Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
File:                     97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft (raw, json)
Hash identifier:          ATSH7Y5SbCk5S7V+eLYduz1zDVticnxqTRDearY3gg8=
Subject key identifier:   D0:1C:BE:2B:EA:46:67:50:B3:B3:C4:B6:CB:75:B8:79:F5:1E:E5:F2
Authority key identifier: F7:B0:69:D3:3D:F1:22:5A:8B:36:43:A0:13:64:F2:79:DF:40:D8:77
Certificate issuer:       /CN=f7b069d33df1225a8b3643a01364f279df40d877
Certificate serial:       019844760FB715E7DEB06AA14C567123B50C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
Manifest number:          02F4
Signing time:             Sat 26 Jul 2025 02:00:44 +0000
Manifest this update:     Sat 26 Jul 2025 02:00:44 +0000
Manifest next update:     Sun 27 Jul 2025 02:00:44 +0000
Files and hashes:         1: 97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl (hash: VsRXpiAUduwSqpRXAkzxnLz2s/3Oncpwa1LzMuvrX+U=)
                          2: G8WBqm_n-G2Dq7rJrsvaHEWmDxE.roa (hash: IA50muj3Iqkw7YnSvxI1jyledliIC9BsrNcG2Szt4iM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 21:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:76:0f:b7:15:e7:de:b0:6a:a1:4c:56:71:23:b5:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7b069d33df1225a8b3643a01364f279df40d877
        Validity
            Not Before: Jul 26 02:00:44 2025 GMT
            Not After : Jul 27 02:00:44 2025 GMT
        Subject: CN=d01cbe2bea466750b3b3c4b6cb75b879f51ee5f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3e:47:43:d3:a9:7c:9d:11:fc:db:44:56:7e:
                    53:ca:20:bf:2b:68:94:69:61:94:e4:22:05:5f:8d:
                    d2:a8:ba:24:c5:33:07:22:23:54:e8:5f:24:12:2b:
                    91:44:a2:c6:05:f7:85:31:db:62:6b:35:28:46:02:
                    81:3b:6c:8a:a8:18:d2:0b:f5:02:1a:25:6c:11:0a:
                    e0:ce:61:db:6a:d1:63:c5:fd:61:96:c5:62:69:f7:
                    29:10:6a:97:d7:e7:73:47:2e:07:7c:78:eb:58:01:
                    9a:98:a4:ff:0c:db:3a:11:89:bc:d7:0e:16:03:ab:
                    b7:bf:18:a2:62:ec:cd:3d:31:a9:c1:0d:0b:55:f1:
                    4b:c5:d3:97:76:e2:2f:67:a8:05:ce:73:cb:f4:ca:
                    ab:3b:7c:9e:6c:94:b4:d5:86:35:41:46:a1:32:6b:
                    42:d8:66:41:f5:18:7e:4c:87:97:0c:d4:08:09:7f:
                    d7:af:ab:6a:9d:be:7d:79:d5:08:10:2a:4f:5c:9c:
                    d6:cb:fc:dd:99:1d:0b:6d:1b:87:46:f4:50:ee:07:
                    cb:ef:f0:5e:5b:c2:49:dd:4f:cf:f6:0c:cd:48:76:
                    99:9b:80:9c:eb:c8:36:01:51:b1:8f:51:67:ae:bc:
                    3f:15:67:0f:70:56:2b:ae:d9:db:de:46:07:38:ff:
                    f8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1C:BE:2B:EA:46:67:50:B3:B3:C4:B6:CB:75:B8:79:F5:1E:E5:F2
            X509v3 Authority Key Identifier:
                keyid:F7:B0:69:D3:3D:F1:22:5A:8B:36:43:A0:13:64:F2:79:DF:40:D8:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:90:2d:9f:56:44:80:8d:ff:df:cd:71:61:93:d3:f0:67:7a:
         6a:c1:b3:01:88:3a:b9:50:cc:ca:fb:6b:68:9c:1b:25:32:3b:
         bc:eb:7d:64:40:d3:5b:f8:aa:bf:d0:fc:85:cc:28:e1:cf:22:
         d4:8d:3c:cb:ca:46:af:94:d7:23:2e:a2:c7:86:d6:a5:68:04:
         73:3a:d3:63:25:4d:c4:8f:f8:09:bf:86:a5:63:5f:40:47:7a:
         d6:8a:01:a0:d6:6e:e0:93:98:f1:82:8e:86:9a:29:1b:c3:80:
         86:c9:36:29:05:e0:5f:9c:73:a5:81:d6:43:0e:4e:d6:35:d5:
         c4:2c:f3:2c:03:6c:2b:60:37:9d:78:82:88:ec:38:bc:3b:a0:
         b2:cb:09:b5:ef:2d:8f:68:2b:12:e0:32:7a:78:52:13:3a:30:
         a0:f8:d8:94:ac:55:dd:75:cf:4a:a1:f4:89:cb:ce:bd:66:a2:
         26:ce:af:cc:ac:f4:bc:0d:ae:ef:23:e4:75:f8:68:4f:d0:da:
         94:7b:47:47:56:b5:a4:5e:e5:89:fe:cd:77:51:10:b1:e4:6c:
         7b:04:2e:bd:f7:13:eb:04:64:99:07:85:e0:79:52:7b:30:85:
         57:71:a8:28:ba:73:29:c1:ea:c2:ee:55:0b:54:91:82:49:26:
         6d:36:20:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:40:40 2025 by rpki-client