Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
File:                     l7v--RgT0Oj37t9o7VaefP3fDPA.mft (raw, json)
Hash identifier:          PgMLdTZIJmEfBu1W81EvtY3e+Ac1R9XrfoUBh0BGZ0Q=
Subject key identifier:   D5:F0:03:34:03:2A:5F:D8:5D:1C:6D:EA:D3:0A:82:99:D2:E8:50:A7
Authority key identifier: 97:BB:FE:F9:18:13:D0:E8:F7:EE:DF:68:ED:56:9E:7C:FD:DF:0C:F0
Certificate issuer:       /CN=97bbfef91813d0e8f7eedf68ed569e7cfddf0cf0
Certificate serial:       019922C32CD53845F844A5290743C4E4A008
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l7v--RgT0Oj37t9o7VaefP3fDPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
Manifest number:          1671
Signing time:             Sun 07 Sep 2025 06:00:40 +0000
Manifest this update:     Sun 07 Sep 2025 06:00:40 +0000
Manifest next update:     Mon 08 Sep 2025 06:00:40 +0000
Files and hashes:         1: 1-sigTPJAC1PNSATn-sK6lRfTKyQ.roa (hash: jOHa8XaZlnY37LiuZhg9CFenWtMsktZUfeaX7d5RSx0=)
                          2: l7v--RgT0Oj37t9o7VaefP3fDPA.crl (hash: WL0KV+orlG5mUeSIXWvXY/y1EDa1XkB+AUwXo9ydK1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l7v--RgT0Oj37t9o7VaefP3fDPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:2c:d5:38:45:f8:44:a5:29:07:43:c4:e4:a0:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97bbfef91813d0e8f7eedf68ed569e7cfddf0cf0
        Validity
            Not Before: Sep  7 06:00:40 2025 GMT
            Not After : Sep  8 06:00:40 2025 GMT
        Subject: CN=d5f00334032a5fd85d1c6dead30a8299d2e850a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3e:1b:63:18:2a:2d:ef:de:04:6a:52:a2:ce:
                    33:37:36:56:56:52:9f:0b:eb:31:d1:67:9b:50:98:
                    e3:d8:a5:e8:73:ac:00:75:04:ef:e1:f1:6b:16:d4:
                    84:e7:42:46:2d:28:56:a2:e0:53:cc:68:e9:e9:1a:
                    fe:3f:ff:d5:e1:7c:8f:da:8b:f8:6d:52:1b:4a:cd:
                    38:0b:00:f5:41:f9:ce:7b:e3:56:c7:4c:40:e3:86:
                    68:09:e3:83:71:48:19:d2:aa:fd:6f:61:e9:35:04:
                    e6:7f:43:e8:de:ac:35:ac:4a:54:c3:a2:d2:30:89:
                    ca:9c:26:e7:31:08:2e:e9:92:72:b7:29:48:73:67:
                    fd:95:58:b4:2d:b6:ec:c5:ea:09:04:a1:2d:79:47:
                    ba:37:50:9a:68:10:42:f1:fd:cd:6e:8d:76:a0:a0:
                    39:60:4a:da:b3:a5:54:2a:40:48:f1:17:3c:8c:de:
                    4d:79:ff:20:03:39:bf:5e:87:4e:0d:0e:21:d7:35:
                    26:a2:f6:12:e8:31:d1:f9:74:08:82:c2:b1:1b:88:
                    92:05:f7:70:cd:59:e1:e1:5a:04:3e:13:ef:13:71:
                    ca:73:52:31:18:a9:6f:c0:e2:c5:8e:6c:24:a2:ab:
                    e7:70:36:b1:10:ee:b7:c8:cb:b6:fd:c2:22:f1:83:
                    0f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F0:03:34:03:2A:5F:D8:5D:1C:6D:EA:D3:0A:82:99:D2:E8:50:A7
            X509v3 Authority Key Identifier:
                keyid:97:BB:FE:F9:18:13:D0:E8:F7:EE:DF:68:ED:56:9E:7C:FD:DF:0C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7v--RgT0Oj37t9o7VaefP3fDPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:36:9c:60:bc:c3:31:06:b8:d4:61:61:3c:94:3e:17:e7:2b:
         74:c8:46:f4:19:d5:f5:d4:11:75:15:66:ea:58:0f:3b:26:94:
         aa:40:6f:ea:f9:bc:1b:e0:3b:fa:94:bd:a2:f8:cc:d5:47:9c:
         7d:56:89:ea:41:c0:72:fe:20:dc:3f:4f:bc:a2:96:50:95:fa:
         0f:63:04:c1:2b:2c:cf:63:8e:b0:e6:41:d7:ba:05:fa:3d:98:
         df:89:bc:62:78:74:6c:4e:29:4c:c4:f0:81:3d:82:d0:77:84:
         72:07:74:f6:f3:b7:d2:73:6d:9f:4b:42:ab:62:cc:e3:34:ba:
         a5:c3:ad:3d:91:5d:81:6a:31:1b:87:87:d3:68:94:ef:2b:25:
         46:13:81:ef:de:21:2b:05:89:3d:5f:c9:c6:34:ad:37:e0:e4:
         c9:24:4e:2b:8c:58:15:40:b5:f3:1c:9b:fa:64:1a:3c:fc:bb:
         cb:12:f9:43:fb:d3:86:04:98:c9:bf:79:ee:97:e3:5b:5d:e6:
         4e:e3:eb:c4:3c:ea:05:dd:eb:99:ca:01:02:0f:10:38:8f:74:
         95:e7:91:08:84:7b:33:50:17:9b:d8:50:6e:80:7d:8b:cf:14:
         f6:26:d9:d0:91:c7:b0:4d:ef:fd:97:57:1b:5d:8b:f6:4c:a7:
         83:54:ce:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:14 2025 by rpki-client