Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
File:                     Mu0BRXesc_-H7yDKb3V5XkyTf84.mft (raw, json)
Hash identifier:          AKUqkAwwcKC8ocvf+yPol6Yd7gPC8AShVbEPq1LXEC0=
Subject key identifier:   10:09:70:E0:DA:72:65:A2:64:4D:AC:5A:90:56:29:9B:50:00:7A:7C
Authority key identifier: 32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE
Certificate issuer:       /CN=32ed014577ac73ff87ef20ca6f75795e4c937fce
Certificate serial:       01984A4156E70309F6B5F54E3A2B91D57524
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
Manifest number:          07F2
Signing time:             Sun 27 Jul 2025 05:00:52 +0000
Manifest this update:     Sun 27 Jul 2025 05:00:52 +0000
Manifest next update:     Mon 28 Jul 2025 05:00:52 +0000
Files and hashes:         1: Mu0BRXesc_-H7yDKb3V5XkyTf84.crl (hash: xGb9zITGetsxLsTiCQjobhFmmVOIIbsk5eW3JCIHsLo=)
                          2: Szpv7SbbTq_ZPkpVt0ZS-yigLYQ.roa (hash: tot/yU4vNOc3RqisHsJwZZdti1Jdkg5nZCtY1DuBRp8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:41:56:e7:03:09:f6:b5:f5:4e:3a:2b:91:d5:75:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ed014577ac73ff87ef20ca6f75795e4c937fce
        Validity
            Not Before: Jul 27 05:00:52 2025 GMT
            Not After : Jul 28 05:00:52 2025 GMT
        Subject: CN=100970e0da7265a2644dac5a9056299b50007a7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cc:ea:dc:21:5b:51:eb:be:e7:f1:31:74:95:
                    00:e5:27:bb:08:87:a6:5e:d1:4d:3f:17:42:de:c0:
                    73:e4:8b:11:74:de:fd:55:fd:f7:63:9f:79:69:66:
                    3a:24:73:0e:c1:24:d2:27:98:a4:96:bc:44:7f:df:
                    53:56:85:79:25:3d:3c:5c:ab:9e:f3:9e:70:28:e7:
                    5c:29:b1:3c:ca:6e:47:0c:7a:c2:ff:b1:aa:6f:40:
                    0b:c7:2e:0a:3b:82:03:c9:6b:3c:45:b2:63:cb:4d:
                    68:1b:e7:c6:40:51:8a:b2:36:82:e3:bf:fa:cc:13:
                    83:b9:bc:1a:4f:bc:3c:db:06:d8:c9:c9:6f:ad:47:
                    a7:7e:45:55:0d:4d:50:f6:61:cf:71:4e:47:9c:fb:
                    2d:88:3c:6a:69:82:82:c4:5f:70:c8:e7:aa:59:77:
                    53:cf:9c:4c:d6:b4:63:4a:d2:9e:67:39:28:8b:da:
                    20:fe:e5:a3:1e:3f:86:42:90:21:a8:b6:03:6f:ab:
                    5f:0a:69:8b:a3:5b:3a:bc:39:a3:c6:6d:ce:10:40:
                    37:6b:f6:3e:84:7f:00:aa:50:9d:a1:66:16:43:b1:
                    86:c4:5c:2b:ab:7f:51:cc:5c:bb:40:e8:c8:a2:12:
                    6e:84:fd:12:ce:a6:79:48:87:95:38:b1:ac:e2:11:
                    3c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:09:70:E0:DA:72:65:A2:64:4D:AC:5A:90:56:29:9B:50:00:7A:7C
            X509v3 Authority Key Identifier:
                keyid:32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:99:c0:93:14:19:c9:c8:89:57:fd:ca:60:b7:0c:6d:9b:d8:
         7f:7a:c3:6e:36:90:d7:b9:10:32:81:9b:68:83:43:eb:70:ce:
         6d:1a:18:81:51:2f:ea:61:3a:b5:d3:75:c1:87:c7:30:f2:9d:
         e8:53:db:ef:9f:0d:d8:6d:47:04:67:a8:3d:b9:23:46:78:01:
         8e:d1:15:ac:1f:e5:56:fd:3b:3d:ee:0e:b1:a4:1d:cb:5b:05:
         71:3b:0b:c5:53:c3:a8:a5:9f:43:20:fb:68:a0:3e:da:77:bd:
         46:79:0c:56:a0:82:34:7a:8e:1b:47:ad:53:05:81:ff:5f:90:
         23:65:22:7c:33:f1:cf:cc:8d:62:a7:be:b3:c4:7b:03:ed:ed:
         7a:68:ec:f0:8a:70:85:fa:80:3b:a1:d1:99:be:5b:a1:2d:7a:
         1a:2f:d3:21:b9:35:04:57:8e:61:10:82:96:7d:46:c4:87:16:
         46:ab:80:50:be:58:5d:7b:7e:20:ff:e1:e5:b6:53:51:91:9c:
         8f:77:7f:da:3f:18:5c:25:7a:bb:9b:ee:f1:18:4d:d4:4f:b6:
         c3:e7:a6:3c:e3:72:70:2d:8b:ae:ec:68:24:92:46:38:4f:a9:
         03:39:42:7a:a0:34:94:b4:98:43:bd:8a:4d:76:14:e8:da:61:
         20:7b:8a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:02:32 2025 by rpki-client