Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
File:                     08tc7MITufhtu6UYUh6FRuyThhw.mft (raw, json)
Hash identifier:          RqG3WczVU5glRmjAa+R2M/NXQOcJvflEQzJyR7pDUrA=
Subject key identifier:   C9:4D:F9:04:13:43:F9:F5:4C:1F:5C:A4:71:C4:8E:6C:90:B5:9A:5B
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Certificate issuer:       /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial:       0198466428BE1423DFAA18FD9B3865263A66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
Manifest number:          11E7
Signing time:             Sat 26 Jul 2025 11:00:25 +0000
Manifest this update:     Sat 26 Jul 2025 11:00:25 +0000
Manifest next update:     Sun 27 Jul 2025 11:00:25 +0000
Files and hashes:         1: 08tc7MITufhtu6UYUh6FRuyThhw.crl (hash: Esisul2ziyUUJ91rIy11K5ZNp89sMCjAoa5VbJ4w4MU=)
                          2: 0H1Z8N5wGt3dSjqDG8bowD-Ttng.roa (hash: oPSp0ubsi2iqvVhAG7FKsfv+UH3h4fdTyPyVMxry6Iw=)
                          3: 7cGpErFojxZQKCSeJeJ8U-ucjfw.roa (hash: u8HNSCh1+MNiLey93QoDDaHwFmVThoOReQEndhAwPeo=)
                          4: JR5xcAQWVgTPGyjPg7XJgFbWGnU.roa (hash: 4C25vRmgSuVzjJ8c0h/sdLRJbeJ7vJx3vVEJHRg1ZU8=)
                          5: YQaxTK7FAj_2FFDFWnq-j0TF5R8.roa (hash: J+sfrqDRaIaNCnrB/qidc2XHG3Pcd1LgS59q0souwmY=)
                          6: lJFoGwOfjYG7bpWJkltu5e79TPY.roa (hash: a/JvmbooIi2RUBJmFiHrsUi1IesqwE85tvSq7Xkrm58=)
                          7: nAU_2VpM5SccaGQsl0YkIDwDC1w.roa (hash: LkSzGNi0v1t7wdhC/pLyKhtEY4pQXgh7tGdjsi4l0Ig=)
                          8: t-vvyyJncvAAfAa96YEzMwSH7gE.roa (hash: +EAIODGI0gSrFAD6b3Gzh1imFWAdsumE5Q8Vo1ZApM4=)
                          9: w_kbWva8bPy_BJIaV4ykob78GrA.roa (hash: E/+pwYk30W429Hx1ACBcwVtYRPMkzzJrjllRBSavTZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:64:28:be:14:23:df:aa:18:fd:9b:38:65:26:3a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
        Validity
            Not Before: Jul 26 11:00:25 2025 GMT
            Not After : Jul 27 11:00:25 2025 GMT
        Subject: CN=c94df9041343f9f54c1f5ca471c48e6c90b59a5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:31:8e:1f:b4:07:b7:0c:27:0f:2c:73:35:ec:
                    d1:83:e3:31:fb:43:ad:de:54:37:24:aa:1c:fe:0e:
                    e5:c3:5e:53:6e:a8:ec:4b:11:49:fe:cd:6c:49:25:
                    50:1c:54:48:3d:5f:64:00:1d:78:d4:49:66:3e:72:
                    39:08:b7:c3:da:a6:a0:9a:df:97:bc:c5:c8:57:43:
                    eb:44:cf:f4:71:de:01:c9:b0:e8:09:52:b6:b9:55:
                    36:cb:95:42:f1:65:04:5d:a2:fe:f1:9e:45:a4:7f:
                    d2:e1:8a:6e:dd:e3:1d:82:43:55:51:ab:bd:82:e9:
                    b9:74:8c:a2:51:8b:58:70:17:a1:68:b4:f7:9b:cb:
                    0e:94:b3:14:2c:0a:ee:6c:62:85:12:c9:85:3c:ed:
                    f6:43:6f:1a:ee:5c:cb:69:49:e4:81:ba:f9:88:49:
                    de:1f:58:cc:60:31:e1:26:d3:34:6c:0a:ea:d5:9c:
                    ca:5e:f4:5d:ea:da:25:97:79:e8:83:a6:40:50:71:
                    1e:ad:99:51:25:d4:5e:dd:f2:d8:e6:8d:dc:94:e1:
                    ef:72:93:e6:c1:fa:87:a3:1f:75:2f:d7:29:a3:bf:
                    8f:cc:54:5e:5f:e2:07:80:8f:77:af:99:92:62:07:
                    3d:bc:7f:97:b8:d4:97:e8:77:9e:76:00:9d:62:b2:
                    a4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:4D:F9:04:13:43:F9:F5:4C:1F:5C:A4:71:C4:8E:6C:90:B5:9A:5B
            X509v3 Authority Key Identifier:
                keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:82:47:16:bc:ad:e5:b9:db:75:0e:d2:0e:f3:b4:3f:81:3c:
         85:4e:86:82:21:e1:d2:57:b6:5a:74:c5:64:0e:d3:5b:ca:4d:
         12:90:75:a3:ca:bd:eb:0e:fc:23:e7:57:1e:5d:94:92:a1:1b:
         76:14:79:50:59:a1:3d:7f:1b:08:80:4a:79:78:f6:83:7b:e0:
         58:66:44:ca:ad:05:76:60:1b:a8:2c:41:71:be:7b:97:82:d3:
         3b:22:f0:43:77:79:6d:73:10:67:dc:ed:6b:3c:10:89:a5:dd:
         20:fc:6a:7e:c7:86:79:6e:34:46:bd:d5:32:83:d2:a7:54:3a:
         8d:58:96:15:fe:2f:4b:76:02:96:6c:a6:e3:20:59:71:df:ad:
         03:e9:80:8d:5e:50:b4:06:a4:8c:75:60:52:d5:e9:ff:e1:be:
         cc:de:6d:5a:80:ae:5d:bb:91:ed:06:70:07:51:1d:f8:6a:e3:
         d3:b2:f3:1a:2a:f6:7e:32:d0:b3:66:03:c6:26:52:e3:ed:72:
         59:e7:f7:cd:ec:7a:18:5c:de:b1:fd:8d:b1:4f:ae:84:0f:4d:
         ec:b5:1b:83:63:ce:4f:d9:2f:3b:15:e4:53:25:80:49:30:2f:
         89:7c:14:77:86:f4:52:61:52:09:90:d5:da:bb:6b:6f:4d:56:
         d4:37:d5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:14:45 2025 by rpki-client