Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft
File:                     cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft (raw, json)
Hash identifier:          Ehc1QDdxFV3hlTpqu5eqFEqgTG+Gk8sCbqJflcalxJg=
Subject key identifier:   BC:43:81:B5:BC:D7:3F:08:D5:5A:1F:27:AC:9C:DF:E8:1B:E0:9B:2A
Authority key identifier: 70:F7:8B:68:1B:66:17:FE:D7:0C:E8:67:FB:9A:8C:6F:25:CF:DA:55
Certificate issuer:       /CN=70f78b681b6617fed70ce867fb9a8c6f25cfda55
Certificate serial:       019921B096520F695FCF60C893E05FE4A778
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cPeLaBtmF_7XDOhn-5qMbyXP2lU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft
Manifest number:          0754
Signing time:             Sun 07 Sep 2025 01:00:44 +0000
Manifest this update:     Sun 07 Sep 2025 01:00:44 +0000
Manifest next update:     Mon 08 Sep 2025 01:00:44 +0000
Files and hashes:         1: 7vwEs2K4HN_LwUWqzjIICNGiknc.roa (hash: wTMMtevJNZjpsr8DvgOjhFZoAuNt0W+HiAbIshmL9sQ=)
                          2: cPeLaBtmF_7XDOhn-5qMbyXP2lU.crl (hash: fQYJ4f0hYF3CeG4C1KeDEvicnp5TDVmQ6qQzC4h39Ak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cPeLaBtmF_7XDOhn-5qMbyXP2lU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b0:96:52:0f:69:5f:cf:60:c8:93:e0:5f:e4:a7:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70f78b681b6617fed70ce867fb9a8c6f25cfda55
        Validity
            Not Before: Sep  7 01:00:44 2025 GMT
            Not After : Sep  8 01:00:44 2025 GMT
        Subject: CN=bc4381b5bcd73f08d55a1f27ac9cdfe81be09b2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6e:af:0b:48:10:1f:7c:f6:d2:a8:dd:76:c8:
                    b0:3a:9a:77:ce:1d:88:68:99:8b:4c:6b:27:2b:bb:
                    3b:9e:b6:29:c6:8d:d3:40:bc:a4:1e:7a:a0:ce:78:
                    06:c8:7d:ac:d5:83:5e:89:3a:84:c4:c8:f7:1e:a5:
                    4a:ad:10:e6:8e:77:d5:71:76:9a:4f:94:01:32:6f:
                    10:96:50:9b:59:cf:12:e4:37:9f:40:53:99:b3:28:
                    91:b9:b0:89:b8:61:85:78:f8:86:de:e2:2a:3e:17:
                    0c:18:92:87:4a:d0:f7:0a:14:26:aa:ab:ef:74:cb:
                    e7:06:3e:85:a8:d9:01:63:88:43:43:0b:09:b4:29:
                    15:25:5b:cd:75:3a:83:d0:08:c7:a1:11:f2:d5:ce:
                    c5:d1:82:68:79:26:08:d9:4d:ae:ab:e5:5a:bd:95:
                    01:f2:ea:35:75:ca:2b:57:a6:01:7a:7b:23:c1:6b:
                    d8:1e:65:0f:ad:91:df:15:8a:78:04:17:99:f4:9b:
                    7a:13:81:50:80:84:e1:f5:b5:b9:24:c5:7e:27:4a:
                    07:55:3a:bf:fc:76:8b:f0:ba:c4:0a:af:96:ec:7d:
                    a4:b1:89:58:52:11:e0:cf:96:66:c3:a5:06:d4:75:
                    bd:ba:c4:e0:14:02:96:bf:e4:da:d2:9c:b8:7f:68:
                    58:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:43:81:B5:BC:D7:3F:08:D5:5A:1F:27:AC:9C:DF:E8:1B:E0:9B:2A
            X509v3 Authority Key Identifier:
                keyid:70:F7:8B:68:1B:66:17:FE:D7:0C:E8:67:FB:9A:8C:6F:25:CF:DA:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPeLaBtmF_7XDOhn-5qMbyXP2lU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:51:00:2f:8d:00:1d:6c:84:71:1b:47:19:f9:95:12:82:d5:
         8e:b5:f8:65:ad:2b:26:10:74:3d:87:13:de:6d:2e:3a:cb:eb:
         ab:bb:83:b7:54:79:ff:b1:05:62:0b:eb:12:fe:db:01:91:29:
         23:77:f9:dd:79:bf:a2:5c:3a:4b:4d:75:a3:86:3b:48:1f:9b:
         e2:2b:db:be:70:83:ae:3b:f6:42:2f:f2:da:ec:b0:9b:72:8c:
         0d:13:78:f8:f5:4f:92:cc:9c:63:6e:be:7b:5c:cf:3b:07:47:
         fd:c8:15:67:7d:0f:2f:52:29:bf:64:9e:8f:08:15:a7:99:5c:
         78:a8:a8:62:98:99:b7:ac:6a:a8:34:c0:e4:3e:03:9f:84:c0:
         a8:64:42:7d:5e:d8:b4:f9:ac:55:68:eb:41:f5:89:b4:b9:ea:
         eb:67:82:cc:d0:15:2a:af:5f:36:a0:95:7a:7a:85:a1:1a:3c:
         7b:41:ae:55:90:b0:5a:8b:64:69:59:17:64:e8:78:5e:9a:59:
         e1:db:98:76:81:53:a0:f6:04:3f:c2:b8:c4:c2:7b:a8:22:2e:
         70:16:00:51:e3:38:0e:4e:53:86:86:32:e5:84:38:1e:5f:58:
         4a:df:8c:3d:af:bd:db:42:25:a0:a2:f3:52:10:d5:31:7b:b0:
         76:ec:a6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:39 2025 by rpki-client