Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
File:                     p-7aZdzUOH1yJwBcHhOgbUSHe28.mft (raw, json)
Hash identifier:          xNfD5R0lXtQDEMzWMHAsFrslT9BVkGaEbAI6UVnY8xc=
Subject key identifier:   C1:75:10:2B:EB:31:A1:5D:E0:D6:DE:98:A7:10:30:6D:59:CE:7B:A2
Authority key identifier: A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F
Certificate issuer:       /CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
Certificate serial:       019A1EAC9ED71BDE913A7277B2B2AEC5D847
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
Manifest number:          1405
Signing time:             Sun 26 Oct 2025 04:00:20 +0000
Manifest this update:     Sun 26 Oct 2025 04:00:20 +0000
Manifest next update:     Mon 27 Oct 2025 04:00:20 +0000
Files and hashes:         1: N0eHqNrggmbXdN8YP7o5Fb0Yns0.roa (hash: qT9/mEc5C1UH5p/xUpYvOvJn3BjOEx+x0C4t/XVyfCg=)
                          2: p-7aZdzUOH1yJwBcHhOgbUSHe28.crl (hash: U53cJpDCzDS1qMLxT9svD2FHRj9EMRJ97HB/QSC781k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 03:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1e:ac:9e:d7:1b:de:91:3a:72:77:b2:b2:ae:c5:d8:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
        Validity
            Not Before: Oct 26 04:00:20 2025 GMT
            Not After : Oct 27 04:00:20 2025 GMT
        Subject: CN=c175102beb31a15de0d6de98a710306d59ce7ba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:96:24:28:42:42:3b:da:5f:ac:cc:97:32:dc:
                    bc:d4:a3:f5:0b:19:b3:d8:6e:65:a4:92:5e:9a:57:
                    86:53:07:bf:95:a0:c1:bc:c1:25:16:a5:3e:02:a2:
                    d2:9e:64:9d:69:1f:2e:84:d0:c7:cc:65:9b:fa:2b:
                    c6:fe:d6:df:d9:f1:56:ba:44:aa:fa:fc:fa:d8:24:
                    0b:54:58:8a:34:02:cb:8f:6e:cd:c2:95:c8:e3:96:
                    2c:fb:c5:58:af:5b:e8:e8:9a:2c:5a:71:ce:57:b9:
                    b4:91:30:b9:ac:48:e0:5a:d2:1a:8e:b9:9f:bc:d1:
                    2c:07:5c:28:c4:fa:9a:d6:8c:f9:3e:7a:15:c4:8a:
                    7a:cd:6f:e2:84:52:d3:37:2d:52:8f:42:dd:d0:70:
                    77:8d:a7:1a:54:d4:fa:62:e6:e3:25:de:8e:ee:6e:
                    d0:86:42:c9:2e:7a:73:bf:ca:45:26:a5:0d:e0:a3:
                    7c:d7:68:b9:26:61:32:26:26:10:f1:fa:21:9d:31:
                    81:26:db:de:17:9d:4f:c8:4d:32:1e:47:6b:a0:bd:
                    c7:23:56:2f:b5:5e:36:9d:a6:e4:82:20:58:92:e8:
                    cc:81:3e:ed:d5:19:0d:0c:1f:97:6c:44:67:19:91:
                    ec:30:dc:e2:11:8a:f1:8a:f4:57:46:33:8b:ea:22:
                    99:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:75:10:2B:EB:31:A1:5D:E0:D6:DE:98:A7:10:30:6D:59:CE:7B:A2
            X509v3 Authority Key Identifier:
                keyid:A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:36:13:43:15:b4:1f:d2:5a:12:8e:92:0a:13:0c:d9:65:8a:
         2c:11:fe:52:ad:fe:22:5a:a4:9e:4a:9a:8c:ac:24:e2:95:5a:
         03:d4:08:e7:ef:ac:4a:24:cc:58:45:c3:b2:8c:b9:ef:ea:ce:
         67:af:e3:b5:ad:76:e8:0f:f4:15:7e:d5:b0:66:53:86:9c:47:
         89:ba:67:37:46:a2:23:39:30:8e:0b:bf:4d:45:b8:e7:e5:b7:
         23:ab:e3:c2:34:16:b9:c2:1d:31:b5:cb:e6:b5:d0:73:98:af:
         09:87:e2:36:28:de:47:c7:3d:4e:0c:e0:52:a8:b8:a6:18:55:
         7c:9c:b6:58:c0:3d:82:7a:32:e1:f8:c6:18:51:38:40:f5:54:
         2c:62:b6:8d:7a:c5:c7:bf:c3:52:46:f0:c4:47:90:ec:a2:3b:
         17:e0:4f:42:82:97:0f:43:88:d9:e0:34:b0:f5:19:ca:af:fd:
         0e:e4:b5:6b:18:95:bc:19:ac:ec:4d:21:48:3b:80:72:35:67:
         42:c7:26:52:6e:fa:af:d1:7a:cc:13:ee:8a:a8:fc:62:bb:b1:
         7e:ff:a4:c2:ae:28:07:84:61:12:09:35:de:e9:c7:80:02:3a:
         17:2a:29:3d:99:60:49:b1:f8:f9:e6:9e:67:45:0d:10:ef:30:
         e2:9d:9f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:59:08 2025 by rpki-client