Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
File:                     CR7HzPD6dh7Zm8WnqewNDusL8FU.mft (raw, json)
Hash identifier:          lM8YoiOD4yl0s9mmqpVYfEw5RjMQSpLKY8W37q5+ICg=
Subject key identifier:   D2:8D:C7:31:8F:FF:C0:09:D5:D0:22:14:C7:FE:27:68:BF:87:8C:1C
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Certificate issuer:       /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial:       01991EAF9E1D45FB7B8C0E9331E697C36A17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
Manifest number:          100F
Signing time:             Sat 06 Sep 2025 11:00:49 +0000
Manifest this update:     Sat 06 Sep 2025 11:00:49 +0000
Manifest next update:     Sun 07 Sep 2025 11:00:49 +0000
Files and hashes:         1: 5dCYwgA9XnsPyTZF0PH2sEFIENQ.roa (hash: HeN6VLa+RLAMtmcxH1afx2NR8Pkm/Q2bNQH+mpmkM84=)
                          2: 6SIE7lIPAfETfqeGKwz9qsqTDpo.roa (hash: baJLkGQNPC/ayO1BdamNx0wTnQsH1JjYTd+EvvvO47U=)
                          3: B5NGdVBBF38v7I807spD9rlndCk.roa (hash: Ij2UQybHDi9rCMOEdxuL3uK0WnnQkl2pfO/6vc3aPyM=)
                          4: BvGloeMd1pr-0RarsG3frbQCits.roa (hash: GcGKUXns2ciEuVorqL/ux5XGAMK5utLWLfmy9SJ0sbM=)
                          5: CR7HzPD6dh7Zm8WnqewNDusL8FU.crl (hash: 7RJ459h3FDMa4ghRDWDAw3lujIpdD+xP5lzLm0mMikM=)
                          6: D5MvDrzK0eKeBhQPT5E-qcyDegE.roa (hash: ZZ3rGXDkZjhVdVSt+mJABSAAxbotcysbVgd0Yw1KZd4=)
                          7: GWboZrvlBziZoBcX3EIZ1oPONJw.roa (hash: AivjmWkJZRMdojRH4kleqZQJ33BcMzsWC3Fh1Qo8D3Q=)
                          8: JNXkfS8Gevyb4Dt3MskQFKOQyBE.roa (hash: xyI4i/7FZY7J0bkn5v2Hrfk5UEeVMBFfBsSKz6DAPY0=)
                          9: Jfbp60TqKTaaXrwQL7LgGpAWEpg.roa (hash: 77aXq5T/xLpRDc/RPjSdhF/Q92mfSJbZ1p52uiAiKLY=)
                          10: L2H6UwduWaJxFicdgN2P7eBtiHA.roa (hash: P4+4JbqGYS4bGYqfrHMMZckY8WsOqty8P+Ix09bzckQ=)
                          11: SRcQTsQI-tcWDkKInxMrE24Ysok.roa (hash: Ahr9YcByWBXusMBM+n1pwDVQOVjVHUrt6dCBioyhQio=)
                          12: T1gh1hk6ej12g4Ihw5JL9jevaLA.roa (hash: S9ngvgv1d+3Twe9rVRGrD4AR8LO9wBk9cDUOi8GIi4o=)
                          13: THvQYIa2SprhVvWK5-tWknfJY9w.roa (hash: 5zmsJFBP7NnBZaNurwDsUUuS1oMZV7G7pUdzHmeMsEI=)
                          14: Yxw9CgVFv8XNwyz0O8AL1qaw9K8.roa (hash: vOqNj6Vd6gLLk/83Q4bEPX8D3jOCAg0ZiF3Yt+kCm00=)
                          15: ZPm62e8uWHs6KBXJ7NoF7XOySMc.roa (hash: 30wlsbHL60VdCwwpHaURDp5qoaEvw/fBx8WqJfwV9hQ=)
                          16: ZgLRGBOuTRlKdAwAIwUuWyAMLkc.roa (hash: 8GL12T13sCWwu0TNyAChyir1hWBQIOYdOllBDYRok7Y=)
                          17: _2x-4OGJJSoKcxtXyC5heNpC1Lk.roa (hash: vkhFS/TDoPtaxHhXWGchXfwiYEYa7shcVneeg8uj/S8=)
                          18: cBFi45ZytFKgnNo2imsLe1_V7q8.roa (hash: r9FtBlSO2l8QxP7DU1HrwjHWsN6WkSKa/BKGiXhnmRk=)
                          19: chc7NZYTY8TAAm4omvxtyabyq7Y.roa (hash: D4ml84hX/IF5k6NvrzKJg2mEZ4TzfgqpdYCT4BEMOzQ=)
                          20: hhzSm6GjX7s3vRc-UjvW8KahBO0.roa (hash: Ee9hXcXaMVLm37/p4g8p7BURdDDaz2FT+WhXrMvmGFM=)
                          21: jCupyTailD4J3l_LQLBvtP05gjk.roa (hash: D5HBTRbrPgt5UiMToMLoELxSS8TE8kgjWsHI9+xY4kE=)
                          22: jMB-k8pBGp88vItJMomyVdZ2_gE.roa (hash: tlwqcgZ5QLTir7mj2symAU7niQUfF+NgGNX2eVjL9Tc=)
                          23: rPciKNxouTUmkCLDkFKKyn388Cc.roa (hash: zI+gdKXH7CP5oPaL5HXMew7Kewt2hB10+HNYNloE0UY=)
                          24: vel8G0_GwQFflB8Mgko4kMTZKps.roa (hash: rEt+VHHycH8jAHwOJN7GUU5Y5p8vUpqH1HAPUwtitdw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Sep 2025 11:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1e:af:9e:1d:45:fb:7b:8c:0e:93:31:e6:97:c3:6a:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
        Validity
            Not Before: Sep  6 11:00:49 2025 GMT
            Not After : Sep  7 11:00:49 2025 GMT
        Subject: CN=d28dc7318fffc009d5d02214c7fe2768bf878c1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ed:3c:74:84:de:a7:64:45:b7:92:24:ad:72:
                    87:1a:35:12:33:8b:48:7e:f8:b5:ae:25:34:8b:ad:
                    3f:7a:95:58:14:2c:cb:ce:b8:5a:ff:6f:11:c4:f7:
                    c4:88:2c:b9:ae:7e:5f:5e:76:68:b1:94:fa:a3:a1:
                    3a:a2:51:e7:c4:9c:18:54:fa:7a:29:72:0f:b2:1d:
                    01:33:8c:07:a4:45:86:10:ce:40:2a:de:6b:0e:23:
                    34:05:a0:84:7c:f5:89:4a:d9:7d:cb:76:45:cc:f4:
                    82:4f:b2:df:95:b3:c3:5b:6a:ec:50:49:9f:13:7d:
                    af:0f:0e:eb:1b:9e:b0:4b:71:01:32:67:87:29:ba:
                    ce:38:9f:74:30:ef:3c:b5:57:66:77:c9:2b:6d:bc:
                    0f:e2:5e:5f:58:7c:b2:d6:77:8c:dd:86:57:58:96:
                    d4:30:d2:86:1e:f9:cd:b3:e8:f2:c1:0d:12:e1:48:
                    ca:6f:44:e7:98:19:30:f2:f0:b0:3c:46:d3:97:cf:
                    92:7b:db:44:3b:87:94:ca:76:16:c4:2d:d2:7e:b0:
                    d2:0b:0b:a0:8d:6e:2e:60:f9:9b:7d:55:ef:dd:6d:
                    32:38:c7:96:8e:df:6d:87:21:d4:7b:df:aa:1b:75:
                    24:45:3d:be:b4:9f:bf:af:7a:f1:a2:77:50:5c:3f:
                    15:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:8D:C7:31:8F:FF:C0:09:D5:D0:22:14:C7:FE:27:68:BF:87:8C:1C
            X509v3 Authority Key Identifier:
                keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:a8:b5:f1:81:ac:9c:52:48:8c:bb:24:f3:43:b7:1e:1f:75:
         84:b9:76:ef:c7:7e:0f:55:6b:c2:1c:cc:fd:2f:1a:3e:86:51:
         a2:04:78:99:f2:02:da:a9:dd:7e:40:6c:2f:da:22:04:19:d1:
         cb:54:36:ec:cf:4d:7a:e1:7b:05:30:9c:6d:bf:1f:78:cb:29:
         8f:21:7d:d2:ee:10:71:73:cf:82:c5:40:3e:a7:da:12:19:2f:
         d9:b5:a0:a2:61:0d:77:07:05:da:70:95:a7:4b:dc:cc:d4:49:
         b5:dd:33:04:e2:bf:cd:ee:f8:88:44:86:a9:a0:19:50:73:4f:
         64:89:8d:15:65:57:c2:ec:5b:6c:dc:c9:84:76:df:f9:29:b4:
         56:57:6e:65:90:9b:51:fe:df:3e:1f:67:2c:38:d1:0d:d9:e4:
         e9:f3:5c:10:32:83:02:21:4b:b2:a7:95:16:48:97:d9:77:7a:
         65:fb:e1:1b:57:63:1e:43:21:92:62:84:69:5a:be:23:21:2e:
         ad:c1:d4:1e:ed:1f:c4:f8:24:43:76:f0:eb:11:83:33:40:b1:
         18:34:43:a9:52:79:92:9f:b5:7f:08:39:1b:3a:2d:6b:16:0d:
         20:06:fc:45:d0:ed:96:bc:18:28:f9:1e:d1:e3:67:6e:fe:0f:
         9e:a9:08:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:13:59 2025 by rpki-client