Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
File:                     ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft (raw, json)
Hash identifier:          8fVuSkfOvnslcUMrZGzeprxhZfrZP1DEkrhcj9XCAXQ=
Subject key identifier:   8B:53:8E:DC:59:FC:E4:11:84:0F:98:B2:A2:42:98:66:D7:12:1D:63
Authority key identifier: 7B:0A:F9:73:8C:9F:79:9B:56:F4:B9:01:7B:F8:21:B4:FC:A1:35:B8
Certificate issuer:       /CN=7b0af9738c9f799b56f4b9017bf821b4fca135b8
Certificate serial:       01984A41401FA3899EB06B711F1862198CB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
Manifest number:          151F
Signing time:             Sun 27 Jul 2025 05:00:46 +0000
Manifest this update:     Sun 27 Jul 2025 05:00:46 +0000
Manifest next update:     Mon 28 Jul 2025 05:00:46 +0000
Files and hashes:         1: 9sc_Z6wsh2xqSgSi_D7ZTYMetBM.roa (hash: ysO7qNEauUD+3RJnhREGXDUT/3d77gpAizI5YbhTLSM=)
                          2: ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl (hash: pupe2RgVB1jTo+9ZyGHhx28wre4vo79GG63VrUM42+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:41:40:1f:a3:89:9e:b0:6b:71:1f:18:62:19:8c:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b0af9738c9f799b56f4b9017bf821b4fca135b8
        Validity
            Not Before: Jul 27 05:00:46 2025 GMT
            Not After : Jul 28 05:00:46 2025 GMT
        Subject: CN=8b538edc59fce411840f98b2a2429866d7121d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:06:0f:5b:32:6a:e9:10:78:06:18:c5:ca:76:
                    63:48:f8:e1:6b:8d:2d:05:44:94:a5:64:84:fa:06:
                    e8:39:35:aa:02:6e:01:21:c5:54:8d:99:f2:55:6b:
                    a1:5c:0e:a9:ee:41:84:fb:44:5d:78:5a:02:70:8d:
                    70:56:0c:2d:ba:04:8a:1a:be:f3:0c:3a:15:a4:72:
                    5c:5d:ea:ac:4d:9f:0c:ce:ee:51:14:fb:fe:67:9e:
                    ae:36:da:67:fd:43:bb:f4:aa:d9:1a:e1:bc:24:b6:
                    b7:06:09:c6:fd:41:8b:0b:95:ee:60:1a:bc:3f:cf:
                    ef:e5:47:af:3a:12:56:c6:0e:ff:41:07:49:a6:e7:
                    70:0d:9f:32:70:0a:2c:cb:98:cc:de:a8:e7:91:71:
                    59:f9:34:b3:85:63:c1:7c:20:c9:bc:d4:f7:22:ee:
                    89:1f:11:dd:09:4e:51:2e:61:60:3a:82:84:d3:da:
                    24:85:1c:38:dd:7a:d7:e4:dd:e4:ad:b5:ea:9c:9a:
                    e3:b7:2c:34:41:6c:3e:d1:cf:e3:aa:68:ad:5e:2e:
                    43:11:a4:29:cb:01:cc:b3:47:16:81:53:70:88:f6:
                    2d:95:ce:73:38:18:75:a6:72:cc:71:97:30:c3:e4:
                    c4:14:37:dc:e6:08:61:a2:ac:d9:78:8a:29:40:14:
                    a3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:53:8E:DC:59:FC:E4:11:84:0F:98:B2:A2:42:98:66:D7:12:1D:63
            X509v3 Authority Key Identifier:
                keyid:7B:0A:F9:73:8C:9F:79:9B:56:F4:B9:01:7B:F8:21:B4:FC:A1:35:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:7d:e7:3d:c5:39:a6:4d:41:b0:50:32:d3:aa:80:73:59:a8:
         cc:86:c0:03:6c:33:25:b9:07:fa:a5:7d:c2:bd:a2:56:f4:6c:
         47:84:2e:ef:a5:e8:63:45:cd:c5:ae:86:14:54:87:fc:b8:91:
         66:27:c5:2f:e8:8f:4a:64:10:62:45:7e:85:a2:41:7e:f5:c5:
         ed:c1:a2:02:05:61:e5:78:25:5d:b4:c9:a4:b1:88:7f:b9:fd:
         e8:1d:1a:de:f4:ea:a5:9a:77:3d:bd:44:5a:1f:1a:c3:c7:39:
         48:c7:f5:53:ac:c2:be:e8:76:8d:4a:03:ca:b9:b3:6f:af:6b:
         7a:76:c5:91:c1:fb:6c:a0:35:4a:b6:6e:bf:05:f6:e8:db:fe:
         6c:d9:50:73:d0:4a:06:f0:16:2d:2b:36:aa:c8:57:b2:5a:6f:
         b0:83:ae:a7:13:23:53:37:65:14:5b:1b:f8:c9:38:02:ff:9f:
         34:ec:25:bc:6d:1e:73:74:31:dd:de:d6:16:62:4f:4d:e2:98:
         a9:49:43:ec:61:36:63:2f:1e:b6:d6:94:0e:64:ae:ae:65:2f:
         1f:2e:77:d4:c5:92:57:42:bc:fe:f4:de:99:88:bf:d2:c0:3b:
         ff:3c:d4:80:b6:ff:47:ce:03:e3:17:70:8b:46:d3:c7:a2:30:
         ac:12:1e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:06:40 2025 by rpki-client