Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft
File:                     7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft (raw, json)
Hash identifier:          uAo53ZQzKb6V42hRD7dT1s7B5UfT/W4IB3sZrg4x7lc=
Subject key identifier:   0D:89:94:1D:D9:1D:DC:5C:75:9A:DD:00:18:4F:D6:6D:C2:27:AC:A5
Authority key identifier: ED:73:C2:66:09:B1:B2:1D:87:A6:81:30:2E:F2:D2:6F:C0:A0:0F:A3
Certificate issuer:       /CN=ed73c26609b1b21d87a681302ef2d26fc0a00fa3
Certificate serial:       019921B281D725029E57146EA193D4AA0174
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XPCZgmxsh2HpoEwLvLSb8CgD6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft
Manifest number:          11B5
Signing time:             Sun 07 Sep 2025 01:02:50 +0000
Manifest this update:     Sun 07 Sep 2025 01:02:50 +0000
Manifest next update:     Mon 08 Sep 2025 01:02:50 +0000
Files and hashes:         1: 7XPCZgmxsh2HpoEwLvLSb8CgD6M.crl (hash: x+GcGJOAinfsDWXqcnCpLwpSDzfpCAHeVrXaW1kLh0U=)
                          2: DYtZ-mqw6oNlIGZ4UJkyBpBrIuQ.roa (hash: hy9DSVfaehQXQmBRqqc5gZr2CYEFnu9h17oPiFVHPic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XPCZgmxsh2HpoEwLvLSb8CgD6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b2:81:d7:25:02:9e:57:14:6e:a1:93:d4:aa:01:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed73c26609b1b21d87a681302ef2d26fc0a00fa3
        Validity
            Not Before: Sep  7 01:02:50 2025 GMT
            Not After : Sep  8 01:02:50 2025 GMT
        Subject: CN=0d89941dd91ddc5c759add00184fd66dc227aca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d0:87:8e:0a:89:62:ff:7e:31:8d:e0:06:b9:
                    aa:8c:8c:4d:6c:99:86:e9:05:b0:a9:35:32:ee:fd:
                    2c:22:2b:ba:29:56:56:db:02:bf:05:83:ea:45:69:
                    d0:10:49:bb:31:b7:6b:56:a1:99:f0:0e:32:dd:16:
                    71:f9:5c:17:34:7e:74:f7:65:0e:e0:6a:70:fe:28:
                    38:20:0e:62:da:2b:00:c7:26:bc:e0:de:83:2b:93:
                    61:b9:8c:3f:8a:44:b2:2f:b6:31:92:a6:fb:05:7c:
                    c4:f7:53:ed:c1:49:24:fd:ce:ef:9c:3a:0b:7c:82:
                    ce:6d:e8:a7:1e:1f:62:3c:d4:e0:90:29:85:65:96:
                    f4:c5:cc:81:d4:ef:b0:e3:6a:84:a4:f8:31:0c:85:
                    1e:c1:b4:d6:5b:a4:44:01:f2:b2:d4:44:69:a3:0a:
                    42:1b:59:ff:44:bf:92:ad:cd:f3:cb:fb:3d:f1:68:
                    8d:3e:c1:78:8f:32:73:43:55:2b:9d:cf:bb:fe:59:
                    62:cf:a1:b0:60:8f:fc:b8:04:27:e5:38:f6:de:c5:
                    ed:a3:3e:da:b1:f5:90:df:52:62:e5:55:9c:af:72:
                    4e:f2:70:73:58:8b:0f:42:f0:7b:80:04:d1:50:17:
                    f3:19:47:d7:95:b2:93:08:5c:b4:54:f4:05:af:5f:
                    15:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:89:94:1D:D9:1D:DC:5C:75:9A:DD:00:18:4F:D6:6D:C2:27:AC:A5
            X509v3 Authority Key Identifier:
                keyid:ED:73:C2:66:09:B1:B2:1D:87:A6:81:30:2E:F2:D2:6F:C0:A0:0F:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XPCZgmxsh2HpoEwLvLSb8CgD6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:c9:64:a5:e5:5f:ae:29:42:61:a0:86:f6:2d:15:59:7c:29:
         a1:70:6a:99:ae:a1:62:56:17:2f:94:b0:67:ab:f8:b5:dc:d4:
         b0:3d:e9:2d:2e:f6:07:36:26:52:a0:5f:3e:06:00:09:93:2c:
         72:6f:63:43:e8:5b:1e:dd:d7:31:ee:df:97:7f:01:ba:25:7d:
         83:75:c4:b5:8b:5c:47:9e:a2:fa:bb:93:6a:f4:a2:85:45:19:
         0e:80:8b:3f:49:6b:b0:bc:ff:fd:47:53:94:5b:6b:bb:93:14:
         9a:a2:c8:c0:ce:ba:76:12:31:3f:4c:0a:a1:be:6b:90:58:b4:
         83:7f:68:d4:b9:4d:5f:e6:1a:e2:bd:cc:4f:e1:4a:9d:35:cd:
         08:6a:00:da:66:dc:0c:0b:14:d1:a8:b5:bd:02:0f:76:e2:7c:
         f5:3f:93:7b:6c:29:fb:db:4e:2f:fb:24:96:ae:a0:da:b3:6f:
         8f:75:6f:db:95:63:6c:2b:21:7f:dd:0d:c3:ba:78:ce:88:30:
         33:01:de:55:a7:c9:fc:12:a1:cc:8f:11:27:79:36:34:cd:72:
         76:bf:21:a0:01:52:36:ce:c4:f7:a5:c5:b8:19:ea:e0:6d:21:
         5d:d4:71:5e:11:03:93:c9:f4:90:72:1a:cc:56:9d:53:ae:d3:
         12:8a:55:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:58:26 2025 by rpki-client