Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
File:                     7KM8lvAqnwvvJc04BqJGfKFlY3s.mft (raw, json)
Hash identifier:          +2p+Hbvb19y4BTwJiBYztu2YVEgwEvZgistlwwXqxEA=
Subject key identifier:   18:7F:A3:A2:08:96:EE:68:98:99:27:4F:51:81:F8:04:3E:1E:49:81
Authority key identifier: EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B
Certificate issuer:       /CN=eca33c96f02a9f0bef25cd3806a2467ca165637b
Certificate serial:       01984DE6E262831BEBD4FF6A427B845106D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
Manifest number:          1602
Signing time:             Sun 27 Jul 2025 22:00:33 +0000
Manifest this update:     Sun 27 Jul 2025 22:00:33 +0000
Manifest next update:     Mon 28 Jul 2025 22:00:33 +0000
Files and hashes:         1: 4_25V1XttJ1qw5vFtRBIGOQ28e4.roa (hash: jrFE5OHsnZSV8YIte/QlrxAa0XpS7lb+A+yiq4ZHdDE=)
                          2: 7KM8lvAqnwvvJc04BqJGfKFlY3s.crl (hash: w6jLVzDtlFTyXYcLKe+OaHZ12k7oan45esHvemfPWh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 22:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4d:e6:e2:62:83:1b:eb:d4:ff:6a:42:7b:84:51:06:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eca33c96f02a9f0bef25cd3806a2467ca165637b
        Validity
            Not Before: Jul 27 22:00:33 2025 GMT
            Not After : Jul 28 22:00:33 2025 GMT
        Subject: CN=187fa3a20896ee689899274f5181f8043e1e4981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:16:a0:3d:12:08:cd:31:eb:f6:46:22:cd:cb:
                    c4:04:06:ea:69:5d:03:b1:80:50:23:93:87:ca:bb:
                    ba:4d:03:45:3e:a3:b2:16:78:2c:7c:38:f1:62:d7:
                    d6:ce:7b:e6:ff:0a:8b:c2:49:67:f2:80:cd:1c:20:
                    c6:10:fb:51:ec:a4:75:2e:0b:f6:4a:46:40:4e:a9:
                    d5:9d:b3:e4:11:ab:59:a4:5d:9c:4f:1e:f6:28:50:
                    86:8e:19:57:45:d3:90:61:d4:8d:8d:ec:69:d6:f9:
                    19:68:15:8f:2b:a8:4b:9d:9b:ab:a1:b0:ba:5e:3b:
                    52:c5:ed:69:0d:47:32:be:06:e3:a1:20:30:18:57:
                    e8:16:3c:67:1d:7b:a1:88:3c:7e:19:f8:66:29:f5:
                    59:bd:8f:95:c0:00:b0:49:1e:b7:8f:87:9d:97:a0:
                    6d:1c:05:6b:4c:79:5a:7c:09:e1:2e:b0:5d:95:63:
                    f2:ba:83:07:bd:3d:3e:b8:0e:5b:fa:2f:1a:95:62:
                    5a:ae:bb:b8:ff:8c:01:bc:3e:8a:6f:20:fa:b1:f4:
                    41:3d:0e:22:38:e3:9f:f6:63:8e:70:53:28:ca:9d:
                    32:f3:f8:4f:c4:cc:98:8b:e7:f2:ba:a8:32:23:8b:
                    c6:36:39:4f:e9:e5:ed:c7:de:0f:e8:ee:d1:84:af:
                    2c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:7F:A3:A2:08:96:EE:68:98:99:27:4F:51:81:F8:04:3E:1E:49:81
            X509v3 Authority Key Identifier:
                keyid:EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:63:3a:5d:84:55:40:1b:0b:ba:17:8e:18:43:14:46:b2:23:
         6b:ee:21:54:4a:0f:f0:07:dc:bf:ac:56:24:ca:ba:0e:20:60:
         1f:56:37:15:52:1d:97:80:4d:e6:d3:cd:47:73:56:2c:60:22:
         51:32:34:5a:0e:ee:68:7f:c3:b8:6e:4a:5a:9d:99:54:4a:24:
         4a:c9:bd:36:e3:b0:f8:f8:eb:fe:72:7a:cf:be:7d:73:33:31:
         c0:02:26:a9:c9:82:7a:31:20:5a:8e:a3:04:b9:87:12:36:14:
         b1:5d:c3:3d:06:dc:77:d4:aa:41:10:00:cc:2f:5b:08:ef:ea:
         cb:4b:a3:37:16:d3:e4:11:9d:6a:24:46:ea:31:0d:62:1d:2f:
         db:c8:23:5c:1a:aa:7d:b4:b0:f2:3e:16:98:f3:ca:48:32:96:
         61:d2:9a:fd:52:c6:44:f7:e4:f9:0d:31:ac:b2:de:48:10:8a:
         e0:ee:f1:76:9f:89:1d:24:81:1b:d4:a6:88:67:9b:1d:f9:b5:
         a0:52:09:77:99:62:0b:b5:f6:62:ee:19:1c:b2:4b:c1:21:9c:
         f8:1b:fd:c6:f8:db:0f:82:5d:29:7f:60:a1:ec:27:13:cf:7d:
         fd:75:4b:d0:e3:0a:ca:7b:d5:2f:99:f6:bf:7d:17:78:1a:9e:
         7e:14:68:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 07:25:40 2025 by rpki-client