Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft
File:                     w_8EiaBkHM8dwes7Z08_YRFjuu4.mft (raw, json)
Hash identifier:          naecRJAChjnlIxsPMV2s5qs6M71XhZlolKJFD6EEiPU=
Subject key identifier:   01:F7:E7:00:E4:7B:3D:57:A9:F4:1C:93:62:E8:CA:36:30:37:4C:CD
Authority key identifier: C3:FF:04:89:A0:64:1C:CF:1D:C1:EB:3B:67:4F:3F:61:11:63:BA:EE
Certificate issuer:       /CN=c3ff0489a0641ccf1dc1eb3b674f3f611163baee
Certificate serial:       0197B7B2FE897E3E67BCA6EED8239A1E0DD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft
Manifest number:          14FB
Signing time:             Sat 28 Jun 2025 18:00:50 +0000
Manifest this update:     Sat 28 Jun 2025 18:00:50 +0000
Manifest next update:     Sun 29 Jun 2025 18:00:50 +0000
Files and hashes:         1: O3ljM5CB_2JtUI0Sdnkha5M5ERQ.roa (hash: NhJbXC81FRmcMSonVcZC+2A3GfW4bVjcRFKj0QoIURY=)
                          2: w_8EiaBkHM8dwes7Z08_YRFjuu4.crl (hash: a+jY7Mz2aSza/GnuNoQCnKmYyQYJTE8NQRSZUAr6Rn4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b2:fe:89:7e:3e:67:bc:a6:ee:d8:23:9a:1e:0d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3ff0489a0641ccf1dc1eb3b674f3f611163baee
        Validity
            Not Before: Jun 28 18:00:50 2025 GMT
            Not After : Jun 29 18:00:50 2025 GMT
        Subject: CN=01f7e700e47b3d57a9f41c9362e8ca3630374ccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c1:b3:71:d4:6c:f5:81:32:b8:9b:d6:79:98:
                    07:74:84:45:58:18:15:57:43:88:00:df:4a:49:5f:
                    18:8c:a5:bc:11:99:ed:29:f5:c6:ba:0c:70:30:f2:
                    2a:94:21:d3:3a:41:95:c2:fc:0c:02:d0:b5:7b:dd:
                    e3:2d:91:4a:99:0f:4a:ac:2f:38:cb:b6:c6:ed:90:
                    d1:ed:ab:be:71:ca:34:40:5d:01:a1:17:91:41:19:
                    1a:9f:4e:07:2c:b8:3e:52:85:55:bc:b9:83:b7:da:
                    a9:df:56:a5:36:27:0f:2a:c8:68:a1:9e:4b:87:e9:
                    7a:fb:a9:db:2d:d0:e8:92:d6:14:01:d1:42:d3:2c:
                    62:fd:fc:99:f2:cf:b2:b9:e7:d7:b0:71:04:ca:3a:
                    d9:d5:41:6e:93:3e:a1:cf:6a:e8:7a:a6:0b:2e:36:
                    33:4f:de:43:b3:8a:90:77:03:79:eb:62:94:a5:27:
                    39:2b:95:6f:df:6e:42:37:e9:a5:24:b3:67:84:03:
                    7f:8a:86:77:b1:2c:b4:fc:5a:38:65:d9:ce:df:e9:
                    f2:ce:25:aa:81:f6:5f:24:de:8c:8f:fd:d2:c7:13:
                    25:d2:0f:4a:6e:79:c2:ae:a9:59:fd:65:3f:72:9b:
                    2b:f2:92:b4:2d:27:4b:14:a1:ca:04:c0:d1:69:d2:
                    a6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F7:E7:00:E4:7B:3D:57:A9:F4:1C:93:62:E8:CA:36:30:37:4C:CD
            X509v3 Authority Key Identifier:
                keyid:C3:FF:04:89:A0:64:1C:CF:1D:C1:EB:3B:67:4F:3F:61:11:63:BA:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:19:ef:3e:47:eb:40:12:d7:23:a1:9e:51:c6:a9:71:ec:ce:
         f3:0d:b9:1e:ac:20:43:b4:f1:dd:8b:89:b5:2f:7b:df:d3:45:
         49:aa:c0:b8:61:ad:fa:e1:4d:96:95:1c:57:1f:e4:87:2a:ed:
         cb:8b:8d:55:ea:2b:59:04:d5:bd:c5:65:b6:0a:cd:f6:2b:82:
         64:c8:4b:20:24:d9:0e:84:04:e5:d1:81:b1:71:e4:5c:2d:53:
         dd:4b:b9:fd:68:d9:69:62:64:55:5d:ce:b3:28:17:1d:66:76:
         e3:2c:bd:b3:89:c1:de:6f:c5:bd:b2:5d:70:80:b3:f4:78:52:
         19:5d:32:a3:da:ba:c1:e2:6f:a3:47:40:03:32:b9:a1:da:e9:
         a1:c6:b4:e4:c1:33:7f:4b:67:82:29:29:85:68:e3:37:8e:4e:
         05:1b:72:41:51:11:1b:1d:c7:30:85:11:7f:a9:8d:0b:e3:3d:
         c3:a4:0e:dc:7a:33:76:60:2f:be:cf:31:c5:84:e6:ed:19:a9:
         70:a5:8b:db:eb:ef:bb:3b:65:0e:dd:d8:cf:e7:40:6e:18:f7:
         af:5d:ab:69:be:24:49:9f:a0:ae:d4:2a:dd:08:b1:f9:fc:ae:
         8b:2a:63:3e:6d:d1:e4:cb:cd:9f:e4:56:99:60:65:97:6e:dc:
         b5:3e:9f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:11 2025 by rpki-client