Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
File:                     7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft (raw, json)
Hash identifier:          KWtD7AkJmtnB2nTFBW9jzEvlcTdwwbdIPilW5X5Xydc=
Subject key identifier:   67:CB:45:0F:99:79:C6:CC:14:A8:1B:F2:89:D4:3B:B7:D0:2B:19:35
Authority key identifier: EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41
Certificate issuer:       /CN=eebf5b51999637c80bf93c8a903d16c3aec25341
Certificate serial:       019846D225A2865C22CB7D254FD4B9337D3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
Manifest number:          0CE7
Signing time:             Sat 26 Jul 2025 13:00:34 +0000
Manifest this update:     Sat 26 Jul 2025 13:00:34 +0000
Manifest next update:     Sun 27 Jul 2025 13:00:34 +0000
Files and hashes:         1: 7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl (hash: yISimmxzVwxq2KmvbsoSUtkx+K0BxUX4wjgxLUSgXf0=)
                          2: pHwUDvw0Qa6FCMDxKYzOWGmXJqA.roa (hash: t43FxbHkEwauKOd1tgnKpZSOOT0Im/fP5LgjaAezi/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:d2:25:a2:86:5c:22:cb:7d:25:4f:d4:b9:33:7d:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebf5b51999637c80bf93c8a903d16c3aec25341
        Validity
            Not Before: Jul 26 13:00:34 2025 GMT
            Not After : Jul 27 13:00:34 2025 GMT
        Subject: CN=67cb450f9979c6cc14a81bf289d43bb7d02b1935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ae:ed:82:c6:9d:5c:57:a6:7c:3b:64:8f:7a:
                    e0:64:99:00:01:ca:a7:42:90:23:d1:89:ba:55:d2:
                    a2:44:57:d1:3c:f4:f6:1d:3b:7a:91:e8:f9:11:5a:
                    c3:03:36:58:b9:d4:4d:4d:a5:51:d2:fa:fc:10:c2:
                    5c:24:40:bf:47:4c:0f:a5:30:43:8e:fe:8b:92:29:
                    bb:fe:bb:cd:82:b6:5b:8f:59:ef:f7:da:15:b8:e2:
                    85:fe:d8:d3:bc:44:0c:a4:99:3e:ca:7a:60:26:d0:
                    f7:6a:b5:23:a4:4c:d3:98:10:66:4c:dd:5c:aa:71:
                    77:60:6c:07:44:03:01:93:3a:8e:94:07:12:b3:22:
                    17:4d:b9:5f:91:c0:aa:00:78:28:ae:ef:32:0c:c0:
                    ae:d3:d1:48:25:51:c0:2c:56:3a:d0:1c:2c:40:68:
                    5c:bb:68:ee:69:d4:ba:8b:eb:f6:e0:6f:95:86:0b:
                    8a:d8:a7:61:f5:c9:d7:38:a9:16:f8:f5:2a:d8:9d:
                    90:7d:7d:27:c7:10:6f:fa:49:12:ff:04:55:44:3b:
                    de:80:82:4b:5d:63:fb:2d:22:c4:ab:74:3c:94:d1:
                    6a:54:2e:b6:15:f3:c8:b4:74:4b:02:50:14:2d:0d:
                    92:3c:47:e4:88:87:de:0c:46:30:0f:92:da:24:60:
                    31:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CB:45:0F:99:79:C6:CC:14:A8:1B:F2:89:D4:3B:B7:D0:2B:19:35
            X509v3 Authority Key Identifier:
                keyid:EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:a9:3c:29:44:36:44:76:6f:df:0f:48:6a:30:9d:c0:94:9a:
         ae:71:d9:56:b4:79:4c:aa:d7:1d:f4:85:5c:dc:66:19:ff:d3:
         41:50:4a:58:93:f0:1d:f2:ac:68:c2:a6:4f:d8:b7:d4:b7:7a:
         f6:47:0d:7f:0f:48:e9:94:4d:2e:a5:e4:6d:a8:57:ad:ca:92:
         b3:9b:c2:41:50:56:a9:62:56:e5:a5:46:f9:73:35:2b:24:2b:
         00:c0:1b:52:b8:f6:e0:be:f6:08:6a:ba:08:83:24:6b:f5:a1:
         69:ac:5a:aa:79:cf:4f:e2:d0:a7:88:04:f3:88:2a:c5:75:7b:
         0f:bf:69:d7:a1:87:12:d9:73:b4:ae:24:2d:2a:fa:74:31:55:
         e9:64:99:d1:7c:57:2f:c2:3e:83:10:dc:74:ff:e4:61:eb:15:
         a0:9b:db:1c:f5:ed:7b:86:54:24:bf:8e:0d:b6:e7:1b:e3:97:
         97:ca:b5:03:d6:e2:f9:41:77:25:5c:ac:38:4d:d5:73:f4:af:
         bd:cd:61:c8:25:32:b0:ca:73:41:1c:65:ec:28:e1:93:76:29:
         f8:95:f2:eb:e7:8a:fa:a0:89:d9:ef:72:a8:af:60:0d:d3:ca:
         bb:2b:aa:96:d1:9c:ff:36:a3:d9:70:b9:00:0e:e0:a5:4b:0b:
         67:cf:14:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:43:28 2025 by rpki-client