Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
File:                     7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft (raw, json)
Hash identifier:          mgn7rMlE5U3w8nG7kr0aPs8qef8MeCr1OAdL0km8Pyg=
Subject key identifier:   7C:C0:68:A1:16:F2:3D:57:21:FE:A5:10:0E:AA:01:87:48:C8:12:76
Authority key identifier: EC:EE:47:0B:F5:10:99:76:93:4F:51:E7:EA:EF:21:07:79:A2:C4:DE
Certificate issuer:       /CN=ecee470bf5109976934f51e7eaef210779a2c4de
Certificate serial:       01976C2B163AADBC6AEF1D292BDD60B0C5DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
Manifest number:          158F
Signing time:             Sat 14 Jun 2025 02:00:52 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:52 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:52 +0000
Files and hashes:         1: 7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl (hash: AeKhKQq9uMutycLyCvuaKsCDPXP/noRwoDquMHpfETQ=)
                          2: GOWs0802FOjDjhvj5VByRZ93Ms4.roa (hash: 0E/ca5KwIY555u3Bh3vtXM1rkOkEak6A4cwcKp+8kRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2b:16:3a:ad:bc:6a:ef:1d:29:2b:dd:60:b0:c5:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecee470bf5109976934f51e7eaef210779a2c4de
        Validity
            Not Before: Jun 14 02:00:52 2025 GMT
            Not After : Jun 15 02:00:52 2025 GMT
        Subject: CN=7cc068a116f23d5721fea5100eaa018748c81276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:28:e2:38:94:87:94:86:04:7e:d3:25:bf:8c:
                    34:ef:59:a6:02:eb:6a:2b:85:d5:aa:87:a6:40:81:
                    5b:b2:f2:d7:11:fe:6b:b0:0c:64:98:61:5e:b3:66:
                    af:02:85:cc:a4:de:4d:6b:03:d6:e4:32:08:07:78:
                    ae:b1:67:f7:12:48:e7:66:58:fe:05:9a:38:65:db:
                    46:88:00:15:af:78:9a:7a:19:4b:7c:52:e8:c4:f7:
                    c6:42:b8:a8:ce:f4:a9:fb:c8:50:6b:69:a1:02:d4:
                    52:73:53:92:10:86:1d:85:4f:16:3c:cc:91:b2:ed:
                    7c:6e:04:43:d2:57:13:4a:80:06:2f:47:29:bd:ad:
                    e9:56:37:30:51:54:1c:4b:e5:b9:05:11:07:f8:db:
                    0f:82:7b:78:63:f0:a3:3b:44:c5:61:53:c1:ae:02:
                    20:7d:d6:fc:e5:fd:3f:af:ea:1f:f3:10:78:09:c1:
                    c5:6c:60:e7:55:78:c5:1c:2c:ee:19:16:b1:eb:13:
                    69:79:a5:bf:33:37:4f:b5:3b:87:db:29:25:bc:40:
                    cf:e3:ed:0f:39:64:de:67:e0:7b:a2:7f:3b:b5:9e:
                    95:51:04:b0:69:8f:0c:ef:04:54:10:18:22:2c:dc:
                    46:90:72:d6:5a:ab:79:02:f2:a1:d5:8b:c0:7a:29:
                    b3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C0:68:A1:16:F2:3D:57:21:FE:A5:10:0E:AA:01:87:48:C8:12:76
            X509v3 Authority Key Identifier:
                keyid:EC:EE:47:0B:F5:10:99:76:93:4F:51:E7:EA:EF:21:07:79:A2:C4:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:55:ea:af:7f:c9:d0:81:cc:e5:27:11:f5:ea:71:95:80:d8:
         aa:89:fd:26:71:aa:0e:c0:71:8f:5c:09:99:14:5f:9c:aa:b5:
         c3:02:ea:28:a0:2f:d5:c8:60:69:99:07:a3:a2:e0:18:8b:ce:
         6e:ec:58:59:b9:dc:1d:84:03:be:e5:7a:98:5c:59:ad:7d:e4:
         86:ff:45:02:de:2f:2c:61:ce:68:a1:e7:cb:33:57:4a:05:32:
         b5:61:5a:53:c1:e4:ff:d5:da:75:53:38:c4:6b:51:48:02:3a:
         3d:9c:04:f9:cd:78:ff:41:bd:fb:6a:66:7d:e7:66:a4:75:05:
         b7:38:3d:76:55:8b:94:da:da:a9:0c:87:c0:6d:d6:5b:02:b6:
         a4:6e:b7:72:f8:e5:bf:ba:3d:e8:20:4f:98:ab:62:1f:03:99:
         04:7b:06:c8:e4:4b:0f:3e:32:f7:40:9e:c2:0c:9c:56:16:67:
         ae:aa:ca:32:1a:14:c1:6b:e4:38:01:40:34:4d:d7:15:07:e1:
         55:23:4d:cf:91:09:87:ea:78:aa:8f:10:ca:f7:1c:08:77:9f:
         36:b3:13:ae:f3:a8:ff:ce:06:8b:92:9d:d9:ae:15:8d:53:9f:
         e2:74:df:4d:40:69:5c:4c:eb:c8:0a:9c:04:43:01:28:f7:b0:
         b4:fc:ae:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:40:19 2025 by rpki-client