Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
File:                     C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft (raw, json)
Hash identifier:          tf5u/I+OARfPw/y9wI9TQiqvvGCfTO2iwmepUESoips=
Subject key identifier:   7B:73:78:1A:B8:40:82:0A:5C:D3:C8:A1:D1:85:2A:F5:14:D1:18:2E
Authority key identifier: 0B:B1:D0:F2:C3:D2:1E:54:C4:D1:81:27:60:44:35:A9:0F:24:DB:51
Certificate issuer:       /CN=0bb1d0f2c3d21e54c4d18127604435a90f24db51
Certificate serial:       01974C321628179862949FA32F072CB03ED7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
Manifest number:          0837
Signing time:             Sat 07 Jun 2025 21:00:40 +0000
Manifest this update:     Sat 07 Jun 2025 21:00:40 +0000
Manifest next update:     Sun 08 Jun 2025 21:00:40 +0000
Files and hashes:         1: 4ylciqY8jqFbgkvhNmhn6kXHXWI.roa (hash: uJRTz2tCC/hqbqxjSnS7M5EUtmYb5oX46HnfGtIazR8=)
                          2: C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl (hash: bPt97tW/15HyKKsL1AFw7PUFzsnfmDf1uo2dA7+4I8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:32:16:28:17:98:62:94:9f:a3:2f:07:2c:b0:3e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bb1d0f2c3d21e54c4d18127604435a90f24db51
        Validity
            Not Before: Jun  7 21:00:40 2025 GMT
            Not After : Jun  8 21:00:40 2025 GMT
        Subject: CN=7b73781ab840820a5cd3c8a1d1852af514d1182e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1d:f4:06:49:c8:97:cd:fd:37:54:b5:a6:ad:
                    a3:01:6f:3a:3c:02:03:20:98:2b:99:36:93:84:78:
                    25:a2:f6:d8:39:37:a6:30:b2:c7:a7:be:8e:ad:2d:
                    3b:80:c8:87:2d:81:87:4a:39:88:3f:32:82:87:3f:
                    6a:9a:cf:f5:dd:cb:80:9d:d1:c8:2f:8f:67:52:d2:
                    95:1f:26:97:eb:9d:21:44:a0:be:a1:4e:7d:0e:d2:
                    16:d6:35:0d:24:19:b4:ca:55:83:52:d9:e8:02:3e:
                    ed:25:6f:c8:dd:3e:db:4d:b8:05:52:85:f3:5e:ad:
                    68:ea:87:3d:d6:53:8d:4b:21:46:8d:b7:fe:e9:2b:
                    41:38:4f:d1:78:15:9c:ac:5f:fc:61:f8:6b:de:c8:
                    b8:d9:37:8e:4a:d6:0f:84:75:8d:85:3c:c7:7f:b2:
                    e7:c8:0b:25:c4:9c:1e:ae:f3:c8:12:3a:c7:75:05:
                    16:90:76:a8:6a:82:41:5b:75:45:a5:ef:f6:8c:aa:
                    b8:5b:ed:21:ca:ca:f1:bb:f8:12:5c:ed:f9:69:ac:
                    e4:46:00:c8:91:6c:3b:ad:dd:a8:fe:7a:f0:57:02:
                    d5:94:4e:3a:8b:54:e3:a0:12:0c:6f:fd:74:2e:9e:
                    a2:82:a3:74:0e:e1:7d:d6:2a:95:4e:6e:a6:51:4f:
                    1b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:73:78:1A:B8:40:82:0A:5C:D3:C8:A1:D1:85:2A:F5:14:D1:18:2E
            X509v3 Authority Key Identifier:
                keyid:0B:B1:D0:F2:C3:D2:1E:54:C4:D1:81:27:60:44:35:A9:0F:24:DB:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:97:8f:e7:99:57:2c:71:5c:cc:9d:ea:f8:71:d1:b3:0c:23:
         b9:cb:c9:13:28:2c:c8:e5:35:7f:20:f2:0b:c6:59:c1:4b:cc:
         69:13:52:74:55:0b:6f:03:d6:4a:ad:2b:d8:a3:f9:8b:b6:89:
         b8:88:af:72:5e:40:51:92:39:9c:ec:9c:28:4e:1b:fc:c1:0d:
         dd:14:f2:94:1e:86:e9:5b:a8:7a:9b:3b:a8:ed:19:88:6a:e9:
         44:15:9b:5b:ce:05:82:97:9b:a8:61:6b:41:e5:c0:04:66:23:
         86:09:67:8e:40:64:37:3d:ed:58:63:54:fd:88:14:fd:09:38:
         8c:56:2b:6f:68:39:44:eb:60:77:e4:4f:bd:85:8d:16:ca:cd:
         8a:41:4d:a0:a9:2b:a3:75:e7:95:bb:04:b4:97:d6:4f:6f:60:
         9d:d8:cc:52:45:2c:88:b5:2b:6c:47:7f:8e:39:20:d3:11:a4:
         40:3f:b2:17:f1:8a:8f:2c:37:7c:46:0b:e5:5d:b5:78:3b:e4:
         4a:c8:1b:d9:d1:cb:db:b7:d4:fc:51:0c:11:58:69:c9:d0:39:
         13:86:67:58:3d:24:60:68:53:2f:12:b4:c9:be:6a:c1:3d:9f:
         df:e6:8c:51:82:e6:77:9c:c5:0e:8c:9e:3e:14:ae:c2:c2:c1:
         68:27:c3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:08:32 2025 by rpki-client