Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
File:                     I7GUMIfOaWI-drIUWzR5rCBLock.mft (raw, json)
Hash identifier:          X3B4GcmAL9u3/FGak1ApmVrc2Y5/ZUv3MWwomsX2+ZI=
Subject key identifier:   2E:DF:B3:42:F0:49:5D:41:6E:C8:92:2E:6A:03:8B:4A:B8:3C:98:E2
Authority key identifier: 23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9
Certificate issuer:       /CN=23b1943087ce69623e76b2145b3479ac204ba1c9
Certificate serial:       019846D23FD16A4F35E31CD487DAE632F935
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
Manifest number:          153E
Signing time:             Sat 26 Jul 2025 13:00:40 +0000
Manifest this update:     Sat 26 Jul 2025 13:00:40 +0000
Manifest next update:     Sun 27 Jul 2025 13:00:40 +0000
Files and hashes:         1: I7GUMIfOaWI-drIUWzR5rCBLock.crl (hash: KBiL6pCiw8T7jYb99MYbTvUJ6yb4P1QSf+4JD9lRGCM=)
                          2: IGzDnKyfU3XrsCi1kVIq3v9WjnM.roa (hash: BCjdpahib4P29wEhEZ+5HfDxKnWj0l2OSsP7lZ3IOHg=)
                          3: fngY7vAjtnIa6khyzBr6ohfARXc.roa (hash: 8j7K0AdGmWd/+RMVsdDrX0khITQq1MTMhTuPXkbPnqc=)
                          4: xgdlAL2WKr_Js4V_ZLjPaz6bev8.roa (hash: CfOyHBtQR8zjYYv9qA3Dd8n5he3YeIT+MsIzoT30dKc=)
                          5: z5Ucz1kkGg56QZyAblN2WefSoGM.roa (hash: 5hK/qHn0csimMvRktmqCqsq2To8mi7zen0Vo1KFJGyM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:d2:3f:d1:6a:4f:35:e3:1c:d4:87:da:e6:32:f9:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23b1943087ce69623e76b2145b3479ac204ba1c9
        Validity
            Not Before: Jul 26 13:00:40 2025 GMT
            Not After : Jul 27 13:00:40 2025 GMT
        Subject: CN=2edfb342f0495d416ec8922e6a038b4ab83c98e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e8:d5:d3:b2:69:66:38:19:7c:af:2c:6d:68:
                    46:5a:f5:4d:6a:e5:e5:1c:35:6d:a5:52:59:69:96:
                    85:3b:e4:8f:c3:d8:94:dc:34:a5:a4:c9:37:f7:42:
                    c3:ed:07:eb:da:8e:2e:44:a2:fc:d1:b4:6d:ad:ba:
                    9f:68:87:2f:95:5a:ee:8c:b9:d1:b8:df:69:68:e7:
                    6f:7c:65:cc:63:2b:b2:06:08:f4:72:bc:9d:95:e3:
                    35:b5:8d:0b:ff:04:da:00:b7:3e:61:82:50:64:3c:
                    60:91:ea:92:6e:c3:d1:14:ef:a1:99:d8:2b:dd:6a:
                    68:ab:cc:8e:6a:b1:32:5b:be:ab:9b:2d:85:1b:c8:
                    4a:3a:1f:71:16:cd:a2:7e:ae:f3:b3:1d:5c:e2:cb:
                    26:47:13:20:21:9f:cb:8c:e8:1f:59:00:8c:e7:2b:
                    cb:8c:cf:bd:ab:78:37:5b:c3:02:d0:40:c0:c9:16:
                    c6:6e:92:00:4d:47:d5:07:b7:a1:e0:96:73:ee:89:
                    5c:b7:d5:6c:bc:ee:49:63:08:26:64:4d:b8:f2:57:
                    92:38:ae:34:02:9f:54:3a:6f:73:5b:ac:b8:22:da:
                    ec:d3:3e:f9:5c:82:ae:64:73:e9:0b:25:6e:da:86:
                    d9:fe:38:c4:b0:e6:54:fc:e4:66:14:c5:3c:24:68:
                    7c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DF:B3:42:F0:49:5D:41:6E:C8:92:2E:6A:03:8B:4A:B8:3C:98:E2
            X509v3 Authority Key Identifier:
                keyid:23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:b7:63:7f:3d:b9:16:ed:de:14:7a:94:88:f6:8a:06:d6:39:
         a6:98:e8:cd:8d:9c:72:40:cb:e9:1c:92:94:84:b6:65:62:4f:
         ad:be:c6:61:5b:7e:04:06:0f:77:78:4e:5d:5b:e5:2d:bf:ea:
         0d:65:99:94:d4:79:0d:02:22:d3:a4:98:c0:fa:ba:ab:5f:0b:
         26:bb:90:63:7e:a0:72:e0:2a:a3:e0:d4:da:18:bb:dd:0e:1d:
         a6:0d:ee:10:bd:e7:d9:9c:8d:45:25:3a:cc:01:dc:8a:76:1e:
         d6:eb:91:d3:d6:49:6c:f3:1d:88:b3:4d:be:25:06:1f:f4:9b:
         c3:30:52:31:de:64:13:a9:bb:9f:2a:a8:c9:24:eb:04:d0:ce:
         0f:e6:88:79:13:8f:67:77:de:99:bd:3f:fe:91:da:e0:5f:78:
         f8:d7:a5:e5:20:fc:8c:c4:f3:5f:1f:75:5d:ca:de:0b:17:17:
         38:0d:2e:d8:56:0e:42:ad:5b:05:f6:8d:f3:25:b7:e2:35:18:
         49:53:6d:d3:3c:88:e7:8a:24:ef:33:47:55:fd:89:8d:33:b2:
         41:b1:0e:5d:61:a8:15:36:80:e1:79:0b:89:a8:d0:fc:ab:39:
         10:b1:64:eb:ff:c2:ef:45:36:98:51:5d:35:81:79:78:6e:1d:
         da:6a:1d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:24:13 2025 by rpki-client