Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.mft
File:                     Mo7_u7_VU10-cbpuqBXuSQXBwg0.mft (raw, json)
Hash identifier:          M13Z7rCZsGrgKB8waKsMttjoqz4tEYWJ6b1NOQGYW74=
Subject key identifier:   25:CC:FC:FE:13:6B:03:20:83:FF:62:65:31:BC:1E:33:33:BA:3A:B8
Authority key identifier: 32:8E:FF:BB:BF:D5:53:5D:3E:71:BA:6E:A8:15:EE:49:05:C1:C2:0D
Certificate issuer:       /CN=328effbbbfd5535d3e71ba6ea815ee4905c1c20d
Certificate serial:       0198496677BAACB42A834A2B76ED567E31B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mo7_u7_VU10-cbpuqBXuSQXBwg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.mft
Manifest number:          0BA9
Signing time:             Sun 27 Jul 2025 01:01:48 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:48 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:48 +0000
Files and hashes:         1: Mo7_u7_VU10-cbpuqBXuSQXBwg0.crl (hash: Z3FWIjkPdY2F45I1o/zpk8p05Ig9hw7W0X4FJukR9ew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mo7_u7_VU10-cbpuqBXuSQXBwg0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:77:ba:ac:b4:2a:83:4a:2b:76:ed:56:7e:31:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328effbbbfd5535d3e71ba6ea815ee4905c1c20d
        Validity
            Not Before: Jul 27 01:01:48 2025 GMT
            Not After : Jul 28 01:01:48 2025 GMT
        Subject: CN=25ccfcfe136b032083ff626531bc1e3333ba3ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3d:ea:0a:14:b0:77:8a:a3:b0:0f:53:c1:b9:
                    68:52:57:90:09:c2:3a:94:55:9d:d8:1c:f7:de:f1:
                    3e:20:4e:fc:46:f6:9f:c6:46:ce:45:f8:58:ce:e5:
                    dc:4c:af:67:03:a3:08:56:4e:70:f1:cd:20:f4:d1:
                    bd:23:52:36:c2:89:14:74:c4:a4:43:5c:3b:9c:ed:
                    da:85:51:1d:dc:67:2b:44:ab:f9:15:4c:88:3c:6b:
                    04:10:b9:c6:1d:cb:7b:3a:b4:f5:c7:36:32:d9:9b:
                    d8:26:5d:7a:ca:f1:f1:67:ac:4b:6b:a1:7f:0d:78:
                    5f:fa:ef:2a:d4:f1:a1:6f:97:7f:c7:ee:c9:8d:27:
                    ab:ed:90:6a:24:a5:ea:64:70:b6:1e:23:7d:b2:20:
                    98:17:2d:a2:37:d8:07:b8:c1:52:ed:55:61:61:1b:
                    06:d4:77:4e:29:22:8b:97:5f:56:01:85:fd:67:0f:
                    a9:67:8c:03:bf:b2:0c:2b:65:1a:84:54:a5:c1:b3:
                    c0:26:4f:c8:11:14:11:d1:cb:21:ca:0f:72:77:b9:
                    67:ab:18:7e:c7:35:fb:45:97:25:0c:10:5d:04:f5:
                    b3:20:05:19:e4:03:77:51:dc:a5:b6:3e:f1:9c:61:
                    16:6e:6e:cc:c2:ca:85:d0:d2:80:7d:45:df:a1:ed:
                    28:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:CC:FC:FE:13:6B:03:20:83:FF:62:65:31:BC:1E:33:33:BA:3A:B8
            X509v3 Authority Key Identifier:
                keyid:32:8E:FF:BB:BF:D5:53:5D:3E:71:BA:6E:A8:15:EE:49:05:C1:C2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mo7_u7_VU10-cbpuqBXuSQXBwg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:87:e5:cf:d1:e5:03:b4:02:a4:27:49:5d:26:c3:3d:ef:8d:
         10:11:fb:56:f5:5c:87:5a:fa:0e:83:8b:b8:7c:c3:e8:16:b1:
         10:34:b1:76:d3:25:7b:b6:9c:3f:78:a3:59:f8:b6:3d:d6:c6:
         e8:4f:b1:32:b4:97:8b:4c:fc:ba:5d:37:de:8b:9f:02:ea:db:
         b4:c6:1c:8b:cd:4c:f9:6e:41:ea:b8:e9:66:9c:4d:dc:d0:b0:
         38:4c:38:d7:16:4b:a6:20:e7:79:b4:f1:67:c1:1b:3b:96:fd:
         d8:a6:92:eb:9d:48:6b:2b:6a:1d:63:ef:21:7e:35:44:a4:09:
         20:3d:eb:76:88:44:3d:61:af:a4:cd:be:b7:c6:2b:06:f7:ce:
         26:f8:cf:68:92:d1:94:5d:67:5f:52:eb:e8:87:43:cf:66:71:
         ca:e7:31:f6:ac:c9:d2:a0:0e:72:fc:2d:a4:26:6b:dc:5f:16:
         73:f3:a2:e6:75:47:50:6f:ce:31:90:65:a3:60:5e:82:ef:b8:
         c9:75:e6:fb:43:82:9c:73:4b:60:e6:cc:4c:9a:67:c0:4f:6d:
         e9:99:ae:e7:70:7a:8e:7f:d6:29:25:ea:c3:d2:73:4f:28:91:
         24:bb:89:73:4f:48:7f:8a:6b:9c:f5:51:2c:0b:f2:35:4e:69:
         e2:ae:6f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:08:43 2025 by rpki-client