Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
File:                     7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft (raw, json)
Hash identifier:          6UhdXutVjP2ot969RbKpNjSk11CGQvKXNMW0itZZoxE=
Subject key identifier:   6E:44:DB:C0:E8:A1:50:B4:6B:FC:D0:6B:EC:00:EF:FF:8D:B2:6B:DB
Authority key identifier: EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23
Certificate issuer:       /CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23
Certificate serial:       019922FA31DB57FDA22EE516DA91AC213F5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
Manifest number:          1670
Signing time:             Sun 07 Sep 2025 07:00:46 +0000
Manifest this update:     Sun 07 Sep 2025 07:00:46 +0000
Manifest next update:     Mon 08 Sep 2025 07:00:46 +0000
Files and hashes:         1: 7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl (hash: OyXju2BtrCLX+WPqA4OKTdHau9VJ8x9udJcsgQqqbfI=)
                          2: zXjqftbJPl4WMlTVqYwCCC34rp0.roa (hash: JlLjbihRwnZcBC1XS3nZ9UdUKk69BSC90fR3Qh4dmgY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:31:db:57:fd:a2:2e:e5:16:da:91:ac:21:3f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23
        Validity
            Not Before: Sep  7 07:00:46 2025 GMT
            Not After : Sep  8 07:00:46 2025 GMT
        Subject: CN=6e44dbc0e8a150b46bfcd06bec00efff8db26bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e7:1b:02:69:4e:7a:e4:60:66:f5:3e:db:13:
                    80:84:a0:f1:1f:47:32:d2:d4:61:29:77:85:bf:04:
                    e0:16:d8:97:1e:ec:c4:f0:a4:21:17:c6:6e:a4:f8:
                    d5:4b:43:ae:3a:13:ed:b8:57:8a:5a:1c:9b:02:34:
                    69:27:3b:b6:cb:74:59:fa:fb:b3:92:6f:0b:e0:f4:
                    29:29:a3:a2:ec:6c:7b:23:49:77:1a:bf:aa:36:ca:
                    16:2b:88:06:2f:d8:13:2c:9f:3c:65:5f:b8:2c:ba:
                    41:f6:41:0d:be:83:14:fc:72:a3:ba:bd:9e:d1:fa:
                    74:a8:65:b3:cf:db:8d:58:be:5b:50:d2:0c:1f:ec:
                    bd:ec:7a:8e:3e:25:a8:dc:68:f9:65:a1:44:0b:c2:
                    9a:ec:5a:08:46:84:84:2e:4e:93:82:84:66:26:4f:
                    11:eb:3d:70:95:41:f5:a7:51:36:eb:26:e1:9d:5c:
                    35:2f:9b:cb:94:89:f8:25:24:38:ed:a4:d3:7f:cd:
                    44:e0:8f:48:ec:e0:ea:04:b5:69:c6:a7:5b:3d:5c:
                    9c:9b:03:b1:1d:89:ca:79:9d:96:d1:fe:52:8a:b8:
                    e7:a8:bf:89:eb:a1:91:dd:05:72:f9:9b:1b:fb:ba:
                    88:f6:b3:00:9d:7c:bb:8f:08:52:8b:8d:32:02:b1:
                    ca:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:44:DB:C0:E8:A1:50:B4:6B:FC:D0:6B:EC:00:EF:FF:8D:B2:6B:DB
            X509v3 Authority Key Identifier:
                keyid:EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:64:3f:61:ab:80:74:41:5c:61:e2:e8:60:49:0b:d9:ad:d5:
         64:6c:f4:eb:f3:9f:ff:38:23:bd:ec:01:56:70:f8:b7:3b:aa:
         db:40:ed:dd:27:1c:7d:3d:ef:55:07:df:a4:5b:d6:44:b1:39:
         54:c4:9a:94:d2:ec:8f:34:f5:3d:21:21:a6:4a:34:46:51:ad:
         47:37:8f:89:41:75:fc:75:e0:fa:de:04:38:e2:c2:f4:4f:3c:
         6c:78:5e:63:0e:e2:a8:bf:25:51:1e:a2:05:45:15:73:5f:e6:
         9e:21:50:46:c2:ca:48:cc:0a:28:4e:9b:7d:1b:08:fe:40:f0:
         d8:a0:18:85:49:88:47:01:28:28:d3:b3:77:ed:3d:cc:89:ca:
         58:1a:c4:8d:38:a9:5c:f2:df:b0:ac:32:e8:6a:17:d9:94:d6:
         94:59:9f:70:f6:c9:b5:a7:44:b8:2b:70:a8:e3:09:18:07:fe:
         a9:a6:16:99:47:ac:70:1d:2a:4a:91:15:b3:75:bd:ba:4b:32:
         fc:4b:c3:b8:93:33:d0:e5:71:2a:b6:41:73:09:1c:91:c2:82:
         e6:12:02:d3:5e:2d:68:5e:db:c5:bd:d0:99:62:23:ca:22:ce:
         24:97:67:9e:b8:96:e2:52:d1:2c:dd:d9:63:46:6b:a0:a6:a0:
         3a:70:9e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:18 2025 by rpki-client