Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
File:                     7dnow7XdvumM1_7qDf-MdiW4Wp0.mft (raw, json)
Hash identifier:          BV4g6hhywR3utJZIakfhPfCuexKlXm5eTmtVmcvXGRE=
Subject key identifier:   B6:4F:4F:8B:5F:C4:54:66:E1:24:35:99:71:E4:C5:64:03:5E:5E:C0
Authority key identifier: ED:D9:E8:C3:B5:DD:BE:E9:8C:D7:FE:EA:0D:FF:8C:76:25:B8:5A:9D
Certificate issuer:       /CN=edd9e8c3b5ddbee98cd7feea0dff8c7625b85a9d
Certificate serial:       01984A410ACEA96AAC71842137B087BE1C15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
Manifest number:          0B71
Signing time:             Sun 27 Jul 2025 05:00:33 +0000
Manifest this update:     Sun 27 Jul 2025 05:00:33 +0000
Manifest next update:     Mon 28 Jul 2025 05:00:33 +0000
Files and hashes:         1: 7dnow7XdvumM1_7qDf-MdiW4Wp0.crl (hash: +m3ctCcmqvKsCWeKPGX53zZZBMD1Y+J3CS51v1matQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:41:0a:ce:a9:6a:ac:71:84:21:37:b0:87:be:1c:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edd9e8c3b5ddbee98cd7feea0dff8c7625b85a9d
        Validity
            Not Before: Jul 27 05:00:33 2025 GMT
            Not After : Jul 28 05:00:33 2025 GMT
        Subject: CN=b64f4f8b5fc45466e124359971e4c564035e5ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ce:53:79:f8:fb:45:a2:67:ab:5d:cf:9a:ed:
                    b0:57:2b:df:78:3b:e8:f2:c5:71:2a:cd:0b:b1:cb:
                    da:a7:3e:c0:c1:f7:8b:92:b9:ae:27:c4:8c:18:a3:
                    c8:d8:b6:49:64:c5:c4:ed:4d:90:b0:55:5a:34:4d:
                    d5:d3:1d:72:36:a8:a0:96:a0:9d:40:3c:f6:81:69:
                    51:0c:6d:8b:7e:ca:45:50:0b:09:fb:f4:48:5f:85:
                    5b:c1:32:ec:d3:ee:47:1d:66:da:e0:d5:41:95:d6:
                    17:64:5d:ce:60:4f:f2:dd:87:c4:b1:1e:c9:43:d8:
                    88:69:36:80:45:3c:a6:b3:ac:eb:a2:3c:c2:14:66:
                    3f:98:49:06:d3:90:93:f0:ed:f8:39:16:fb:41:86:
                    0a:f5:ec:d1:57:1f:3c:4d:4f:23:e3:ef:ab:9c:d7:
                    e7:61:af:60:30:b9:4e:e7:73:b3:de:1a:18:46:99:
                    61:e3:e7:a3:f3:8b:af:57:43:9f:9f:bb:97:23:be:
                    69:ad:20:a8:77:68:d6:35:27:1a:08:fc:00:01:18:
                    8a:9e:86:ea:ad:35:72:f9:dc:11:f0:8c:a3:e9:25:
                    a7:9a:d4:39:a6:a5:7f:32:f3:1d:74:54:c3:75:31:
                    96:e1:09:d6:5f:bc:9c:10:e6:71:06:a0:f3:b1:51:
                    89:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:4F:4F:8B:5F:C4:54:66:E1:24:35:99:71:E4:C5:64:03:5E:5E:C0
            X509v3 Authority Key Identifier:
                keyid:ED:D9:E8:C3:B5:DD:BE:E9:8C:D7:FE:EA:0D:FF:8C:76:25:B8:5A:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:d6:df:80:1f:5c:36:57:b9:0c:de:73:19:01:db:ab:1e:02:
         c4:27:b1:b1:1f:2a:57:1f:5e:db:9e:39:a9:c6:60:a8:23:bc:
         55:5e:40:7c:db:c5:11:56:f9:a7:56:13:d6:4e:3a:e3:bb:18:
         df:84:e9:97:f2:68:16:32:33:63:c8:0d:85:6b:7d:5f:d2:76:
         dd:53:28:01:26:c8:fb:10:9e:a6:af:14:f6:dc:ab:2b:cb:a1:
         8e:33:25:e4:0e:74:8e:28:e8:b3:37:bb:75:79:42:9f:45:c2:
         1a:72:5a:c8:f3:cf:b5:16:77:bd:5f:9f:b1:08:0e:c7:fb:3f:
         c7:f8:2d:9b:a9:f4:38:47:b6:cd:db:b5:f6:9f:da:97:32:7e:
         71:ee:a0:0a:6e:1a:c2:7b:96:67:af:97:e7:2b:23:c4:46:7b:
         0f:92:8c:5a:55:26:7d:a0:c0:44:f0:f5:48:a9:51:a1:b7:e7:
         b4:af:65:9c:7d:71:d3:81:08:ce:ef:a8:30:28:05:5c:e3:4f:
         38:8e:c7:5b:62:0b:71:ac:da:bb:7f:78:1e:af:b0:8e:9e:2a:
         1f:51:25:7d:8c:53:54:9d:29:46:4f:57:27:f2:dd:59:1a:1d:
         47:77:9e:5b:74:54:fc:e6:34:8c:80:6c:45:15:96:3e:06:87:
         f8:99:8c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:12:13 2025 by rpki-client