Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft
File:                     7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft (raw, json)
Hash identifier:          HL1R+mFNtLNKUongi3D/3lv3KxZEeIw3CdjKD9doZVI=
Subject key identifier:   2A:F1:F7:5C:9E:48:19:1F:D7:3F:0C:9B:BD:CE:A9:DB:22:2F:B0:0C
Authority key identifier: EE:EA:4D:4A:6A:D6:B7:28:9B:18:22:FF:4E:38:37:A0:A0:61:92:04
Certificate issuer:       /CN=eeea4d4a6ad6b7289b1822ff4e3837a0a0619204
Certificate serial:       019922C304B8540424C2E345D893F4EBCFC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft
Manifest number:          05C0
Signing time:             Sun 07 Sep 2025 06:00:29 +0000
Manifest this update:     Sun 07 Sep 2025 06:00:29 +0000
Manifest next update:     Mon 08 Sep 2025 06:00:29 +0000
Files and hashes:         1: 7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl (hash: RZvlPsL6SrKefOyX5tLmGtC0xkLQhOg9IaEl/Z0/+Lw=)
                          2: QaiA1bZYqqrrTFcETKEeVAb9d0I.roa (hash: 3/CpVEgMrkvVAywW4VLDUD5sCi7Crs9f+8Us3UCgxOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:04:b8:54:04:24:c2:e3:45:d8:93:f4:eb:cf:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeea4d4a6ad6b7289b1822ff4e3837a0a0619204
        Validity
            Not Before: Sep  7 06:00:29 2025 GMT
            Not After : Sep  8 06:00:29 2025 GMT
        Subject: CN=2af1f75c9e48191fd73f0c9bbdcea9db222fb00c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:88:e5:db:80:03:3c:08:a9:64:aa:3b:64:53:
                    fa:71:1c:4d:33:77:78:b5:fb:84:1c:28:55:84:2f:
                    d7:eb:a0:aa:da:aa:2b:f3:65:06:74:ab:a2:72:27:
                    8b:a9:1c:fd:e8:c5:37:ad:bf:5f:21:16:32:00:6e:
                    91:3c:85:9a:16:84:75:81:4a:d7:85:19:fd:f8:94:
                    c0:00:76:df:63:36:5a:e3:b4:73:73:ca:1f:84:d7:
                    39:d2:2d:44:4f:26:b9:26:bd:2f:9e:fc:3f:4b:f5:
                    f2:52:de:92:82:0a:61:5c:05:bc:15:58:13:7a:fc:
                    e1:73:27:f7:03:0f:fa:9e:03:32:79:93:08:ef:4c:
                    3b:91:13:af:5c:af:0a:65:04:20:02:6f:04:3a:7f:
                    05:fd:14:24:41:69:a2:27:7d:25:ce:9f:7b:ac:35:
                    ad:e3:1c:50:f3:d4:e0:96:2b:6c:20:66:d7:67:82:
                    1d:7b:ea:7f:d0:24:6a:e4:5c:48:11:60:91:22:a0:
                    d0:98:e5:b7:45:87:67:3e:e3:4e:05:52:86:9f:af:
                    ff:13:c6:f1:ed:4b:77:54:14:75:80:19:c9:17:4e:
                    8f:9a:48:a7:00:0a:ba:f0:0e:46:2c:60:58:35:90:
                    ad:ba:57:65:8f:4c:30:6c:90:03:13:9d:fe:1f:7e:
                    a1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F1:F7:5C:9E:48:19:1F:D7:3F:0C:9B:BD:CE:A9:DB:22:2F:B0:0C
            X509v3 Authority Key Identifier:
                keyid:EE:EA:4D:4A:6A:D6:B7:28:9B:18:22:FF:4E:38:37:A0:A0:61:92:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c1:54:ee:a3:ff:90:09:26:97:8f:4b:07:29:f8:75:b5:81:
         fb:b5:e3:66:ca:c9:17:e3:df:b9:0d:4a:9b:d4:bf:9a:54:e0:
         e7:4b:65:b3:65:1c:bb:94:e0:9d:d2:2e:4d:88:76:3f:eb:a1:
         f9:ed:dc:49:4b:e3:44:84:47:1d:bb:45:d3:d1:03:4a:d1:11:
         14:18:47:af:f7:1f:1b:2e:e8:2c:70:3d:24:97:8f:47:6f:d8:
         de:c4:f3:7e:ef:c4:e8:bb:84:da:46:8a:22:b3:bb:86:82:53:
         8b:f3:b9:3e:e8:12:1d:f6:f0:ee:3f:42:3d:84:1d:31:c3:56:
         14:55:da:ae:16:77:dc:07:f0:6f:06:10:bd:04:2c:26:36:5b:
         f6:88:3d:49:0e:e0:6f:0f:88:cb:04:13:09:a0:e6:89:fe:58:
         65:22:8a:ed:2a:ba:1d:d8:51:ec:ad:28:c4:7c:c2:5a:d5:0c:
         56:fd:f7:64:14:b6:ab:d0:15:80:82:b8:8d:c9:1e:aa:0f:cb:
         2c:ef:19:8f:8f:55:e5:21:0f:ed:27:46:ae:04:11:46:35:6a:
         38:d0:0a:98:f7:11:43:2e:71:78:db:55:a4:ed:87:f0:be:80:
         50:39:ca:05:68:63:cd:50:5e:56:9f:31:09:d2:9c:55:98:76:
         c1:e7:ae:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:28:31 2025 by rpki-client