Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/7WJMWQAnpajJ7rNpcm5KYwzfQUw.mft
File:                     7WJMWQAnpajJ7rNpcm5KYwzfQUw.mft (raw, json)
Hash identifier:          9JsmPnFCzXfk/7jqwmK2neA4Hnn02nE0jkThBIhXvR0=
Subject key identifier:   8C:1A:2B:0B:93:4C:BB:0A:9D:36:A2:0F:FE:33:3B:E2:BE:18:F9:26
Authority key identifier: ED:62:4C:59:00:27:A5:A8:C9:EE:B3:69:72:6E:4A:63:0C:DF:41:4C
Certificate issuer:       /CN=ed624c590027a5a8c9eeb369726e4a630cdf414c
Certificate serial:       0199FBB35E054A8173F427692EFC891CEACF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7WJMWQAnpajJ7rNpcm5KYwzfQUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/7WJMWQAnpajJ7rNpcm5KYwzfQUw.mft
Manifest number:          0668
Signing time:             Sun 19 Oct 2025 09:01:00 +0000
Manifest this update:     Sun 19 Oct 2025 09:01:00 +0000
Manifest next update:     Mon 20 Oct 2025 09:01:00 +0000
Files and hashes:         1: 7WJMWQAnpajJ7rNpcm5KYwzfQUw.crl (hash: kXnWYAMfJbj3J+uIKxBn+Z5UCYDK57gUnoAehoV6B44=)
                          2: 8Mo6g9SFP-NIBZd3NEDkngdSZes.roa (hash: rO3KeiHvbOV2i5W5VXdPAcjCOnY/RKARKqJQlNG3u/Y=)
                          3: X6ONNbrSeOBD3kD76GPFoU9VA9Y.roa (hash: QD4WMSUllUbTUrFaxZU2Uc2vKKDXY/ZvuaWUTTLHo10=)
                          4: YmmMQQPClm4aJNcHY4nqMmKzxKo.roa (hash: t9N6GySKPe1l1d/1ycrJCeRhS1dtKqOZa7fj5PMZRB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/7WJMWQAnpajJ7rNpcm5KYwzfQUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/7WJMWQAnpajJ7rNpcm5KYwzfQUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7WJMWQAnpajJ7rNpcm5KYwzfQUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:b3:5e:05:4a:81:73:f4:27:69:2e:fc:89:1c:ea:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed624c590027a5a8c9eeb369726e4a630cdf414c
        Validity
            Not Before: Oct 19 09:01:00 2025 GMT
            Not After : Oct 20 09:01:00 2025 GMT
        Subject: CN=8c1a2b0b934cbb0a9d36a20ffe333be2be18f926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e3:40:cc:30:d7:a7:b4:d1:64:3c:98:93:de:
                    5c:ec:ac:62:c2:25:00:26:21:68:6a:ac:0e:b7:37:
                    b0:49:d5:44:a4:27:91:ee:78:74:8b:b0:40:77:f5:
                    4e:f1:43:bd:e0:8b:94:5a:ad:e1:6a:41:31:8a:f7:
                    51:4f:3f:0d:eb:7c:11:b1:63:72:4b:63:c9:7d:ae:
                    bf:32:10:a4:fc:9a:83:e7:88:b4:cf:1d:f4:18:64:
                    60:38:9d:d5:3f:c5:87:b0:e5:28:8a:2d:8f:9d:5b:
                    39:92:ba:0f:6d:53:6b:94:7a:2a:f8:19:eb:0b:d9:
                    7e:47:54:a2:ac:25:2b:b4:87:05:55:13:a3:50:28:
                    13:2a:05:5e:da:67:ef:88:57:8c:8d:5c:ce:17:32:
                    34:7c:d3:39:30:e4:7f:d7:2d:e4:98:bb:b5:87:ef:
                    3e:51:0b:78:31:ad:da:c0:21:d4:27:a8:85:4d:f5:
                    52:87:2f:48:05:13:2f:16:80:6e:94:2f:14:80:f9:
                    ae:f0:de:a7:1d:3d:72:a2:80:1b:ff:5b:c2:84:7b:
                    ca:39:7f:4a:3e:61:cc:77:ad:d0:d8:69:89:83:e2:
                    b9:39:13:42:2c:ed:ad:77:cb:69:64:6a:22:08:5e:
                    95:70:bd:bc:17:a5:9c:db:e1:f0:4b:a7:e4:4d:d2:
                    da:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:1A:2B:0B:93:4C:BB:0A:9D:36:A2:0F:FE:33:3B:E2:BE:18:F9:26
            X509v3 Authority Key Identifier:
                keyid:ED:62:4C:59:00:27:A5:A8:C9:EE:B3:69:72:6E:4A:63:0C:DF:41:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WJMWQAnpajJ7rNpcm5KYwzfQUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/7WJMWQAnpajJ7rNpcm5KYwzfQUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/7WJMWQAnpajJ7rNpcm5KYwzfQUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:58:46:f6:e6:65:32:19:ba:e7:75:18:58:4b:09:a7:8c:9a:
         36:db:3a:2e:b4:f7:33:aa:b4:59:f5:be:67:1a:22:a1:3e:c7:
         7c:38:ba:77:8b:a8:0d:09:24:59:a2:33:95:65:2b:30:78:12:
         71:5f:6c:8e:d0:3d:c2:65:95:47:a8:af:d4:d8:22:9c:ce:b4:
         b5:05:73:d0:7f:a1:9a:c5:4b:96:3c:e1:92:68:2f:2b:6d:14:
         77:23:c0:a9:89:09:94:36:74:42:0a:ce:b4:fb:74:0e:3a:c8:
         ff:99:38:a6:65:a7:3d:80:6a:60:53:40:7b:f1:46:17:ae:b4:
         98:7f:34:81:55:fd:c5:7b:b6:07:52:cf:6b:80:42:5d:b9:41:
         59:c3:78:d0:0d:5e:3e:a9:bd:49:bb:a3:5d:ca:a5:6b:d6:41:
         96:05:cf:0b:d0:7c:5d:c2:06:1e:f8:5d:7d:e2:96:5a:64:a8:
         6e:8e:5a:81:c2:e1:c7:ae:9f:07:96:37:f5:ae:03:ae:97:a6:
         bb:a2:32:aa:e2:c0:9c:9c:2d:40:86:fc:eb:d6:e6:8f:f3:49:
         cf:f8:c2:d1:81:1c:33:54:3f:3e:9d:22:23:14:ac:f7:ea:5b:
         b7:ca:45:ca:e3:10:c0:36:23:23:02:c6:d4:5a:e6:d7:2d:8b:
         d9:c8:ab:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:52:34 2025 by rpki-client