Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
File:                     etB83meC_U_FaIV-hIRlW1AkhxA.mft (raw, json)
Hash identifier:          VlJfsjWlvd1oTsEWXXWzV9dMImQ5lhp4LOlOHX7Hsp4=
Subject key identifier:   A7:E4:54:57:09:FC:EE:A2:8A:97:20:5D:39:E6:62:79:9D:E7:99:FD
Authority key identifier: 7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10
Certificate issuer:       /CN=7ad07cde6782fd4fc568857e8484655b50248710
Certificate serial:       01984589CDEC44E53540CFE603AD0E9BDD61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
Manifest number:          0413
Signing time:             Sat 26 Jul 2025 07:01:55 +0000
Manifest this update:     Sat 26 Jul 2025 07:01:55 +0000
Manifest next update:     Sun 27 Jul 2025 07:01:55 +0000
Files and hashes:         1: 7Mt7cRBkGNK5rwDG55TbMVEwg-I.roa (hash: Ezyc6rp9QXhSptaXi5ro4QW/Qjk9pSK7ba82HZyPR48=)
                          2: etB83meC_U_FaIV-hIRlW1AkhxA.crl (hash: C/yZmnt6OidaEBhN/UWGyzaTM5r5FNpMAfOFAsoXv0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:89:cd:ec:44:e5:35:40:cf:e6:03:ad:0e:9b:dd:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ad07cde6782fd4fc568857e8484655b50248710
        Validity
            Not Before: Jul 26 07:01:55 2025 GMT
            Not After : Jul 27 07:01:55 2025 GMT
        Subject: CN=a7e4545709fceea28a97205d39e662799de799fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:dc:72:77:4b:ca:3c:e4:9f:95:ac:23:b4:9b:
                    34:fa:a3:03:76:8d:e0:b1:7e:15:4b:4c:69:11:32:
                    46:0e:92:fc:49:7a:6b:ba:23:f2:d9:d8:1b:bf:1a:
                    56:42:8b:45:fa:f8:a2:db:f1:59:10:19:f4:ba:ed:
                    e5:8f:8c:ef:63:da:17:19:ca:b1:9e:2b:3f:7d:17:
                    6a:dc:33:16:c7:f2:ee:23:dd:b9:3c:9a:c9:0c:97:
                    fa:c8:7e:75:f1:81:d2:6c:11:c4:1f:af:a5:2b:7c:
                    94:d2:fa:94:1e:7a:b6:8c:b8:cc:d9:37:4d:fb:cf:
                    7a:9d:97:a2:b0:5c:33:05:c3:42:77:25:ce:69:ae:
                    4d:84:17:b6:eb:00:b3:f6:62:6e:9c:f1:1a:7c:80:
                    20:a3:cf:4d:ab:dd:74:42:dc:85:d3:e3:46:20:92:
                    ba:13:02:b6:19:da:58:55:d9:18:9a:00:3f:29:38:
                    de:47:0d:22:30:a5:18:bf:78:e0:66:7d:32:49:2f:
                    ec:8f:75:56:65:26:f8:66:13:32:6e:f9:8b:52:92:
                    4f:20:83:92:ab:74:33:3b:e5:31:b8:36:3e:ff:ec:
                    d8:f4:41:d8:88:c7:6f:c3:4e:eb:3b:b1:55:4a:f7:
                    57:94:33:03:c4:63:7d:cd:9a:24:b7:45:b5:99:8e:
                    ea:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E4:54:57:09:FC:EE:A2:8A:97:20:5D:39:E6:62:79:9D:E7:99:FD
            X509v3 Authority Key Identifier:
                keyid:7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:db:ef:59:19:b5:07:d6:ab:e0:3c:1e:1d:b0:3e:19:d3:9e:
         c2:39:58:63:0b:6d:ef:b7:04:da:6b:62:29:06:b3:7d:fe:02:
         fc:f0:36:a9:ee:64:78:07:70:f8:44:52:5a:5a:83:b8:09:88:
         8c:49:9a:27:ce:9d:8d:90:e3:12:e8:85:c8:36:49:b1:6f:21:
         af:9b:63:65:80:61:e4:33:65:3b:b6:1f:ce:dc:85:2b:4a:28:
         68:2a:97:cf:0f:58:35:26:12:28:61:39:bd:06:60:bf:07:4e:
         2c:dc:67:e5:b5:b0:fa:8f:f7:15:9f:35:84:24:f1:85:89:e6:
         1b:8c:a3:98:f0:3d:d6:1e:76:f6:c8:9a:ab:3e:31:4f:ac:86:
         7e:0e:6a:71:d2:10:ba:53:c9:d5:8b:ac:fb:b7:eb:1d:f6:9b:
         4b:20:c2:8e:7c:35:44:15:82:56:5e:5c:59:1a:94:20:08:2b:
         cf:88:d0:52:c8:86:d1:be:3d:9a:2e:22:94:41:b9:f0:aa:a7:
         d2:cc:32:19:e3:a7:31:01:e1:c0:e1:e9:87:b1:26:84:ad:e3:
         26:3a:9a:a7:9d:09:99:98:3a:ee:88:04:05:24:01:db:62:c8:
         fb:4c:11:c6:c7:3c:f8:e2:da:41:04:98:57:77:00:80:bd:6c:
         7e:d3:ae:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:30:21 2025 by rpki-client