e:d0:e4:fd:bf:13:e8:e4:89:01:92:3a:5d:fd:16:58:f4:3e:
         73:a3:a4:23:19:bd:a7:2c:01:c4:28:78:e2:ed:9d:47:89:cd:
         a1:4a:c9:0c:50:af:d5:fb:67:f1:c8:89:a0:22:14:b9:29:ef:
         48:b8:87:60:e2:7e:fe:46:48:b6:f0:38:f8:3f:b8:c3:fc:0e:
         75:d4:c1:aa:c9:f0:97:0b:ea:b6:ee:bb:36:8c:16:15:df:15:
         e2:ea:05:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:55 2025 by rpki-client