Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft
File:                     Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft (raw, json)
Hash identifier:          NLhiG6KcXVLiJ7DP59dvuJaPVRgxflF5ntwiI3QHq9k=
Subject key identifier:   36:F4:E3:DD:07:D7:C2:3A:AA:AE:C9:DC:1A:A1:D2:56:2A:4E:78:03
Authority key identifier: 3D:EA:ED:ED:A1:05:D7:E9:12:9A:9B:0C:E5:6B:9B:FC:B9:C6:73:94
Certificate issuer:       /CN=3deaededa105d7e9129a9b0ce56b9bfcb9c67394
Certificate serial:       019923313B56C9B639847A449F02A549D42F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft
Manifest number:          0F1A
Signing time:             Sun 07 Sep 2025 08:00:52 +0000
Manifest this update:     Sun 07 Sep 2025 08:00:52 +0000
Manifest next update:     Mon 08 Sep 2025 08:00:52 +0000
Files and hashes:         1: FcNY2ovl7yF-URMS0Ey2NMjx_wo.roa (hash: u+b9OZLTWgc4ylA+6a19u9K+8czzP5mhCM7NuK4dmF4=)
                          2: Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl (hash: 1fDsg20qlV1PWcfhYi982830bSzRMy8jeAAj7Mzjtos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:31:3b:56:c9:b6:39:84:7a:44:9f:02:a5:49:d4:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3deaededa105d7e9129a9b0ce56b9bfcb9c67394
        Validity
            Not Before: Sep  7 08:00:52 2025 GMT
            Not After : Sep  8 08:00:52 2025 GMT
        Subject: CN=36f4e3dd07d7c23aaaaec9dc1aa1d2562a4e7803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d5:d9:93:76:62:b4:ea:ec:e4:ef:d4:9b:32:
                    dc:1c:13:92:23:d9:8f:95:0b:95:24:d8:58:30:9e:
                    67:1c:bc:d6:70:9f:1d:39:a6:39:4a:b5:a5:d7:6c:
                    d6:b0:c8:38:fe:be:4b:98:b9:34:38:cb:39:f0:12:
                    67:f0:41:ad:4a:f0:02:64:5c:28:90:a8:a5:d1:8f:
                    c2:45:9a:e9:7d:6b:9c:7f:1f:4e:d8:db:d4:b3:5f:
                    82:6b:a7:40:21:d2:8e:6f:e0:dd:d3:5c:e1:46:31:
                    e3:b0:b8:c6:8c:3b:e2:d0:45:9d:8a:87:63:fc:3a:
                    f0:2d:e5:8f:b3:2b:b7:b1:96:fc:c9:ba:51:3a:ec:
                    78:a5:e8:19:83:41:f6:7e:ad:c0:e8:1a:6f:0d:2d:
                    05:79:1a:3e:c6:8f:5e:f6:87:d1:34:d8:01:f9:36:
                    ae:23:bd:dd:94:3e:d4:e8:e4:d1:2b:28:56:f2:8f:
                    e9:07:70:85:f3:83:67:1d:1b:6d:fc:a7:44:32:4b:
                    f9:01:4d:96:53:70:0c:92:4e:a1:53:f1:3e:4f:76:
                    6e:98:94:ad:6f:c4:cc:91:dc:d2:49:c4:4f:aa:aa:
                    b8:81:e7:e8:6e:4f:69:f3:04:48:e9:d5:15:48:37:
                    12:d9:9c:f6:de:c7:da:0b:48:5e:b2:0d:54:a8:5a:
                    dc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F4:E3:DD:07:D7:C2:3A:AA:AE:C9:DC:1A:A1:D2:56:2A:4E:78:03
            X509v3 Authority Key Identifier:
                keyid:3D:EA:ED:ED:A1:05:D7:E9:12:9A:9B:0C:E5:6B:9B:FC:B9:C6:73:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:cf:57:34:e4:17:7b:08:10:0e:ed:7d:00:d6:aa:63:bf:71:
         4f:80:ad:7a:ea:53:14:27:c7:8f:e5:bf:19:f9:db:e7:b0:18:
         c7:de:e2:a1:5c:c9:1f:d1:92:22:26:69:ce:4b:a3:c2:ac:21:
         f8:8a:86:9e:53:fc:3a:16:01:7b:8b:16:78:c9:61:46:f7:24:
         63:35:39:a9:42:04:08:ea:81:52:fa:a8:19:ce:19:0f:3c:09:
         03:88:13:57:9a:98:a5:a0:b9:df:34:76:e4:c9:80:e6:cf:b7:
         22:1f:eb:07:20:6a:10:51:7a:e8:dc:e6:52:af:d4:65:41:cd:
         23:34:a3:15:80:c7:b9:3f:9f:4b:a8:6d:73:82:63:44:6d:e6:
         a0:74:24:df:dd:04:15:5b:7d:cb:29:eb:34:ed:5a:cd:a3:0c:
         81:2b:5c:2e:25:79:82:af:19:22:59:fb:cb:58:dc:ee:5d:65:
         8c:e4:f8:1f:3d:63:d6:30:d7:4e:bd:e6:17:03:0f:77:54:15:
         0d:fc:73:15:4b:65:10:b8:79:66:00:de:37:9a:77:4a:69:71:
         86:d0:0d:93:f8:d2:f7:88:94:e6:4c:f6:6b:06:b3:f8:37:19:
         a9:f4:2c:e4:2f:ee:1c:22:96:5a:fa:79:97:7f:38:8b:94:25:
         e1:43:85:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:47 2025 by rpki-client