Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
File:                     7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft (raw, json)
Hash identifier:          6QzritfoWwZZL4qurvu/e1lYdk6lvKRzMEEEppCkXmg=
Subject key identifier:   F7:5D:83:23:78:EC:CF:96:24:7D:ED:57:4F:2C:43:33:1D:33:E8:2C
Authority key identifier: EE:EF:A9:C2:95:06:B4:FC:F1:72:92:11:A4:FA:77:C1:F2:11:46:8D
Certificate issuer:       /CN=eeefa9c29506b4fcf1729211a4fa77c1f211468d
Certificate serial:       01968390FE15D4239A27D5310E0C70445A21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
Manifest number:          0573
Signing time:             Tue 29 Apr 2025 22:00:39 +0000
Manifest this update:     Tue 29 Apr 2025 22:00:39 +0000
Manifest next update:     Wed 30 Apr 2025 22:00:39 +0000
Files and hashes:         1: 7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl (hash: jqqgPVPtkjOO61e1W7W47ju2w+X1qPtwpNfPr7bWRo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 22:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:83:90:fe:15:d4:23:9a:27:d5:31:0e:0c:70:44:5a:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeefa9c29506b4fcf1729211a4fa77c1f211468d
        Validity
            Not Before: Apr 29 22:00:39 2025 GMT
            Not After : Apr 30 22:00:39 2025 GMT
        Subject: CN=f75d832378eccf96247ded574f2c43331d33e82c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:83:99:c2:cf:ad:cb:ee:7d:fd:3a:b9:02:62:
                    37:27:cb:19:84:50:88:85:6f:a9:d6:cb:86:a4:15:
                    db:11:f9:b4:16:bf:52:21:85:bb:d7:60:e3:85:ef:
                    5a:75:46:06:2f:72:25:4f:2f:e5:bc:b5:a4:c8:08:
                    36:0f:5a:b4:37:a1:05:ff:25:1a:3f:96:c3:71:d7:
                    71:9d:1f:d8:ba:c5:a9:e4:bc:b0:fc:a6:be:a8:98:
                    71:4e:49:78:24:fa:41:29:c2:8a:74:dc:c0:45:67:
                    b2:15:31:ec:2f:39:a6:a4:3a:4e:c5:0d:cf:30:e9:
                    e4:c4:3b:da:d1:d5:13:bf:6a:4b:80:9a:31:21:25:
                    26:a1:1a:08:70:9d:8a:34:08:6c:63:06:d6:de:4d:
                    27:2c:45:fe:de:ec:32:34:7c:f6:d4:b0:ed:51:8f:
                    32:4e:2d:71:4e:d8:1d:f9:8e:6d:c5:72:34:b0:20:
                    1c:16:6d:46:68:29:8e:db:95:a4:bb:2a:a9:08:bb:
                    bd:4a:13:32:0d:d7:8c:06:13:b7:2a:fa:7a:92:29:
                    0e:7a:ff:1b:9d:5e:89:b7:a3:25:19:9c:b6:23:ae:
                    51:ed:b5:0f:c1:6e:92:ac:19:ba:2c:08:53:0a:16:
                    37:a9:8b:ed:bc:cb:7a:38:3c:4f:65:61:a1:df:13:
                    74:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5D:83:23:78:EC:CF:96:24:7D:ED:57:4F:2C:43:33:1D:33:E8:2C
            X509v3 Authority Key Identifier:
                keyid:EE:EF:A9:C2:95:06:B4:FC:F1:72:92:11:A4:FA:77:C1:F2:11:46:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:97:3f:f2:88:4c:c2:5c:27:8a:15:9d:d3:c0:79:35:51:5a:
         f1:48:62:3a:2b:a3:50:72:bd:b1:ae:90:02:59:72:fb:f5:fe:
         44:f9:c0:f3:a8:97:8f:64:fe:f1:95:aa:5f:78:13:ec:e3:45:
         a2:9b:ea:57:59:45:6a:ec:da:42:64:2c:55:4a:9e:7c:3c:6a:
         98:f0:da:27:24:b5:64:39:aa:60:61:85:8a:56:70:99:ec:13:
         f5:1b:ee:e4:6b:8b:83:24:7a:4e:df:fb:af:ce:67:38:9b:b4:
         01:bf:25:5f:6e:9d:23:75:fc:a6:ec:6c:47:dd:26:6d:a9:e1:
         36:3d:cd:5e:41:bc:eb:42:b9:4f:de:d6:08:b7:92:25:d4:78:
         0f:d7:f2:03:ca:aa:e2:13:6a:97:87:8c:d5:d8:44:5a:e4:c5:
         8e:6e:fc:18:0c:af:ab:1c:df:dc:d4:75:51:e9:fb:51:23:d5:
         23:09:fa:a4:62:9f:ce:c9:09:5b:de:b0:15:e6:d8:8f:b2:40:
         c3:5a:1d:72:61:04:14:7a:af:68:9c:8f:7b:81:c5:7e:3a:da:
         cb:b6:eb:d7:90:48:d3:01:a4:7c:d1:70:c0:ec:95:28:df:31:
         dc:b8:a1:ad:53:bd:0c:00:2e:bc:5d:ac:6b:1b:3d:2b:04:90:
         00:87:41:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:55:53 2025 by rpki-client