Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
File:                     feY3584h1skbVKBojiD5JBYiIjc.mft (raw, json)
Hash identifier:          UzQ91GGsoHvQYo4E/nF1bzXnMgHlNKxOLfAZoSS7JUE=
Subject key identifier:   7F:16:48:F0:0F:4A:3D:68:F1:69:4E:4D:B2:29:03:39:52:8E:09:EF
Authority key identifier: 7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
Certificate issuer:       /CN=7de637e7ce21d6c91b54a0688e20f92416222237
Certificate serial:       0199240D2FBD54666D41E651855BDC6E9183
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
Manifest number:          10D4
Signing time:             Sun 07 Sep 2025 12:01:07 +0000
Manifest this update:     Sun 07 Sep 2025 12:01:07 +0000
Manifest next update:     Mon 08 Sep 2025 12:01:07 +0000
Files and hashes:         1: feY3584h1skbVKBojiD5JBYiIjc.crl (hash: +APOEM77TMDkx8gG1b9VMCZqIqC9FUBYdTitYjtacso=)
                          2: gSkIa_heLgXoxXWpRCNJvp9Xs88.roa (hash: 5vrs6puP5YdpeYb/igpgdkuukfc/yg5fXJ/pSyPNWx4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:24:0d:2f:bd:54:66:6d:41:e6:51:85:5b:dc:6e:91:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7de637e7ce21d6c91b54a0688e20f92416222237
        Validity
            Not Before: Sep  7 12:01:07 2025 GMT
            Not After : Sep  8 12:01:07 2025 GMT
        Subject: CN=7f1648f00f4a3d68f1694e4db2290339528e09ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:46:ea:da:b5:e5:97:ba:aa:c2:ed:96:0e:27:
                    3f:d1:57:af:3a:ef:18:33:d7:1a:94:1a:93:71:41:
                    3b:dd:86:e5:44:5c:db:ef:b4:98:e9:6f:db:ed:1b:
                    a0:03:31:f1:af:cd:9f:16:32:fb:a6:2a:bd:28:bc:
                    b8:13:c5:4b:3d:3a:91:1f:ab:42:f9:71:68:b5:f1:
                    2c:ab:9c:74:a7:ec:e9:1e:fd:ba:5e:39:e4:4a:8d:
                    54:b3:58:01:9a:92:78:f2:a7:b8:15:84:42:6f:47:
                    8a:22:c2:9e:cb:67:74:70:b8:8a:b4:87:f3:b2:7c:
                    8c:e4:36:26:2a:d3:2b:54:02:e8:c9:d9:e6:1c:cf:
                    04:11:8c:49:de:7b:bb:90:41:1a:21:e0:55:c8:3a:
                    15:ae:1c:0c:6f:e8:61:88:f5:ef:13:c3:41:a4:87:
                    45:df:0c:0b:7e:b5:83:90:c7:82:5e:0b:cb:e1:36:
                    1e:b9:db:af:8a:20:58:b7:9d:17:13:46:01:ba:35:
                    cd:fb:e3:3b:c1:e2:37:dc:4f:e1:59:8b:38:0f:86:
                    7f:86:f6:b1:d9:62:b3:78:ad:42:11:28:a4:d2:b4:
                    7c:ac:97:81:88:aa:79:35:9b:2e:56:9b:04:b9:13:
                    ea:80:8e:cf:91:99:14:de:19:26:5e:0a:5a:fe:ac:
                    8d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:16:48:F0:0F:4A:3D:68:F1:69:4E:4D:B2:29:03:39:52:8E:09:EF
            X509v3 Authority Key Identifier:
                keyid:7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:2e:83:72:0d:5c:16:0a:5a:ca:66:8d:f4:d2:1b:da:f2:1d:
         b7:5d:4a:66:e4:fa:ae:a0:9b:5b:b2:8f:1a:e4:2f:71:62:15:
         c0:48:d9:a0:9c:27:89:76:5f:cb:ea:2e:0a:23:9c:14:dc:a3:
         46:e6:5a:2e:6f:45:e0:eb:74:cc:ac:63:11:00:f7:3c:03:14:
         21:3d:d1:77:7c:ef:ff:af:b4:73:8f:d1:f7:06:25:be:a2:c3:
         42:26:6b:a3:44:d6:d7:49:35:b1:a8:a4:13:9b:3a:61:61:c1:
         fb:d7:27:09:a8:76:a2:2f:30:25:bb:73:33:ec:e0:d1:d1:89:
         16:f3:11:d3:72:e1:40:d2:c0:93:10:d6:92:36:94:16:de:1b:
         e2:80:e5:37:93:79:0d:a2:8f:52:31:29:b0:a0:cc:23:e8:b2:
         ed:80:52:43:34:3b:c3:75:a2:7f:53:69:5a:75:04:19:f1:f0:
         f6:0e:19:ce:42:3b:a6:69:8e:b5:62:98:54:7d:94:e6:08:98:
         8a:7b:a5:3f:b8:5e:fc:37:e8:eb:96:1c:a6:b9:cd:a2:c4:a8:
         77:3f:80:d1:e8:32:9a:3a:96:6c:8a:3c:3c:18:4f:f8:92:f2:
         7b:9f:35:cc:e3:46:02:6d:c3:e9:02:aa:b5:b2:f1:e4:43:a0:
         b2:a2:b9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:51:19 2025 by rpki-client