Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
File:                     7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft (raw, json)
Hash identifier:          fhIATT1k3m0BTG35h+hbUvVZawa9jALbHIgYiqRv7sA=
Subject key identifier:   AF:DB:74:81:8C:BC:46:03:33:73:24:A7:E7:5B:9D:19:D2:98:86:09
Authority key identifier: ED:9A:3E:C7:CB:3B:19:0E:72:13:09:9D:E1:67:1B:EA:2D:32:8A:95
Certificate issuer:       /CN=ed9a3ec7cb3b190e7213099de1671bea2d328a95
Certificate serial:       019882B12396764920B3575ECA922028E9E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
Manifest number:          04F5
Signing time:             Thu 07 Aug 2025 04:01:43 +0000
Manifest this update:     Thu 07 Aug 2025 04:01:43 +0000
Manifest next update:     Fri 08 Aug 2025 04:01:43 +0000
Files and hashes:         1: 7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl (hash: Mca1aIOovxsugMYBtPcHVe/GD+CV0x+NezH4yGauQls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 23:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:b1:23:96:76:49:20:b3:57:5e:ca:92:20:28:e9:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed9a3ec7cb3b190e7213099de1671bea2d328a95
        Validity
            Not Before: Aug  7 04:01:43 2025 GMT
            Not After : Aug  8 04:01:43 2025 GMT
        Subject: CN=afdb74818cbc4603337324a7e75b9d19d2988609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f6:b6:55:a7:64:85:d8:e7:b5:39:75:94:72:
                    2f:07:a0:cc:45:cf:54:10:a1:66:1b:a6:62:71:ee:
                    20:0e:d9:a6:b0:00:c9:76:86:e5:a2:42:d9:c0:a7:
                    c1:29:f0:b4:ec:d1:ba:a4:7e:de:42:1c:9c:2e:47:
                    38:49:04:99:1d:40:f0:94:4c:24:da:6d:89:b4:93:
                    7f:f5:cc:01:bb:f2:bc:13:7f:9d:cb:ae:bd:50:54:
                    99:3b:93:10:e0:1e:98:8c:79:e5:b9:7d:5c:d9:4c:
                    2c:e4:13:76:44:f4:c3:5d:01:dc:12:1e:66:16:9a:
                    83:c9:3e:40:a5:36:38:49:69:2a:58:92:c6:7e:a8:
                    57:a7:8f:80:8a:ab:78:06:ea:90:ba:7e:fb:79:64:
                    1c:18:ce:09:fc:f1:f0:c6:18:21:68:29:78:f4:20:
                    65:c9:8d:e4:23:ca:61:72:f9:bf:c0:87:a0:06:b6:
                    95:f6:a9:64:2f:5c:2e:1b:56:85:10:45:b2:a0:93:
                    e8:bb:31:44:99:b9:7f:ef:a4:2f:08:01:3a:99:8f:
                    d1:8d:5c:21:75:7d:67:da:4c:ad:79:ac:77:77:b5:
                    c1:03:fd:cb:06:fa:34:05:32:17:f4:cc:75:e8:90:
                    6c:43:ba:ba:f5:87:c6:ad:c5:12:9a:a2:14:4d:8f:
                    ab:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:DB:74:81:8C:BC:46:03:33:73:24:A7:E7:5B:9D:19:D2:98:86:09
            X509v3 Authority Key Identifier:
                keyid:ED:9A:3E:C7:CB:3B:19:0E:72:13:09:9D:E1:67:1B:EA:2D:32:8A:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:5b:82:9c:95:70:22:59:02:da:e2:b2:87:61:b7:5c:41:22:
         a0:0b:15:5c:8f:96:e0:75:2a:4b:cf:12:6d:1c:c5:fd:a2:6b:
         b6:96:ef:e3:50:06:db:fb:83:a3:42:26:76:f4:c9:d5:c3:a1:
         5b:ee:84:bc:ba:b9:22:5a:70:1b:ed:0b:45:2b:ac:75:e7:ad:
         6d:46:5e:d8:f8:a6:75:9b:ac:c5:73:55:6b:15:6b:f8:28:8b:
         83:3e:a0:eb:29:7d:bd:55:d4:cb:63:74:90:98:f1:1d:42:6a:
         21:3a:cc:2e:65:24:ee:8b:b2:b7:98:ac:a7:74:fd:92:b2:2a:
         b2:e9:41:6e:c9:dd:e6:af:82:7a:57:f8:df:04:d4:fa:73:d7:
         1c:d7:87:a7:42:06:4b:8c:f9:93:f5:0f:01:b9:53:f5:b8:b4:
         80:60:6b:c2:79:34:46:c3:13:a7:c2:02:63:1a:51:d4:e1:8c:
         ca:0a:e6:56:f8:2c:8c:ba:1b:75:7f:bf:95:1d:f8:81:22:e8:
         80:00:18:da:60:b7:ad:6a:10:c9:3a:69:81:b3:4c:e4:c4:40:
         36:94:76:42:e4:85:c6:e6:e0:c0:60:37:2d:65:6f:fe:71:15:
         64:2d:e2:57:6a:77:fe:9a:ab:28:83:99:3d:48:5c:12:82:c9:
         f8:11:ae:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:17:30 2025 by rpki-client