Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
File:                     rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft (raw, json)
Hash identifier:          qcxLu6sR36gP41vfAzvXrGRDBFdARNeZFovOVUx678E=
Subject key identifier:   97:7F:84:46:44:35:D1:99:92:87:8F:32:0B:94:DA:94:F4:AF:ED:DF
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Certificate issuer:       /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial:       01984A4109B216851E1E45FE804150BD53FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
Manifest number:          1673
Signing time:             Sun 27 Jul 2025 05:00:32 +0000
Manifest this update:     Sun 27 Jul 2025 05:00:32 +0000
Manifest next update:     Mon 28 Jul 2025 05:00:32 +0000
Files and hashes:         1: EkAtT1wisUb57TFJYIYcJsxKwsk.roa (hash: bTDaJJ3OE5tSiwj9edVtEIcHo7Qfr7K+HpTgz6mXWHU=)
                          2: H401Lqlj2gbFoYf6OtBoSN06cFw.roa (hash: vYELwnReHKGr6B9/fDrX/dIYrSBT2mFYuU7np1Kq32A=)
                          3: M3stNuz4pD7ZjpMskqzv9XlCj9A.roa (hash: NMOxvF7KRmh06hpPpSGd+qY4LB/onM0QHYCbQ+IenlY=)
                          4: UaajUBdy4UIZQWAc-WUnNkjyYv4.roa (hash: JCNjXurc6Io2gtx+nJaT/k0gUejH60kmigdqrXZ8+XM=)
                          5: rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl (hash: T9ytTXA3D2dzYxB3YYCEVQlkiVkDxt+bVoDxdx1RnlI=)
                          6: wuzH2my_mYDAlouZ5aRNnbo5Kzg.roa (hash: 8mZfF16h11ohkGa7jPqqzWnLZjCYH45hphmVsvoXp/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:41:09:b2:16:85:1e:1e:45:fe:80:41:50:bd:53:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
        Validity
            Not Before: Jul 27 05:00:32 2025 GMT
            Not After : Jul 28 05:00:32 2025 GMT
        Subject: CN=977f84464435d19992878f320b94da94f4afeddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4c:99:e9:cd:41:2a:db:c7:19:d6:55:cd:4f:
                    b6:ea:59:d5:01:46:c1:f4:0b:d9:4c:1e:9a:c9:02:
                    b1:6c:0a:f8:bf:12:b6:e2:dd:5a:f3:08:26:37:27:
                    77:2c:63:94:3e:79:d5:d2:41:29:73:f9:ea:38:55:
                    02:07:97:38:1b:1f:54:58:e2:a5:4d:55:0b:3d:0d:
                    37:53:b9:aa:1d:fd:ed:4a:a7:57:70:d2:dc:9c:20:
                    ac:c9:a4:9a:2d:e2:c8:13:45:32:6d:fe:6c:a9:41:
                    03:2e:b6:e6:02:32:21:86:2a:b7:83:5b:1d:43:66:
                    dc:e6:8c:dc:65:0e:74:3a:2f:ce:b0:33:d4:9e:40:
                    c4:32:3d:c2:a8:36:93:bb:31:bb:68:50:e8:d7:ff:
                    41:04:b4:60:6c:de:75:b2:2f:81:52:58:4e:9e:c1:
                    ea:f1:e5:75:5d:bf:0b:00:aa:a6:6b:5c:1d:f7:83:
                    29:25:51:42:79:8f:e2:fe:41:cb:c0:e0:48:fe:a3:
                    ec:00:b0:10:54:ef:ad:ea:66:4f:aa:55:b6:aa:33:
                    70:bd:82:11:10:9a:cd:31:5b:14:81:a8:27:3f:85:
                    c5:0a:f1:6b:35:2e:62:3e:69:92:ac:b3:e1:fa:8e:
                    a7:72:d2:ec:1c:47:fc:29:05:bc:ab:b7:b1:46:2c:
                    7e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:7F:84:46:44:35:D1:99:92:87:8F:32:0B:94:DA:94:F4:AF:ED:DF
            X509v3 Authority Key Identifier:
                keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:e9:00:e1:bb:78:26:49:d0:da:68:9f:b8:8a:01:eb:18:52:
         b3:79:cb:17:77:08:70:8c:0d:86:8a:0d:c4:60:c3:64:cb:00:
         ae:14:8a:6b:00:4b:7c:6a:8e:5f:98:65:b1:ea:fd:64:e1:16:
         23:63:80:1a:3c:b8:b2:d8:b6:3a:b2:e7:b8:df:a5:63:35:20:
         ef:50:97:ea:f4:64:09:72:ca:d4:7b:1e:4a:f1:77:be:da:ab:
         6d:a4:45:c8:ba:16:f2:5e:f1:f6:9e:2f:0b:fb:70:14:cc:bc:
         04:05:f1:0b:0c:c6:9f:a6:68:bd:91:f3:a0:96:c6:4b:33:af:
         b4:47:f3:3c:5b:b2:08:f5:84:98:ec:92:0e:6c:81:30:e8:03:
         43:a3:62:b7:de:26:96:05:89:4f:44:6e:77:c7:43:81:76:d3:
         8d:4a:d8:49:be:aa:a1:f2:56:9e:5e:7a:ea:e1:89:f8:9f:0a:
         26:c4:59:81:37:18:dd:43:fe:9f:84:8f:94:dc:ab:46:aa:83:
         5d:2c:98:c4:b5:71:0e:3c:af:7f:e8:44:e6:e3:d2:e1:64:15:
         62:c6:a5:f9:68:8c:d0:50:6e:6e:68:e4:e5:46:6a:42:c9:75:
         76:bf:48:c7:71:fd:9e:e4:a0:a6:45:39:f5:04:21:08:6f:3e:
         f5:48:c4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:54:04 2025 by rpki-client