Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
File:                     73VRezFhoEd2JBMwFhQhdnmoJgg.mft (raw, json)
Hash identifier:          wf2IrskjuOXfUQNQ3m3u0SWSzBODiJWS2ZDe5ah+mf8=
Subject key identifier:   39:39:F5:4F:59:7F:08:D7:E6:AD:A4:17:71:00:79:39:35:1C:A7:E7
Authority key identifier: EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08
Certificate issuer:       /CN=ef75517b3161a047762413301614217679a82608
Certificate serial:       019841AC07C83822A8035B91D30159D77001
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
Manifest number:          04EA
Signing time:             Fri 25 Jul 2025 13:00:49 +0000
Manifest this update:     Fri 25 Jul 2025 13:00:49 +0000
Manifest next update:     Sat 26 Jul 2025 13:00:49 +0000
Files and hashes:         1: 73VRezFhoEd2JBMwFhQhdnmoJgg.crl (hash: f0LRNJSoylZS+Nay/9z8ci/m/b0yzBGBhDSEskE1ihY=)
                          2: I9DHGKx_AzmEJdMn8QvC9F9ySxQ.roa (hash: dPotTh32y5QoI9nrsrf5Jji9m8QedErHZ0IgteKV744=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 08:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:41:ac:07:c8:38:22:a8:03:5b:91:d3:01:59:d7:70:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef75517b3161a047762413301614217679a82608
        Validity
            Not Before: Jul 25 13:00:49 2025 GMT
            Not After : Jul 26 13:00:49 2025 GMT
        Subject: CN=3939f54f597f08d7e6ada41771007939351ca7e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ea:1d:58:60:48:cc:16:83:28:aa:e6:24:4b:
                    74:fc:45:f7:17:8c:3b:2b:7c:ac:41:90:ac:b2:5f:
                    9d:b8:7f:bc:e5:13:08:49:45:d1:42:99:4b:93:2f:
                    12:ab:a0:1b:07:a7:5c:92:17:ce:b3:f0:99:fb:e1:
                    23:13:dd:65:e0:c4:f1:02:75:37:16:69:78:8a:6e:
                    94:3c:03:2e:98:47:9f:ff:a0:bb:6d:06:2c:0c:11:
                    6e:7a:d6:64:24:a2:1e:da:c5:d5:16:c1:a4:c4:a9:
                    34:86:6c:72:1e:dc:99:8c:b8:15:66:6e:4d:d5:73:
                    84:3c:59:0b:a5:9d:7d:1f:5a:b5:71:6c:b1:1e:a4:
                    06:9e:3f:ab:c0:37:86:7a:67:8d:7f:05:84:6d:7b:
                    c7:4d:52:c9:e6:0e:10:55:9f:a8:a6:3b:28:d7:fe:
                    3a:93:f2:a3:88:a9:ae:81:9b:e3:af:3d:14:4a:5d:
                    85:0e:16:f7:b8:c9:56:47:05:84:52:4d:73:33:16:
                    df:a8:b9:33:a4:ae:12:ff:fd:83:4f:87:a3:80:55:
                    39:9a:d4:ec:0a:db:34:8d:f6:6c:89:39:16:3a:f5:
                    53:d8:8c:df:8b:b4:b2:28:d6:11:79:e7:93:2b:90:
                    f0:13:ef:1b:6d:34:3d:d2:bc:2a:11:e5:ee:1a:a6:
                    6e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:39:F5:4F:59:7F:08:D7:E6:AD:A4:17:71:00:79:39:35:1C:A7:E7
            X509v3 Authority Key Identifier:
                keyid:EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:55:44:1f:7e:5b:fb:8c:cc:ec:83:96:d7:f0:cd:28:cb:e2:
         25:34:3a:ab:45:50:73:6f:1e:ea:29:4f:7f:6d:ff:d0:be:15:
         5d:b2:24:c2:59:28:eb:b4:27:f1:a6:95:5f:8b:51:fc:6d:8f:
         90:5c:47:07:db:92:12:a9:d0:c7:00:ff:d3:1c:b6:76:63:eb:
         38:bf:aa:64:27:b5:3b:25:25:aa:dc:56:8f:ed:be:c1:7e:84:
         3d:9f:9e:53:fe:0e:ca:cf:af:16:7c:c8:3f:7b:c6:e9:e5:77:
         42:54:c1:c2:22:d7:a7:1f:97:77:75:9b:8b:88:8d:b6:ee:9d:
         7c:f5:d7:4a:cb:f3:04:70:44:7d:10:fd:9f:2e:b0:4c:1d:f3:
         7f:79:72:46:b0:d7:c7:10:37:2b:67:0d:52:1b:7d:d3:4d:8a:
         d8:45:44:1a:58:d7:38:fc:95:2f:29:ad:e0:80:1d:ca:ad:3f:
         e9:cc:70:9d:9b:de:4e:49:89:c0:c3:f9:ab:e6:46:5b:31:97:
         43:74:f8:f3:b8:09:73:8d:75:b9:de:c1:16:4a:16:a3:27:75:
         09:14:ee:64:38:13:24:68:52:f3:c4:4c:ba:7f:44:77:72:cb:
         fa:82:ac:d6:76:0f:29:fb:85:13:22:40:f4:3f:58:ff:a0:37:
         bf:05:de:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 15:55:56 2025 by rpki-client