Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
File:                     7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft (raw, json)
Hash identifier:          wgYxrBRbvszAJ9SL8tZO3FQiYJoUwj3GQw7VUeF5q0Y=
Subject key identifier:   FA:F5:32:D2:20:34:6A:34:ED:95:FC:1F:78:3D:10:FA:9B:E1:79:21
Authority key identifier: EE:EF:A9:C2:95:06:B4:FC:F1:72:92:11:A4:FA:77:C1:F2:11:46:8D
Certificate issuer:       /CN=eeefa9c29506b4fcf1729211a4fa77c1f211468d
Certificate serial:       0198496526E631A007BBD8D998FE3BCC2C06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
Manifest number:          065E
Signing time:             Sun 27 Jul 2025 01:00:22 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:22 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:22 +0000
Files and hashes:         1: 7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl (hash: LX9viQNRHOLnmYHtTCB/1d/SP7PilV2gLjdpnkm2MPw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:26:e6:31:a0:07:bb:d8:d9:98:fe:3b:cc:2c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeefa9c29506b4fcf1729211a4fa77c1f211468d
        Validity
            Not Before: Jul 27 01:00:22 2025 GMT
            Not After : Jul 28 01:00:22 2025 GMT
        Subject: CN=faf532d220346a34ed95fc1f783d10fa9be17921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:40:b1:b6:76:f8:eb:3c:8b:48:b0:dd:b1:c7:
                    5d:1f:3e:eb:dd:a4:53:78:b3:80:2f:5b:19:ef:40:
                    8a:eb:97:74:80:b8:27:59:0a:30:a1:75:aa:54:c4:
                    08:7b:eb:80:94:45:d8:d9:46:fc:ed:c8:c2:65:3a:
                    e3:df:da:a7:65:b5:1a:9b:bd:9e:7d:32:0e:5e:6c:
                    78:ef:42:0d:f1:4b:36:67:2e:f6:d6:fc:d7:99:35:
                    73:ca:7b:16:b9:93:0a:38:d0:90:b1:92:5b:ce:58:
                    6b:c3:15:da:dc:a0:cd:1e:5e:7b:b3:19:6f:0f:dc:
                    ac:7c:48:86:7c:9f:ac:6f:73:c3:d3:1d:41:db:b2:
                    f4:56:f1:32:77:d7:5a:e5:ed:33:03:69:95:70:13:
                    42:f3:f2:d2:42:58:48:e4:67:e9:21:5e:8d:3b:c0:
                    5b:ad:d7:9a:65:36:77:e4:33:3e:e9:94:29:5a:68:
                    2e:3e:53:6e:a6:24:1b:d6:d0:1e:01:6f:d7:26:6d:
                    03:19:89:96:03:6e:89:26:f9:6e:de:42:07:ea:b3:
                    ef:0d:75:2d:96:2a:4e:4a:50:86:c0:c3:40:a2:45:
                    15:2c:3c:0c:23:c4:5c:7c:3a:03:f2:2a:5a:20:6b:
                    17:f2:59:47:a2:ee:e7:6a:40:67:85:cf:43:5b:49:
                    64:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F5:32:D2:20:34:6A:34:ED:95:FC:1F:78:3D:10:FA:9B:E1:79:21
            X509v3 Authority Key Identifier:
                keyid:EE:EF:A9:C2:95:06:B4:FC:F1:72:92:11:A4:FA:77:C1:F2:11:46:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:1c:10:f8:6c:cb:06:22:5a:13:91:39:16:e1:bf:5d:d3:a7:
         76:00:9c:75:ab:69:7e:7a:1b:42:3e:b3:9d:1e:34:cf:a7:3e:
         c8:08:74:c8:4c:0b:14:75:4c:9c:97:a5:cb:8f:b7:18:49:2d:
         72:6e:ae:e0:d4:bb:d7:ab:08:50:39:2b:6a:fa:b3:44:8f:9d:
         aa:c1:f5:40:50:d1:33:b0:eb:7f:9c:b0:f5:ac:a7:f6:3c:4e:
         54:22:a8:ae:8c:65:f5:6a:ae:7f:fc:28:ac:e7:80:34:7f:85:
         f8:0f:ef:82:92:eb:a0:8e:a7:ed:8c:0e:67:04:52:a2:ec:25:
         9d:a1:a2:ef:64:06:20:bd:59:17:92:65:56:12:8a:f8:13:12:
         4f:dc:02:7e:87:8f:e9:e2:8a:69:a5:a6:a4:1c:b5:d1:20:71:
         19:1e:86:1b:b8:82:63:1b:c9:58:c1:41:b8:90:c9:ec:9e:7a:
         ac:51:22:cc:91:c6:f8:c6:f4:b8:38:c9:35:62:21:2d:69:46:
         8b:92:33:9b:4d:12:6b:6c:c3:2e:01:1d:df:29:7d:08:b6:12:
         e8:df:3a:0c:14:11:23:cf:0c:78:1f:95:e5:e8:ac:22:86:77:
         be:62:79:c4:64:7f:8c:9a:99:dd:f2:77:be:20:b0:52:52:8a:
         f1:05:5b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:37:15 2025 by rpki-client