Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft
File:                     7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft (raw, json)
Hash identifier:          tqOyVaM5quQUu5VDmvUTBX6ri5oHYVB10t94bfkBeIQ=
Subject key identifier:   CD:67:29:E7:6F:9C:89:4F:D0:DE:CB:92:15:5A:D8:E8:C2:90:D0:7F
Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10
Certificate issuer:       /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
Certificate serial:       4C7B5B0D42478D95AF72AF759B496900E37BF8E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft
Manifest number:          ED
Signing time:             Wed 23 Jul 2025 19:12:05 +0000
Manifest this update:     Wed 23 Jul 2025 19:07:05 +0000
Manifest next update:     Thu 24 Jul 2025 21:57:05 +0000
Files and hashes:         1: 3134312e39382e34332e302f32342d3234203d3e2039333138.roa (hash: vFBdBlnnWQnqw/EQOfV9mi7/0u42NWKBiZsEOC5m9Es=)
                          2: 7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl (hash: 5wMbZ1Oct3EHXgStpTJyTf2wcqx0FGomWUrIF65OeMc=)
                          3: 3134312e39382e34322e302f32342d3234203d3e203236303432.roa (hash: +GT6tipOpP7a/jmS2jvS0OmHJ5lSewd2owWcI6P6Cp8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 21:57:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:7b:5b:0d:42:47:8d:95:af:72:af:75:9b:49:69:00:e3:7b:f8:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
        Validity
            Not Before: Jul 23 19:07:05 2025 GMT
            Not After : Jul 24 21:57:05 2025 GMT
        Subject: CN=CD6729E76F9C894FD0DECB92155AD8E8C290D07F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ff:27:c5:1f:ca:05:b3:c5:e0:d1:71:7c:23:
                    01:70:eb:7f:ac:d3:d7:9f:66:e9:d6:28:9e:e1:44:
                    56:a2:52:38:79:8d:c3:b7:a7:88:1b:8d:8e:37:93:
                    93:46:e8:f0:16:5b:05:6c:16:e9:e3:02:ed:10:d6:
                    1a:c1:81:b3:52:9b:39:13:9c:c6:db:c6:20:a2:dc:
                    a0:71:b2:09:b4:eb:89:a8:4c:d5:05:88:96:ac:13:
                    43:06:e5:60:7c:19:88:e1:12:f6:2e:5e:40:45:a1:
                    08:b1:2f:61:cb:39:1a:4c:36:bf:b5:f7:a1:52:cb:
                    57:f0:e4:93:bc:50:50:c9:da:f7:70:f1:96:6c:73:
                    b4:6b:ab:2e:b6:fe:c8:1d:b7:33:ba:e9:71:5e:d6:
                    9a:5c:c8:e5:75:61:9e:a7:a5:5d:10:87:03:5b:3c:
                    e7:61:f5:5e:42:14:12:88:99:22:98:69:ca:f2:36:
                    50:a3:21:d8:32:a5:94:02:9d:19:c3:57:f4:54:99:
                    09:1f:0c:99:19:e8:93:3d:34:e8:f0:c0:a6:ea:78:
                    bc:e6:0f:e8:d3:63:74:c5:0d:63:d4:c2:31:de:a0:
                    71:56:1c:78:20:a6:72:ba:61:e5:d0:77:03:9c:3e:
                    34:90:18:a9:05:c3:6b:7a:38:12:35:c3:e6:9e:53:
                    b0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:67:29:E7:6F:9C:89:4F:D0:DE:CB:92:15:5A:D8:E8:C2:90:D0:7F
            X509v3 Authority Key Identifier:
                keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:33:1c:b0:26:3d:65:a7:ee:b5:2c:5c:73:f2:f6:b0:99:58:
         d2:69:ef:65:8b:e2:f9:e9:dd:a1:c8:45:c5:5f:b0:5b:14:bd:
         c5:0b:46:4f:e6:1b:77:00:fa:85:d2:8d:32:48:c1:5e:04:f5:
         56:6a:09:55:f2:44:54:3a:09:a4:fd:fa:6b:97:1a:07:5a:d9:
         f3:1c:1d:2b:e5:ac:57:51:83:d7:10:f0:27:56:60:e4:f0:63:
         d3:c5:3f:4c:4c:f8:4f:fa:25:13:87:37:dc:23:11:ec:f6:fd:
         1a:2c:ee:e3:8a:e7:b9:8f:90:ed:02:5c:64:22:8d:e1:3c:66:
         27:39:4d:95:31:26:aa:dd:0a:c5:e3:d4:fb:04:09:ee:48:33:
         14:54:d5:a9:07:12:f8:33:73:24:54:13:15:16:40:fb:b8:1f:
         05:d1:39:ac:5a:c1:f4:0e:f9:69:c9:0a:98:79:0e:2b:b0:f2:
         c6:83:b1:f5:31:48:3a:37:93:ae:84:6e:3a:89:72:c6:a4:34:
         60:cb:91:ec:47:7d:a0:6b:2c:3e:53:e5:8f:06:96:66:a8:48:
         61:a6:95:90:3b:ca:dd:4b:a5:5e:c5:96:97:39:f8:80:7e:2d:
         64:31:05:13:02:79:3e:3e:9d:ea:5a:9d:81:d2:82:d5:74:f0:
         23:1d:20:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 11:49:38 2025 by rpki-client