Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
File:                     7UZMdsAZSPh-BOL8X1FnArOQdFY.mft (raw, json)
Hash identifier:          eRdQxabCyMGtHYXUbs9vz1qxe2xIiS4ZhJeBOpiG4r0=
Subject key identifier:   EA:7F:D3:24:26:69:B0:FB:EC:D6:8F:CB:97:D7:A8:BE:2B:00:39:31
Authority key identifier: ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56
Certificate issuer:       /CN=ed464c76c01948f87e04e2fc5f516702b3907456
Certificate serial:       01974A0CF15AE2D4399C67987279C0ACE53C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
Manifest number:          82
Signing time:             Sat 07 Jun 2025 11:00:51 +0000
Manifest this update:     Sat 07 Jun 2025 11:00:51 +0000
Manifest next update:     Sun 08 Jun 2025 11:00:51 +0000
Files and hashes:         1: 7UZMdsAZSPh-BOL8X1FnArOQdFY.crl (hash: dhl7oA+3C6YwAYnzlnWdfGXXsKXv5o+ozvm8nqJCltE=)
                          2: Qd4xLNuf8FHve_ofdQYaBbYBiP0.roa (hash: 3fGg/QzwtWBuRFf4qS9VlLnxS+SRPgYbqGTG0ZfBI7w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:0c:f1:5a:e2:d4:39:9c:67:98:72:79:c0:ac:e5:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed464c76c01948f87e04e2fc5f516702b3907456
        Validity
            Not Before: Jun  7 11:00:51 2025 GMT
            Not After : Jun  8 11:00:51 2025 GMT
        Subject: CN=ea7fd3242669b0fbecd68fcb97d7a8be2b003931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5d:ea:f8:60:1d:22:89:8c:15:34:50:22:80:
                    f0:36:e7:14:d6:5b:42:a1:15:06:23:57:e0:5f:ed:
                    d6:9c:6f:a3:50:2d:97:36:49:78:ed:e8:29:3e:83:
                    66:83:56:02:31:1d:c6:f5:52:0d:d7:df:d1:e3:cd:
                    c6:f5:8f:a1:13:cd:45:be:37:19:20:a3:0f:6b:42:
                    bf:b4:a6:40:18:61:f8:9b:59:bf:81:a0:de:93:bf:
                    6b:3d:17:db:37:88:e3:42:31:11:f1:3f:9a:55:97:
                    73:54:c3:84:66:c8:c7:71:81:8d:01:6b:b2:f5:c6:
                    e6:6e:3d:5e:37:36:ec:88:4b:b7:a1:56:0a:b6:c3:
                    3b:4d:81:0b:14:5e:9b:29:44:c3:d8:dc:80:d3:01:
                    07:a8:31:3c:b7:b3:ac:c1:27:62:8d:81:66:95:f4:
                    43:f7:d8:a7:a1:34:df:09:69:91:e9:04:ed:55:00:
                    58:33:ee:52:4d:da:40:bc:91:1d:c6:fc:a2:93:f6:
                    13:cc:99:48:be:33:3d:63:c2:2a:45:01:78:22:52:
                    8a:2e:fa:67:31:6a:81:3d:16:85:d0:26:79:be:ef:
                    1c:19:e5:fe:57:2b:56:1c:42:ed:49:89:3f:5d:84:
                    64:cc:f3:b0:e6:d5:b7:0f:ef:05:ee:e3:ee:f3:30:
                    dd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7F:D3:24:26:69:B0:FB:EC:D6:8F:CB:97:D7:A8:BE:2B:00:39:31
            X509v3 Authority Key Identifier:
                keyid:ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:1b:54:2a:51:6f:d0:0a:dd:fd:fd:66:21:d1:38:75:2c:4b:
         40:fa:ea:b4:7d:94:99:3d:dc:8e:a5:1e:66:66:3a:df:b9:86:
         b7:87:ae:82:45:d7:0a:12:95:9e:d0:ab:ee:6a:51:53:d5:c2:
         99:25:50:b4:c8:05:a5:85:e9:17:5a:82:07:57:65:3b:b2:00:
         db:4b:a2:e7:c6:7b:0f:9b:34:ab:72:8b:ef:81:23:d3:6d:84:
         76:d5:52:64:98:32:c5:d4:31:db:13:c1:78:9a:4d:fa:66:c5:
         ce:0f:e1:76:69:d9:f3:13:37:45:ad:37:f6:05:44:3d:22:2d:
         14:af:14:5f:3f:27:50:61:89:89:c5:f7:91:81:91:24:cc:fa:
         50:39:75:ed:79:d6:dc:98:1e:bb:58:29:d9:c2:fb:f6:93:4c:
         aa:93:68:76:d0:4d:ce:12:ae:18:bc:80:7d:97:b8:09:ee:0d:
         56:d0:ef:1a:25:cb:86:df:68:74:c6:49:41:6d:51:a0:8c:5a:
         1e:24:70:13:7c:34:f3:2a:11:c6:ea:47:d6:b5:4f:a2:fa:67:
         ad:66:cf:56:da:e1:fd:7a:ca:fd:34:6f:1f:cd:b4:e8:8d:fd:
         c6:de:b3:f6:3e:f0:4e:9b:03:17:a3:78:c3:a1:70:1a:8d:dc:
         6c:bc:ea:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:36:27 2025 by rpki-client