Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.mft
File:                     Mo7_u7_VU10-cbpuqBXuSQXBwg0.mft (raw, json)
Hash identifier:          xOsmjbs1p5wdb1xWuSwUMCNxI3zxmDdNAziE9KPEMWw=
Subject key identifier:   09:C7:E8:C3:85:0D:8E:FF:47:4C:60:64:B9:BD:BB:86:85:C3:A8:4F
Authority key identifier: 32:8E:FF:BB:BF:D5:53:5D:3E:71:BA:6E:A8:15:EE:49:05:C1:C2:0D
Certificate issuer:       /CN=328effbbbfd5535d3e71ba6ea815ee4905c1c20d
Certificate serial:       019935023973CCE9EE1D3FCB9EB89B7DFAAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mo7_u7_VU10-cbpuqBXuSQXBwg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.mft
Manifest number:          0C23
Signing time:             Wed 10 Sep 2025 19:02:42 +0000
Manifest this update:     Wed 10 Sep 2025 19:02:42 +0000
Manifest next update:     Thu 11 Sep 2025 19:02:42 +0000
Files and hashes:         1: Mo7_u7_VU10-cbpuqBXuSQXBwg0.crl (hash: 4i7EV9X/XqUzaziNkwOniD8ODE3asOWYzv0nlI09pLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mo7_u7_VU10-cbpuqBXuSQXBwg0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 19:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:35:02:39:73:cc:e9:ee:1d:3f:cb:9e:b8:9b:7d:fa:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328effbbbfd5535d3e71ba6ea815ee4905c1c20d
        Validity
            Not Before: Sep 10 19:02:42 2025 GMT
            Not After : Sep 11 19:02:42 2025 GMT
        Subject: CN=09c7e8c3850d8eff474c6064b9bdbb8685c3a84f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fd:fc:e2:67:e5:1c:cc:39:79:12:81:b4:08:
                    48:42:43:de:fc:09:40:8d:de:ed:96:30:e2:9e:51:
                    c5:ab:09:4f:9f:e9:5b:e4:0b:4c:65:4f:71:4e:b2:
                    7d:41:39:c3:d9:00:fc:07:25:2d:5c:fa:1b:7e:ac:
                    25:2c:84:e4:df:29:f1:75:7c:e2:b7:1c:6b:03:5b:
                    86:1f:14:4e:7e:a9:41:ee:db:4a:9e:88:58:42:dd:
                    1f:04:2c:46:b6:13:9f:15:24:8c:fd:8d:f0:b0:6e:
                    24:4c:bd:96:1d:df:02:34:e9:32:82:bf:62:c0:48:
                    66:af:07:dd:8a:ee:06:a1:50:5c:ac:a7:62:5d:92:
                    88:f2:19:30:33:a5:62:1f:cd:64:b7:4f:08:a3:b0:
                    9e:2c:30:b1:a1:6e:b5:6c:f8:59:4c:8b:b4:2c:8e:
                    14:b4:7f:fd:b9:e0:2f:92:6e:90:d6:7e:a9:a2:5f:
                    a3:ea:bd:cb:e4:99:98:70:64:f2:1f:12:fd:47:26:
                    91:cd:7b:10:72:bf:c3:99:94:fe:2a:42:92:47:9c:
                    0f:e6:8d:75:ec:a9:53:f7:2b:db:8b:a4:8a:46:36:
                    91:cb:22:01:5c:23:34:30:53:fb:52:34:2d:02:7d:
                    55:d4:cf:26:21:c9:91:0b:12:d5:e8:a4:86:82:1e:
                    25:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C7:E8:C3:85:0D:8E:FF:47:4C:60:64:B9:BD:BB:86:85:C3:A8:4F
            X509v3 Authority Key Identifier:
                keyid:32:8E:FF:BB:BF:D5:53:5D:3E:71:BA:6E:A8:15:EE:49:05:C1:C2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mo7_u7_VU10-cbpuqBXuSQXBwg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:22:19:5f:81:e4:b7:ba:8b:c9:47:0f:ea:cc:47:9b:ec:25:
         7d:66:cb:9a:ae:e1:94:8c:76:b8:d7:f7:46:0a:e6:a3:22:8e:
         0c:d4:d4:96:46:54:05:8f:81:e5:6f:5c:b7:b4:cc:58:b4:58:
         27:93:e7:d4:90:28:ac:cd:4a:03:e7:f3:65:82:93:80:0c:62:
         e0:12:64:8a:50:ec:cf:0c:db:94:e7:19:38:c6:f0:de:7c:57:
         72:5c:77:ca:70:c0:c0:29:6f:e3:4a:cd:01:f4:3b:44:81:56:
         90:11:77:a9:dc:0a:d7:8a:d0:2c:2c:1b:24:fc:d8:a5:3b:25:
         b4:df:d5:23:88:78:d3:f1:95:18:35:7c:84:a0:80:f9:9e:6c:
         d1:e9:93:87:16:50:1e:21:0a:85:d2:68:fd:8b:b0:7b:00:01:
         2c:af:4b:89:0a:12:99:3d:f2:db:33:e9:8b:4e:c2:96:23:e4:
         bb:25:8a:51:8c:fc:b6:27:57:e9:95:a2:cd:e9:bd:54:13:49:
         3e:0e:32:51:1c:32:a9:20:f2:33:11:0f:fc:6a:4a:57:61:7d:
         c0:12:c7:3c:e4:d8:f2:17:08:3f:aa:74:0c:d1:64:61:19:b0:
         90:c7:2b:56:d8:c1:3f:35:be:20:ac:33:55:fa:87:31:c1:9b:
         3a:8e:36:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:16:12 2025 by rpki-client