Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
File:                     ehuwNttA15nYYRmKUkOzwD1Wwgo.mft (raw, json)
Hash identifier:          eavzDbihXtxoOEsFG9BqX0/X3+2n7yoWQxi23Z6XbQU=
Subject key identifier:   67:C4:85:0B:72:98:3A:D0:9E:CA:9D:CE:72:10:41:7C:E1:B4:C2:D3
Authority key identifier: 7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A
Certificate issuer:       /CN=7a1bb036db40d799d861198a5243b3c03d56c20a
Certificate serial:       01984964F4A6A21815BD24F46A45EFAE82BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
Manifest number:          0148
Signing time:             Sun 27 Jul 2025 01:00:09 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:09 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:09 +0000
Files and hashes:         1: XmpF35ngj-yNyTGypvCjCYGlpo8.roa (hash: 8XBhk5d8sjaCG8b1mNcJkFy1C7vdRPz5bf2EYXdWLuY=)
                          2: ehuwNttA15nYYRmKUkOzwD1Wwgo.crl (hash: W0Dx4VhkD49O8/tEOuTKxxD4cGKrygjEIJHa6DMASrE=)
                          3: te8WoSPpdBUUYvd1WKkLZbO72RM.roa (hash: o04bmvCElYlWOOu299mgLz7Vc+VKn0vUSkUyiAJD0o0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 01:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:64:f4:a6:a2:18:15:bd:24:f4:6a:45:ef:ae:82:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a1bb036db40d799d861198a5243b3c03d56c20a
        Validity
            Not Before: Jul 27 01:00:09 2025 GMT
            Not After : Jul 28 01:00:09 2025 GMT
        Subject: CN=67c4850b72983ad09eca9dce7210417ce1b4c2d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d4:7d:77:b9:fd:77:8e:e5:a1:d6:dd:72:1c:
                    2b:4b:52:bc:a2:a6:b6:1a:48:bd:26:49:95:a2:ce:
                    a8:2e:ef:9e:93:c6:34:8e:1c:af:ac:49:84:25:fc:
                    a0:e5:e1:41:a0:6b:02:e2:81:44:f8:af:d1:90:cf:
                    be:8e:a1:3f:24:d6:00:cd:ff:e9:03:8e:35:e3:70:
                    85:6b:7b:ec:47:32:3d:b2:fc:b0:d7:99:64:e9:71:
                    61:68:e2:52:42:5e:66:b3:59:cd:35:90:61:90:37:
                    8e:32:41:bf:c6:7d:10:a4:eb:04:52:00:4a:b9:a8:
                    c6:d6:69:17:f4:e7:8f:b7:bb:18:88:0b:58:50:57:
                    5e:e5:dc:6a:74:92:6f:4b:13:eb:67:63:2d:48:c6:
                    1c:40:9f:2f:c7:db:1b:03:3a:3b:9f:72:e9:15:d5:
                    bb:2f:00:1c:a6:65:99:12:45:0f:78:da:70:52:6b:
                    bd:c1:ff:b5:27:07:7d:55:2b:27:96:7c:19:77:c0:
                    03:c1:8e:eb:78:9a:e9:62:3b:c3:85:77:70:f9:e2:
                    f8:31:03:94:ee:35:da:f2:d9:35:4b:0a:a3:a7:11:
                    20:a8:22:15:9a:b3:c9:2e:4b:5b:f6:a7:24:91:0a:
                    47:bd:a2:b2:4d:d6:41:ca:b0:38:3e:d0:57:28:c3:
                    0e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C4:85:0B:72:98:3A:D0:9E:CA:9D:CE:72:10:41:7C:E1:B4:C2:D3
            X509v3 Authority Key Identifier:
                keyid:7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:48:7d:89:8a:c1:c8:c8:5c:f4:cd:e3:11:6e:67:0b:0d:25:
         13:5d:2b:9b:26:6d:03:ee:3e:6b:3b:89:97:a8:9d:49:bc:ab:
         ac:c6:82:77:82:1f:ac:cf:d6:9c:28:cd:9a:73:b9:05:b1:3a:
         1e:b4:71:03:6b:f4:cd:eb:b6:cd:3a:e5:e6:2e:ee:26:ae:54:
         11:0a:f1:5c:ef:a3:49:d9:73:1a:fd:81:dc:80:aa:08:e7:0a:
         02:09:69:7f:37:10:bc:21:57:ef:2a:8f:ab:cf:1e:bb:dd:a5:
         22:7f:4e:9c:69:6d:00:84:4c:1a:77:e2:42:69:b3:19:31:19:
         63:ac:29:a2:65:b7:a2:46:de:24:61:fe:2b:f6:a0:17:ef:bc:
         76:2b:0c:6e:b8:30:73:b8:b5:18:2b:27:3d:4f:b5:08:1a:fa:
         74:63:99:78:d5:b7:05:69:29:18:84:bb:ea:7e:87:1f:42:d2:
         4e:0b:82:07:f4:53:d7:78:53:cb:7a:c4:a2:f8:ca:a0:87:69:
         1e:7a:99:4a:ef:94:62:bf:bf:93:38:dd:d3:9c:ae:40:11:14:
         df:9f:3d:02:64:b8:72:a7:30:0b:3a:e1:90:1c:09:61:f0:e2:
         e0:96:02:82:23:3b:21:bf:9c:5d:c6:e7:5c:b4:92:92:c2:81:
         81:10:7d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:32:47 2025 by rpki-client