Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.mft
File:                     7HRpxUKO75q3aNntbCyJRDprtL4.mft (raw, json)
Hash identifier:          jukfN7VCGif4cLqCISoMLLhPrQW6zttjEV15UNmsb/Q=
Subject key identifier:   0E:41:FA:42:58:D4:8D:B7:89:33:6C:16:81:67:E5:DF:A4:EC:95:B4
Authority key identifier: EC:74:69:C5:42:8E:EF:9A:B7:68:D9:ED:6C:2C:89:44:3A:6B:B4:BE
Certificate issuer:       /CN=ec7469c5428eef9ab768d9ed6c2c89443a6bb4be
Certificate serial:       01992DEC153777C236FE025B9BE9A238A28D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7HRpxUKO75q3aNntbCyJRDprtL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.mft
Manifest number:          07CF
Signing time:             Tue 09 Sep 2025 10:01:10 +0000
Manifest this update:     Tue 09 Sep 2025 10:01:10 +0000
Manifest next update:     Wed 10 Sep 2025 10:01:10 +0000
Files and hashes:         1: 7HRpxUKO75q3aNntbCyJRDprtL4.crl (hash: Ji3pjdeIvkq3x/jgIsfnL7FffC+n2UHPJY5rUavjr/M=)
                          2: IefeYi4YnGA5-Btgta25kSVWpXo.roa (hash: wXwoabDrm1OGUarx1OccGEgXSjlxtoxh6QKkXSRruII=)
                          3: KZqAxy5iqIMDtOLtEGoxGEy07RI.roa (hash: kbgYn28oaby5NUH4Ku4hnNvchyDC07zcNQ/v/n7K8DU=)
                          4: KzIn4K4LGUhk7ahqCpBF3dUn2js.roa (hash: sArPRbY2NbhQMJF8NLf9Nvh0HsgPmZBF4FQAbmtOpRo=)
                          5: YtnZu-c0kgMDTAChjtBERUQSanA.roa (hash: tYMylqMx0c2qfSfZBjQ3pAWcw3O1p68Md9BYMc3Adjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7HRpxUKO75q3aNntbCyJRDprtL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 08:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2d:ec:15:37:77:c2:36:fe:02:5b:9b:e9:a2:38:a2:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec7469c5428eef9ab768d9ed6c2c89443a6bb4be
        Validity
            Not Before: Sep  9 10:01:10 2025 GMT
            Not After : Sep 10 10:01:10 2025 GMT
        Subject: CN=0e41fa4258d48db789336c168167e5dfa4ec95b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4b:5f:ef:41:ab:3e:43:2e:ac:61:99:62:0f:
                    07:4f:f8:08:f1:3f:fd:d5:b0:5f:46:ed:ae:01:99:
                    d0:02:f4:49:18:ea:e6:58:83:91:a9:b5:34:ed:42:
                    11:86:e5:56:32:33:73:f3:d5:4f:3d:c4:8f:2e:76:
                    95:52:6f:3d:84:18:86:dc:7c:f4:1e:3d:ef:8b:b4:
                    7f:db:89:41:53:46:54:f1:7f:52:3d:33:fa:96:e2:
                    2c:f8:03:99:fa:a8:46:42:48:eb:d1:b6:ca:52:54:
                    11:78:10:06:f7:95:ad:78:e9:15:de:bf:86:fb:b6:
                    f3:a1:7f:da:87:05:57:f2:f6:b9:71:35:50:cb:68:
                    6d:b6:14:9b:e2:40:52:ba:9f:c3:f5:ae:68:b7:70:
                    ad:f3:c5:3e:e6:9e:52:49:e6:54:2b:c3:1f:4a:08:
                    6e:64:44:2d:82:25:f0:95:81:63:65:d4:8d:33:ca:
                    ff:64:44:49:26:a9:91:1d:9c:77:4c:16:b6:e0:9c:
                    ae:01:32:c7:58:6f:d7:08:ff:51:9d:26:61:85:10:
                    b2:c4:1e:6e:ef:03:c8:64:6b:7f:23:a3:13:b9:ef:
                    62:70:e1:b3:ad:c4:17:32:a1:59:74:9c:07:42:93:
                    d3:ac:9f:59:66:b2:ba:08:2c:c2:a8:3c:2d:33:b6:
                    04:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:41:FA:42:58:D4:8D:B7:89:33:6C:16:81:67:E5:DF:A4:EC:95:B4
            X509v3 Authority Key Identifier:
                keyid:EC:74:69:C5:42:8E:EF:9A:B7:68:D9:ED:6C:2C:89:44:3A:6B:B4:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HRpxUKO75q3aNntbCyJRDprtL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:45:8e:ae:c5:f7:02:4a:96:35:d3:6c:19:85:cd:7d:52:97:
         7d:eb:31:cd:55:de:28:56:91:cc:24:73:c1:8c:7f:06:75:c5:
         1f:40:f7:2a:7e:ad:5a:3d:c4:9e:4c:6b:2b:2d:65:72:b8:7b:
         13:ce:51:af:1b:58:44:0c:a3:7e:65:1c:2c:21:70:49:8c:0c:
         75:33:f6:8f:41:07:78:98:e6:b9:2b:b8:03:38:8a:9c:97:dc:
         df:df:64:2c:c4:93:8b:1b:0b:f2:16:26:c9:27:cb:6d:2c:55:
         14:db:15:12:5c:1d:08:d1:b7:50:03:44:b8:c4:7a:04:c2:d3:
         d5:36:07:67:c5:fd:5b:14:bd:ad:dd:15:24:e3:3e:cb:3c:47:
         bf:fa:95:9f:17:91:2f:66:69:05:3a:64:c7:f9:4f:83:6e:b8:
         ff:9c:f9:b4:33:b0:b8:2e:f4:ee:48:b9:e4:5a:f5:83:a3:ef:
         17:42:82:64:4f:30:b0:e8:c4:49:e1:80:6f:ca:f6:b1:41:9e:
         09:78:d6:41:67:e6:cf:b9:fe:14:e2:be:44:86:06:e3:50:92:
         a2:18:96:5a:1f:66:95:fa:19:25:d8:e2:c9:47:78:5d:d6:be:
         64:96:b4:21:86:dd:5c:52:5b:90:57:16:0a:ee:e3:1f:50:5a:
         8b:3f:e0:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkt7BU3d8I2/gJbm+miOKKNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNzQ2OWM1NDI4ZWVmOWFiNzY4ZDllZDZjMmM4OTQ0M2E2
YmI0YmUwHhcNMjUwOTA5MTAwMTEwWhcNMjUwOTEwMTAwMTEwWjAzMTEwLwYDVQQD
EygwZTQxZmE0MjU4ZDQ4ZGI3ODkzMzZjMTY4MTY3ZTVkZmE0ZWM5NWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUtf70GrPkMurGGZYg8HT/gI8T/9
1bBfRu2uAZnQAvRJGOrmWIORqbU07UIRhuVWMjNz89VPPcSPLnaVUm89hBiG3Hz0
Hj3vi7R/24lBU0ZU8X9SPTP6luIs+AOZ+qhGQkjr0bbKUlQReBAG95WteOkV3r+G
+7bzoX/ahwVX8va5cTVQy2htthSb4kBSup/D9a5ot3Ct88U+5p5SSeZUK8MfSghu
ZEQtgiXwlYFjZdSNM8r/ZERJJqmRHZx3TBa24JyuATLHWG/XCP9RnSZhhRCyxB5u
7wPIZGt/I6MTue9icOGzrcQXMqFZdJwHQpPTrJ9ZZrK6CCzCqDwtM7YEbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5B+kJY1I23iTNsFoFn5d+k7JW0MB8GA1UdIwQY
MBaAFOx0acVCju+at2jZ7WwsiUQ6a7S+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0hScHhVS083NXEzYU5udGJDeUpSRHBydEw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82YjU0NGMtNTBlNy00Zjk2LThjOGQt
OGRlZTFkYTEwNzQxLzEvN0hScHhVS083NXEzYU5udGJDeUpSRHBydEw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny82YjU0NGMtNTBlNy00Zjk2LThjOGQtOGRlZTFkYTEwNzQx
LzEvN0hScHhVS083NXEzYU5udGJDeUpSRHBydEw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmEWOrsX3
AkqWNdNsGYXNfVKXfesxzVXeKFaRzCRzwYx/BnXFH0D3Kn6tWj3EnkxrKy1lcrh7
E85RrxtYRAyjfmUcLCFwSYwMdTP2j0EHeJjmuSu4AziKnJfc399kLMSTixsL8hYm
ySfLbSxVFNsVElwdCNG3UANEuMR6BMLT1TYHZ8X9WxS9rd0VJOM+yzxHv/qVnxeR
L2ZpBTpkx/lPg264/5z5tDOwuC707ki55Fr1g6PvF0KCZE8wsOjESeGAb8r2sUGe
CXjWQWfmz7n+FOK+RIYG41CSohiWWh9mlfoZJdjiyUd4Xda+ZJa0IYbdXFJbkFcW
Cu7jH1Baiz/gbw==
-----END CERTIFICATE-----
Generated at Tue Sep 9 13:21:24 2025 by rpki-client