Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
File:                     p6TiNIImhHXBuTVjfQACwv0pk7g.mft (raw, json)
Hash identifier:          PHG3u8wnGUfz+Oe9OXeOmIqPZAyMIoFZUHl4l9waAYs=
Subject key identifier:   B7:2E:0A:9A:1A:94:C8:CE:C4:04:A2:59:8A:4F:65:93:57:9E:C4:CA
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Certificate issuer:       /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial:       01965F843A37E1B397CEADBF05D0E9E427B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
Manifest number:          F7
Signing time:             Tue 22 Apr 2025 22:00:23 +0000
Manifest this update:     Tue 22 Apr 2025 22:00:23 +0000
Manifest next update:     Wed 23 Apr 2025 22:00:23 +0000
Files and hashes:         1: GNg5qyh_Im4ovVZo43PZo0cIDgk.roa (hash: JsYstEOr/RnKzA1W+dKnW/zW5VDgHcUDQlKG6Iu9Xvk=)
                          2: p6TiNIImhHXBuTVjfQACwv0pk7g.crl (hash: 9n5Q5kqlOKOnMA7s0RnTacmM598V4i0jsxZoAlvQrpY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 22:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5f:84:3a:37:e1:b3:97:ce:ad:bf:05:d0:e9:e4:27:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
        Validity
            Not Before: Apr 22 22:00:23 2025 GMT
            Not After : Apr 23 22:00:23 2025 GMT
        Subject: CN=b72e0a9a1a94c8cec404a2598a4f6593579ec4ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ab:0a:fc:60:55:d5:f7:82:b6:8f:b6:81:bc:
                    3c:30:6d:52:a0:97:67:a9:44:c1:fd:51:1c:31:2b:
                    23:7a:a3:1c:43:b6:a5:68:c0:e8:c7:92:ec:22:59:
                    4e:d9:69:5a:2b:28:6e:e5:29:d8:55:26:bb:76:b2:
                    9b:18:b9:e2:15:eb:86:49:61:df:b8:9a:43:19:af:
                    f5:f7:1c:d4:a4:b5:87:7b:7e:d9:92:36:12:c2:bb:
                    f4:33:37:c1:61:44:06:54:9b:8b:5e:d0:b6:48:60:
                    2d:cc:48:0b:e3:2b:63:fa:b1:64:24:c5:91:3c:ae:
                    ad:99:d8:68:7e:0a:80:b9:bf:69:c8:bf:83:56:b9:
                    30:92:5c:ec:08:8f:a8:a1:5a:05:e5:0a:67:b5:2a:
                    05:46:01:c1:cd:ee:ed:9b:ff:cf:95:76:94:31:fd:
                    68:1b:bd:16:b7:68:08:c4:e1:82:af:bb:42:81:e9:
                    b6:63:9d:82:86:f8:98:a1:0f:69:5c:fc:f1:45:2d:
                    b7:32:4e:d2:e0:bf:af:a0:73:19:d7:f0:26:5e:16:
                    a6:5b:16:3a:70:1a:36:bd:7e:b5:56:f6:85:c8:03:
                    24:78:9e:14:78:19:3f:1c:4a:ae:f3:8e:e0:f7:1e:
                    29:88:10:21:02:ff:e1:e7:d1:f5:de:c8:a8:1b:1f:
                    49:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:2E:0A:9A:1A:94:C8:CE:C4:04:A2:59:8A:4F:65:93:57:9E:C4:CA
            X509v3 Authority Key Identifier:
                keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:38:0a:8f:fd:ce:51:6e:f6:78:d0:32:6b:ef:c1:f9:d0:7f:
         ee:25:f8:32:6b:82:40:39:ce:a3:30:a0:df:a0:41:77:24:57:
         43:04:2d:5d:5e:f6:3e:ba:5b:5d:32:02:92:69:d2:db:b7:c6:
         91:f0:f1:a0:90:4b:25:be:65:a9:99:1c:fa:03:07:a6:01:15:
         9f:af:1e:d2:b3:da:20:5d:1f:f7:7f:f7:23:5a:02:2d:ab:2b:
         5c:cb:6e:a1:d2:74:12:33:a1:ae:7e:11:44:fa:f7:2b:16:5d:
         53:e7:79:8c:68:9d:37:e1:7a:3c:eb:18:87:e4:9c:31:25:be:
         ef:7c:ad:92:f4:07:6f:25:30:c7:2d:de:0e:e6:f3:7b:56:ff:
         1e:d1:d5:22:a8:64:ce:0b:41:bf:6d:af:56:51:39:f3:83:22:
         36:94:9e:cd:91:36:2f:50:f2:0e:ff:dc:0b:7b:71:9c:5c:cf:
         27:82:50:0b:eb:92:ee:13:87:88:e1:aa:33:7c:67:20:34:cb:
         f1:8e:e5:29:f5:fe:27:38:6a:6d:8e:8c:54:a3:5f:b8:90:d1:
         18:98:1c:2d:40:18:53:08:57:38:54:65:4b:61:c4:55:c5:d7:
         a0:2d:e6:d6:2d:08:69:f3:29:22:ca:f9:bd:42:df:e6:b2:73:
         bf:01:2a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:35:21 2025 by rpki-client