Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
File:                     r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft (raw, json)
Hash identifier:          kdu8vkJjPVw42ASh7v3AJFqSjWwaBmGNc1o6ne0Yfsg=
Subject key identifier:   02:50:45:DB:FC:31:47:4A:FC:AC:2D:24:7F:9E:B9:59:C2:71:CA:B8
Authority key identifier: AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
Certificate issuer:       /CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Certificate serial:       0198530D951A26A947BC0D196644F3D1D045
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
Manifest number:          0A2A
Signing time:             Mon 28 Jul 2025 22:00:55 +0000
Manifest this update:     Mon 28 Jul 2025 22:00:55 +0000
Manifest next update:     Tue 29 Jul 2025 22:00:55 +0000
Files and hashes:         1: 1-QcSYLdpveuStLYqlBunMp4JJ5g.roa (hash: NQizYlwEjERl0X/bxZE2nkkRnRTSix4QkB1fVvIKAMg=)
                          2: N77-Ng3AFH6-1aHCnMlAcN-LAHU.roa (hash: kLrijD9G/R0cMvtLz3nwtkgshfFFxhgBoeVfEmhz0ZI=)
                          3: ayI-UL4oibibFX4cW3YWUk6xSTs.roa (hash: N1Uh/40VgHWlkmnSe6ILZ6Uts2Fhgd/GOVLIcEzqLXQ=)
                          4: gnkHs-huFz_Mv1gh2f--oMoTlbI.roa (hash: cAkEhiie/5ypOg0o3pr7TFLqNT0IK1/cxJALcW2pMbg=)
                          5: njDEZbySu24l3-7pqiEP7cKTkYk.roa (hash: sJSOzcEBtzhJa/6Rsm70KNeiGLuydqUWSSlaAXnP8xU=)
                          6: r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl (hash: 0I/27XfI/ASEHZduUzDrm+JXG+YO4L97FkEZwHUTpoQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 22:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:0d:95:1a:26:a9:47:bc:0d:19:66:44:f3:d1:d0:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
        Validity
            Not Before: Jul 28 22:00:55 2025 GMT
            Not After : Jul 29 22:00:55 2025 GMT
        Subject: CN=025045dbfc31474afcac2d247f9eb959c271cab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9a:7d:f2:c0:f0:d1:64:26:a7:25:0a:31:16:
                    28:66:dc:60:55:3f:04:0d:27:b3:19:32:33:2c:f0:
                    27:50:ae:37:9e:6e:bf:b4:27:28:64:87:21:e6:44:
                    80:1a:26:20:c0:50:55:b5:e6:90:de:b2:d8:12:b9:
                    a9:76:50:82:52:36:b4:59:e7:c3:0d:28:1d:85:00:
                    16:5b:58:85:7f:4e:d9:65:bf:d3:e3:08:e6:5f:8d:
                    af:9d:d5:e9:94:31:2f:c7:bb:8b:51:93:c8:b8:45:
                    70:a2:9b:a3:92:e0:ec:fd:af:98:87:61:2f:fc:4e:
                    23:3d:c3:79:64:ce:a6:1e:20:eb:f9:29:0b:b1:8e:
                    a7:56:46:9d:b7:3a:38:07:ef:d3:b9:83:8c:a2:70:
                    1a:34:73:d6:86:10:a7:75:25:53:b5:77:e1:c8:78:
                    fc:e9:e3:c0:2d:80:3d:cc:d3:18:42:bc:05:05:c9:
                    bd:84:7c:50:d7:73:26:39:7c:30:0c:2b:f2:c4:47:
                    cf:30:d5:b2:0c:24:38:d9:7b:7c:d7:08:36:bd:0f:
                    b8:ac:3b:ce:0c:6d:9e:31:dc:ee:16:95:aa:15:26:
                    a6:7a:12:9f:dd:11:77:d4:c5:6a:ab:b3:9d:6c:e6:
                    83:93:9f:69:51:70:95:46:e0:1c:56:9e:1e:0a:27:
                    48:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:50:45:DB:FC:31:47:4A:FC:AC:2D:24:7F:9E:B9:59:C2:71:CA:B8
            X509v3 Authority Key Identifier:
                keyid:AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:a3:cb:05:7b:ce:3f:ba:e9:ea:97:f4:b0:7c:e4:cb:7f:73:
         3f:b2:5b:f2:be:71:77:d6:4e:df:13:fe:7d:07:99:ef:a8:fb:
         0a:37:2f:10:07:cd:91:b0:8f:66:aa:f1:24:2a:45:1e:2c:79:
         73:bb:96:e7:44:f9:2c:c9:38:79:4e:2b:71:08:6b:b0:23:e0:
         82:e3:0b:2e:5a:ce:44:97:15:a0:b3:45:6b:da:14:1d:5d:af:
         f4:c8:5d:39:df:89:47:a2:dd:53:19:46:af:f7:4e:67:e7:3f:
         49:58:fc:51:36:1a:6b:0f:31:b3:1e:bd:6d:3f:85:68:56:a0:
         b0:6a:25:d6:eb:5a:db:99:78:cb:c8:c0:c3:6a:ca:ad:a4:1a:
         d8:07:03:b3:4b:95:dc:13:fc:d7:1e:50:8a:7b:ef:57:0c:48:
         51:c1:92:17:c5:33:40:6f:7f:56:45:95:72:e0:89:d0:e0:63:
         0e:77:a1:52:57:94:9b:f0:5b:1a:6d:d4:63:ea:06:18:ab:ff:
         73:5d:28:13:7b:ef:7c:04:01:55:00:e5:fa:91:e9:21:19:67:
         15:0d:3d:65:22:22:ed:d8:68:70:0b:08:bf:57:15:1e:53:1e:
         59:36:6f:2b:ff:e2:e0:1c:da:1e:ea:34:49:15:87:f5:b2:28:
         33:db:e1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:39:31 2025 by rpki-client