Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
File:                     7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft (raw, json)
Hash identifier:          hdwxaCdgE6QScv8z7UZwodepUc2Mizx79bZlKmyy+pA=
Subject key identifier:   EE:6B:CE:34:B7:0F:EC:7C:D4:32:E0:09:82:03:12:0B:C4:1E:57:DE
Authority key identifier: EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23
Certificate issuer:       /CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23
Certificate serial:       019749D592B96A58A3DA00E56194168FA6ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
Manifest number:          157B
Signing time:             Sat 07 Jun 2025 10:00:22 +0000
Manifest this update:     Sat 07 Jun 2025 10:00:22 +0000
Manifest next update:     Sun 08 Jun 2025 10:00:22 +0000
Files and hashes:         1: 7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl (hash: 3oYnDSzaskip1xcDpP4wzIQLmj8ZZ9FxW18YfvQpE7s=)
                          2: zXjqftbJPl4WMlTVqYwCCC34rp0.roa (hash: JlLjbihRwnZcBC1XS3nZ9UdUKk69BSC90fR3Qh4dmgY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d5:92:b9:6a:58:a3:da:00:e5:61:94:16:8f:a6:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23
        Validity
            Not Before: Jun  7 10:00:22 2025 GMT
            Not After : Jun  8 10:00:22 2025 GMT
        Subject: CN=ee6bce34b70fec7cd432e0098203120bc41e57de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a2:a6:d2:0e:7b:b3:6c:52:39:53:79:a0:46:
                    99:59:7f:4a:84:da:a6:ca:3d:cc:24:66:0c:d2:ef:
                    58:22:b9:1d:4c:19:e8:2d:e4:ce:ee:b0:e6:54:99:
                    d9:d4:fd:71:01:8c:53:61:8a:c6:15:87:17:5a:af:
                    53:b8:48:48:e1:8e:ce:07:3e:70:7b:04:87:f7:b0:
                    07:db:36:24:ec:6d:5d:d3:8d:8c:ca:c4:61:88:b6:
                    af:64:cc:81:75:a4:67:7b:87:bd:a3:a1:6a:7b:26:
                    c0:97:cf:1b:5c:63:3d:48:78:ab:78:e1:42:33:0d:
                    67:e4:bf:dd:4d:9b:a0:1b:10:7f:67:2d:2b:f2:e5:
                    4f:cc:73:97:fc:6f:e7:37:20:c1:9c:71:6d:aa:1f:
                    8a:24:af:a4:aa:53:12:b3:ca:2f:f9:2c:4e:8d:63:
                    d9:eb:f7:98:c2:44:0a:41:d9:ca:1c:0d:ff:4a:dc:
                    48:99:ca:78:a5:54:e9:e1:31:73:d0:80:a0:83:61:
                    4d:50:86:7d:5f:2f:d9:78:50:f9:54:ba:3e:d3:ec:
                    63:90:ac:c7:2e:b4:4e:6c:5d:20:06:5b:45:3f:b1:
                    c8:74:79:42:92:90:b0:65:69:55:f5:1b:ef:6f:6b:
                    36:aa:59:c2:24:0e:1d:e1:f3:a4:06:b0:60:20:9d:
                    82:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:6B:CE:34:B7:0F:EC:7C:D4:32:E0:09:82:03:12:0B:C4:1E:57:DE
            X509v3 Authority Key Identifier:
                keyid:EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:72:7c:99:f8:c6:d9:af:6b:96:77:9a:28:5b:66:3c:7d:c2:
         5f:03:15:50:1b:c4:89:de:ac:a4:a6:ff:0a:dc:ca:8c:92:6a:
         2c:2a:b7:aa:52:60:eb:ec:87:73:4a:c0:96:27:93:f7:3a:54:
         41:a1:7d:d3:fc:3f:5b:98:3c:b3:bb:3f:19:21:5e:bf:aa:42:
         ee:95:c0:92:fc:c8:9d:7a:33:6f:81:51:7c:d2:5d:67:60:a0:
         e8:1f:c4:5f:6c:9d:51:3c:f5:d7:0a:d7:06:4f:8a:72:67:84:
         48:f6:f4:8c:60:3d:d9:71:85:9e:e6:90:7b:18:c6:00:8f:fb:
         c9:e0:d0:55:6d:7a:e6:0b:43:98:4b:b7:27:70:9f:f5:74:b7:
         de:08:bb:b0:b8:39:41:b8:9b:fc:a6:78:a1:eb:b8:d1:04:68:
         af:20:b5:a8:87:2b:20:46:fd:14:55:71:5d:ef:d2:b4:98:85:
         48:21:55:b2:90:60:78:86:d7:96:57:9f:6a:bd:85:4d:89:b8:
         df:6b:81:6c:fa:1f:42:75:25:a9:9c:8c:19:9a:e5:8f:a1:fb:
         c3:52:62:61:84:4f:08:d0:1f:2d:5d:89:0b:60:46:9e:2b:c5:
         28:68:11:e6:bf:a1:58:ec:44:10:bf:c0:57:a6:80:85:1c:06:
         31:a5:00:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:05:14 2025 by rpki-client