Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
File:                     z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft (raw, json)
Hash identifier:          e5de4cZjp8stJmaBkoYTqGQteOO3EcKIvkhHuFX/BrU=
Subject key identifier:   22:E7:FE:9D:D0:B9:2F:21:54:E3:92:8F:88:FD:3F:F9:FB:29:EE:7B
Authority key identifier: CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0
Certificate issuer:       /CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0
Certificate serial:       0198A04E2401DB5D0D46DA1B8FE97D0F3212
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
Manifest number:          1103
Signing time:             Tue 12 Aug 2025 22:02:12 +0000
Manifest this update:     Tue 12 Aug 2025 22:02:12 +0000
Manifest next update:     Wed 13 Aug 2025 22:02:12 +0000
Files and hashes:         1: cTuB-ABZUf0AWR__0VF3CDRNo30.roa (hash: YL1vZUc95MXZVuCPTTh8OWx5ow2ebJPHUlFFR9eeynk=)
                          2: z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl (hash: M+bZsbIbizYRDk+CIi/Bk1399pmrDs3vyFCZ3D5QdzQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:4e:24:01:db:5d:0d:46:da:1b:8f:e9:7d:0f:32:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0
        Validity
            Not Before: Aug 12 22:02:12 2025 GMT
            Not After : Aug 13 22:02:12 2025 GMT
        Subject: CN=22e7fe9dd0b92f2154e3928f88fd3ff9fb29ee7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b6:bd:5b:c8:38:bf:b6:cd:d2:d7:c6:a1:0d:
                    0e:53:14:82:86:89:87:3f:c4:46:5d:68:24:30:62:
                    00:cf:4b:38:6f:ac:c8:f5:95:eb:f6:0c:7c:48:71:
                    c0:73:54:24:12:ea:eb:f5:6d:ca:fc:fa:80:e9:d0:
                    a2:af:8a:ee:c0:1b:99:67:87:0d:0a:dc:6a:08:b3:
                    20:62:77:e0:20:7a:26:5c:92:79:b5:d7:2e:c6:41:
                    7e:93:8a:74:b6:38:57:c4:59:bd:84:40:76:2c:a5:
                    11:f6:f7:d5:98:4f:c7:15:ac:02:dd:1a:2b:47:50:
                    04:9b:d4:2c:d0:7c:7f:66:8c:2d:20:04:2a:d6:ae:
                    0e:07:6a:2b:da:dd:04:99:10:9f:9d:7e:69:0a:ae:
                    57:5f:98:b3:27:cd:96:a5:ae:e3:58:5a:45:71:f0:
                    e7:df:9b:63:a7:96:d8:f6:6f:2f:ae:b3:a7:2a:96:
                    cf:ad:fb:c8:5b:5d:00:a8:29:39:91:5a:e7:5b:f5:
                    df:69:0c:35:8c:24:36:23:ef:e6:2f:81:7f:31:0f:
                    58:19:ea:12:ad:24:13:85:6c:0c:07:76:87:6f:d6:
                    fd:61:8e:0d:b5:36:7d:17:bb:ab:cc:4e:41:c5:bc:
                    55:2a:fb:dc:e0:ed:4c:08:ce:38:0c:55:83:8e:1e:
                    d1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E7:FE:9D:D0:B9:2F:21:54:E3:92:8F:88:FD:3F:F9:FB:29:EE:7B
            X509v3 Authority Key Identifier:
                keyid:CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:97:a3:55:76:81:f6:9d:cf:59:db:8c:dc:f9:01:e6:1b:0a:
         1a:a0:36:0a:5d:74:83:a3:9d:85:6a:f8:39:62:83:72:f9:75:
         84:e1:89:da:d0:35:72:13:61:71:ce:26:13:84:38:39:ec:8e:
         3b:e3:2e:41:e9:57:0c:e0:e6:0e:11:ca:5c:f0:b8:4e:cb:57:
         1c:36:61:e0:e3:f2:8e:21:4b:b9:37:19:f3:6c:48:b5:06:f7:
         5a:8d:4c:c0:10:a7:bd:e7:3c:6a:81:73:88:90:bf:50:48:f9:
         64:21:27:01:f6:ed:8a:78:af:26:0c:37:ed:e1:85:5e:a4:d3:
         75:85:15:79:8e:8d:15:40:9a:36:2b:dc:99:76:36:c1:cd:ae:
         2d:44:49:50:85:26:49:7f:b1:1d:98:63:90:5d:33:6d:e1:d9:
         b9:cf:b4:02:15:ba:47:ca:09:20:48:62:e4:5a:30:1c:8f:18:
         37:96:16:2b:d9:f8:39:b1:01:a5:79:5f:c1:9e:ce:fb:d7:50:
         65:3c:34:6c:7f:fd:da:2a:a6:d3:99:37:d6:14:d1:a1:58:39:
         fc:38:bd:90:b1:4a:12:94:44:be:e9:51:ea:e6:14:16:2b:7b:
         7a:7e:1b:ad:30:e0:73:b9:1d:8b:48:45:c0:f5:d0:e5:d6:7a:
         49:97:a6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:29 2025 by rpki-client