Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
File:                     7cJgAozSqx0OQ3dPRATezSeu88w.mft (raw, json)
Hash identifier:          BnOsRxO09+c3Dw02fMHfmc9uqGkykt+b8s+Nfup+AjU=
Subject key identifier:   1D:6F:65:38:4A:2D:27:CE:4A:8F:EB:76:AC:7D:13:C0:33:C3:05:68
Authority key identifier: ED:C2:60:02:8C:D2:AB:1D:0E:43:77:4F:44:04:DE:CD:27:AE:F3:CC
Certificate issuer:       /CN=edc260028cd2ab1d0e43774f4404decd27aef3cc
Certificate serial:       01991687EC46D22694F178AD9D3B0786239E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
Manifest number:          123B
Signing time:             Thu 04 Sep 2025 21:00:30 +0000
Manifest this update:     Thu 04 Sep 2025 21:00:30 +0000
Manifest next update:     Fri 05 Sep 2025 21:00:30 +0000
Files and hashes:         1: 7cJgAozSqx0OQ3dPRATezSeu88w.crl (hash: 7GS/goXBQpRIF8rsP+CSCGRfQMUOHqNSwgNmV7n2mc8=)
                          2: yR3tS_ANDk4tqqBt9oy3aE3IVVA.roa (hash: CBFaXVlyf8O1AiwoLakDijfjU7v7khHrl6opiRBTnoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:16:87:ec:46:d2:26:94:f1:78:ad:9d:3b:07:86:23:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edc260028cd2ab1d0e43774f4404decd27aef3cc
        Validity
            Not Before: Sep  4 21:00:30 2025 GMT
            Not After : Sep  5 21:00:30 2025 GMT
        Subject: CN=1d6f65384a2d27ce4a8feb76ac7d13c033c30568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4b:5d:0b:03:b6:2d:9a:e6:b4:05:da:08:33:
                    f2:e5:ec:8b:7d:ef:a8:15:d8:4d:3c:9c:7c:d4:84:
                    63:ca:b4:22:cd:67:40:93:49:84:53:99:fb:f0:22:
                    7b:99:bf:57:64:72:46:48:21:d8:0a:2d:e9:4e:b2:
                    f1:e6:cc:e6:65:7b:6c:b3:a3:d0:22:a4:01:1b:35:
                    99:e2:60:05:34:9a:0a:58:b6:b4:d8:5a:f9:9b:12:
                    e0:f9:1c:30:6c:b7:d7:b7:d8:75:80:a4:86:d8:aa:
                    13:22:f1:7b:1f:af:d8:11:93:78:82:49:38:0a:e7:
                    13:65:bd:05:bf:dc:57:d5:5d:b7:d1:a9:57:4c:97:
                    8b:89:c2:20:bf:da:37:ef:14:d8:fc:b3:58:ca:d4:
                    9b:0f:2b:64:2e:77:3f:cb:10:15:d9:25:d7:b8:5e:
                    35:7b:4b:91:61:ba:ea:c5:f6:35:08:b1:7f:4c:f4:
                    c4:76:2f:20:7e:9f:59:e4:bd:18:43:78:fd:5f:17:
                    b0:71:11:32:04:33:c8:0e:cf:30:eb:59:0b:27:ac:
                    05:3e:a1:4b:45:27:bd:71:83:9d:b2:67:e3:be:cb:
                    7f:87:46:2f:f6:a4:2d:03:51:5a:04:29:ac:f7:a7:
                    47:a2:04:b6:da:33:3f:06:fd:18:58:13:63:fc:d6:
                    fe:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:6F:65:38:4A:2D:27:CE:4A:8F:EB:76:AC:7D:13:C0:33:C3:05:68
            X509v3 Authority Key Identifier:
                keyid:ED:C2:60:02:8C:D2:AB:1D:0E:43:77:4F:44:04:DE:CD:27:AE:F3:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:14:c0:eb:ae:9a:98:32:e7:38:a8:0d:ae:c7:67:89:80:48:
         5b:fb:b4:2f:03:1f:55:3d:2e:a3:4e:fc:18:b9:a4:47:d5:00:
         2a:8e:4a:77:00:0a:4f:53:63:9e:a0:d3:c7:b0:1e:53:87:4a:
         aa:d9:4f:d4:36:cd:87:87:72:6d:fb:29:d4:bb:cc:4f:4b:a6:
         8f:ab:db:27:de:c0:b5:17:2f:e5:95:f7:50:cc:33:10:89:e6:
         99:d5:39:68:e3:ac:90:53:19:9c:95:5a:49:8b:9d:83:0c:b8:
         dd:7f:c4:88:80:16:f6:18:4a:83:a3:56:d6:6b:58:7c:44:05:
         be:ea:83:72:f4:d4:91:cf:9d:c1:04:91:3c:cc:55:5d:46:1c:
         da:df:0e:e3:a3:bd:7d:47:3f:4d:95:dd:10:ad:ab:13:75:0a:
         4d:00:b4:96:ea:08:c6:26:68:47:09:3d:3a:df:e6:44:c8:d0:
         4b:fc:7e:bf:aa:ce:e4:8f:8b:2b:d5:1e:3f:01:13:4e:b8:5b:
         75:f3:52:86:43:ae:63:b1:4e:38:b6:9a:9d:16:ce:c8:f8:54:
         44:e8:49:a0:6f:71:27:d8:76:45:32:9f:44:6e:63:60:88:53:
         73:57:bd:c5:c1:bf:b4:1c:09:50:31:49:d7:59:54:1f:44:ec:
         ad:48:25:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:08:11 2025 by rpki-client