Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
File:                     7a8O0eMJHntcmc5DysEDEFWw84U.mft (raw, json)
Hash identifier:          ecSu7Ui7tcAbhebOOP00LlgYqvtG+MFjZnGYCPlwx3k=
Subject key identifier:   5F:DE:3E:0F:A6:F0:4F:1B:61:77:26:95:55:09:F6:7A:87:A8:5C:8A
Authority key identifier: ED:AF:0E:D1:E3:09:1E:7B:5C:99:CE:43:CA:C1:03:10:55:B0:F3:85
Certificate issuer:       /CN=edaf0ed1e3091e7b5c99ce43cac1031055b0f385
Certificate serial:       019853E94211B47B029F14130BB71BAC298A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
Manifest number:          1598
Signing time:             Tue 29 Jul 2025 02:00:52 +0000
Manifest this update:     Tue 29 Jul 2025 02:00:52 +0000
Manifest next update:     Wed 30 Jul 2025 02:00:52 +0000
Files and hashes:         1: 15o9XcK98PCQe9Aw651YSY6KZxs.roa (hash: pNZyoE96eglB8CATVtXzqRTGbuEChhNcvG9WnCasQiY=)
                          2: 7a8O0eMJHntcmc5DysEDEFWw84U.crl (hash: d/Th1AlQ7KigIoT6/PmEDwOoqRPbnUWd2NWTUQGnUaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:e9:42:11:b4:7b:02:9f:14:13:0b:b7:1b:ac:29:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edaf0ed1e3091e7b5c99ce43cac1031055b0f385
        Validity
            Not Before: Jul 29 02:00:52 2025 GMT
            Not After : Jul 30 02:00:52 2025 GMT
        Subject: CN=5fde3e0fa6f04f1b617726955509f67a87a85c8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:22:25:c5:8f:00:d4:aa:2a:ab:24:5d:7a:2d:
                    8c:88:2b:e9:8f:b9:8c:34:fc:6e:35:37:3c:a7:0a:
                    92:a2:44:b0:e3:0e:83:98:29:59:9d:b4:fa:3d:86:
                    3f:05:94:ea:f8:aa:6e:db:2b:d5:72:cf:cc:f6:c8:
                    75:fe:19:39:ae:3c:9b:11:bd:d2:25:57:c3:5d:63:
                    1b:47:72:b5:23:50:dd:47:e4:f0:c3:46:31:26:67:
                    bc:d2:d8:1c:78:a0:2d:38:21:dd:d2:80:9d:ef:55:
                    7a:6b:7f:d1:45:68:aa:3c:71:ff:09:78:78:e0:85:
                    99:0e:21:cf:3f:16:a4:47:ae:df:b6:40:0b:fe:d6:
                    cb:80:52:dc:1e:a6:f1:6e:eb:89:0a:59:7d:fd:13:
                    ae:36:e7:0a:7d:53:3b:78:04:bf:93:35:46:b4:a7:
                    d2:89:68:15:96:69:a6:cf:74:e0:38:27:ff:3f:89:
                    e5:ae:8a:b1:f7:89:2f:94:0c:54:63:38:c8:ce:05:
                    71:6b:c4:62:19:cb:23:16:f4:52:fb:96:8d:f7:60:
                    c4:27:3d:a6:2e:29:97:3d:b0:9c:2b:28:b4:7a:50:
                    ed:2f:42:1e:f4:cf:33:30:d5:e8:61:6b:56:95:2f:
                    e1:af:09:df:55:f4:2a:25:a8:70:71:56:4b:50:ac:
                    9c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DE:3E:0F:A6:F0:4F:1B:61:77:26:95:55:09:F6:7A:87:A8:5C:8A
            X509v3 Authority Key Identifier:
                keyid:ED:AF:0E:D1:E3:09:1E:7B:5C:99:CE:43:CA:C1:03:10:55:B0:F3:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:79:fb:76:0d:f7:c3:5c:e6:7a:b8:ab:6b:fc:b9:fe:3c:63:
         ea:43:d0:91:81:e0:39:e3:65:55:2e:f0:52:f0:8a:ec:12:9f:
         d4:53:05:49:7d:06:20:c6:41:3a:3c:24:26:11:d4:97:8f:4c:
         d0:af:c2:3e:b0:e5:46:09:5b:24:5d:68:fb:95:46:27:d2:db:
         4a:f9:52:89:78:47:87:a2:42:f6:93:62:12:3c:0e:10:fb:4f:
         ab:f3:9e:f2:80:c7:9c:32:1b:5a:7c:33:e9:08:9e:cc:04:53:
         20:33:1f:ad:80:2f:ee:f4:ca:74:87:fa:39:59:4b:56:3f:7f:
         ab:95:94:73:96:58:db:65:f6:56:17:6f:d7:00:23:ef:a9:a4:
         bd:75:b9:7d:16:31:11:95:a8:18:05:89:3b:36:82:5f:dd:ff:
         0c:7a:7e:89:c8:c2:5e:e9:d8:38:97:ef:52:21:df:94:16:74:
         da:51:4f:f1:60:af:ba:79:76:ce:0c:51:d1:91:f5:62:7c:44:
         df:8c:f2:27:a8:f6:bc:ce:5d:c7:8c:23:f7:f9:29:d2:fa:d3:
         8b:0a:fe:cc:3f:7d:d9:d5:c7:03:73:69:b1:08:7d:27:9a:1c:
         34:49:42:4a:8a:52:a7:e6:5a:0a:7b:cf:76:a8:c4:52:52:ab:
         0b:6c:b1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:36:35 2025 by rpki-client