Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.mft
File:                     49CoS6s970HWqqkCjeekddMtEr0.mft (raw, json)
Hash identifier:          PYj+sXkEjJoiTmDjS/GNNXAn9a/LcnXsT+q9xM6355g=
Subject key identifier:   8B:22:B2:04:D4:48:A3:DF:A9:9D:A5:8F:F1:AE:DF:35:23:3C:2D:C7
Authority key identifier: E3:D0:A8:4B:AB:3D:EF:41:D6:AA:A9:02:8D:E7:A4:75:D3:2D:12:BD
Certificate issuer:       /CN=e3d0a84bab3def41d6aaa9028de7a475d32d12bd
Certificate serial:       019844ACA6641B683479558F1432E415CD3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/49CoS6s970HWqqkCjeekddMtEr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.mft
Manifest number:          07C0
Signing time:             Sat 26 Jul 2025 03:00:22 +0000
Manifest this update:     Sat 26 Jul 2025 03:00:22 +0000
Manifest next update:     Sun 27 Jul 2025 03:00:22 +0000
Files and hashes:         1: 49CoS6s970HWqqkCjeekddMtEr0.crl (hash: C1qOLT6bpHotob0ycTQqXRdqpe2cBp1ybLZ5CxOnvLQ=)
                          2: C2SAzy7mKgCswx8rNIKEBdaDIlQ.roa (hash: wG/EXCjH8YdNKE8/gDy3nKvr8/OTyii7rZL0CvSQyLI=)
                          3: OI7NNC-aK3Lu4B5oOeMvqliT7sI.roa (hash: aWqHIcw8FFa62kYu31jy3LFmVcZ+3N4ytjox/9f+rrk=)
                          4: dPqyZHQPjclEhoO6YFdX9DjRWHE.roa (hash: 9fpla0+AzxLAKXUZM+irYmUieOiP8DlrXLEQ0BQtpBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/49CoS6s970HWqqkCjeekddMtEr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:ac:a6:64:1b:68:34:79:55:8f:14:32:e4:15:cd:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3d0a84bab3def41d6aaa9028de7a475d32d12bd
        Validity
            Not Before: Jul 26 03:00:22 2025 GMT
            Not After : Jul 27 03:00:22 2025 GMT
        Subject: CN=8b22b204d448a3dfa99da58ff1aedf35233c2dc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c8:bb:bc:15:3a:69:7a:a5:c4:d8:24:62:ec:
                    42:14:42:c9:d5:00:29:af:5c:e3:72:ba:51:64:31:
                    3b:7d:a9:e7:b9:f8:1a:61:51:38:e0:ea:99:b4:09:
                    ad:ed:0e:4f:b6:64:fc:39:93:1f:c9:70:1f:4e:98:
                    2e:6c:5f:20:ee:4a:89:ad:0c:fe:d5:48:e3:52:71:
                    57:99:5e:7e:40:3b:68:f2:18:5d:bb:66:7d:81:fd:
                    87:ff:c3:d7:e7:0c:22:1d:24:bb:e0:85:4e:58:03:
                    86:1b:19:ce:32:57:57:86:48:2b:20:5f:d4:ed:1d:
                    4b:25:fa:61:09:23:4f:55:18:80:72:43:69:c2:a6:
                    85:27:97:26:95:30:e8:ae:99:8b:01:52:ec:94:2c:
                    d1:33:5e:ac:e0:a5:27:09:38:a5:d9:3a:d6:b5:4e:
                    b5:59:5a:9a:44:63:df:33:d0:01:8a:3b:6c:3c:47:
                    70:25:00:a0:66:b7:fa:cf:7e:1a:76:9a:c9:36:ec:
                    c6:2a:0b:80:53:0d:f7:43:8f:67:2e:2b:e7:33:f5:
                    ff:64:99:6f:5d:c3:d0:96:90:ee:e7:e7:b8:bc:12:
                    8e:e1:7d:c0:37:97:d0:b3:b4:05:01:97:2f:3a:28:
                    e4:ba:a7:ce:67:4d:34:28:05:11:c3:28:43:81:ff:
                    32:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:22:B2:04:D4:48:A3:DF:A9:9D:A5:8F:F1:AE:DF:35:23:3C:2D:C7
            X509v3 Authority Key Identifier:
                keyid:E3:D0:A8:4B:AB:3D:EF:41:D6:AA:A9:02:8D:E7:A4:75:D3:2D:12:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49CoS6s970HWqqkCjeekddMtEr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:c5:b4:b1:7e:93:35:20:fe:18:1b:68:84:f3:50:d8:2f:74:
         c2:7f:f3:f2:79:c5:d7:83:64:ca:92:e6:91:96:dd:9f:d0:38:
         66:d6:76:e1:7b:f0:a6:a4:6f:4d:a7:52:8e:fb:9c:6e:aa:ca:
         ca:a0:82:6b:f2:90:22:20:a7:a0:e2:c6:66:40:a1:1d:cf:96:
         f2:6c:77:0b:61:74:a1:78:72:32:3b:e0:16:32:63:ac:d6:8c:
         14:1f:c3:e1:a9:4e:05:30:a3:4d:0b:49:04:67:f0:61:39:f0:
         aa:4b:eb:d4:67:2d:aa:04:96:38:cf:e7:c0:5e:f2:27:17:50:
         cc:39:63:aa:b9:7c:db:9f:07:c8:12:bd:57:a3:8a:55:ba:de:
         d4:f8:9b:24:6b:12:14:ec:4e:89:aa:74:ab:c6:11:50:bb:a7:
         c7:95:fd:0c:1d:64:75:c5:8d:7c:95:bf:f6:a1:fa:42:62:e8:
         8e:50:e0:f2:2b:d6:49:29:ea:16:9f:f6:5c:ee:c9:50:84:7e:
         0f:64:9b:43:06:77:39:cf:d5:45:22:a4:b5:0f:10:32:b8:39:
         47:b3:e7:13:64:11:a3:f6:77:71:fa:9a:9f:22:1f:55:2b:f1:
         bb:68:6c:c9:ba:c9:51:99:01:31:b5:2d:47:3c:08:c9:86:ef:
         6d:31:b7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:36:58 2025 by rpki-client