Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9795cc-3700-4aa0-a1ed-a6d94bf244b4/1/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.mft
File:                     7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.mft (raw, json)
Hash identifier:          hWzZco0F4ZMW9eOv+Of9Pfmk6324+Z8c79SQBbmlgjs=
Subject key identifier:   6F:E9:DF:83:6E:CB:EE:6B:E9:AD:F2:A0:96:BF:BE:60:89:19:C8:96
Authority key identifier: EF:0F:D1:3A:DC:B9:C5:5E:D9:CE:EF:D0:D0:F6:F9:B4:16:95:72:3F
Certificate issuer:       /CN=ef0fd13adcb9c55ed9ceefd0d0f6f9b41695723f
Certificate serial:       019A4F2B4528074C101F7A3C631CD2DAFAAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/9795cc-3700-4aa0-a1ed-a6d94bf244b4/1/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.mft
Manifest number:          03ED
Signing time:             Tue 04 Nov 2025 14:00:27 +0000
Manifest this update:     Tue 04 Nov 2025 14:00:27 +0000
Manifest next update:     Wed 05 Nov 2025 14:00:27 +0000
Files and hashes:         1: 7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.crl (hash: XRia+n6yFKsK29++1J07hnRO8NEqe3y+DUy48wBhqhY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/9795cc-3700-4aa0-a1ed-a6d94bf244b4/1/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/9795cc-3700-4aa0-a1ed-a6d94bf244b4/1/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:2b:45:28:07:4c:10:1f:7a:3c:63:1c:d2:da:fa:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef0fd13adcb9c55ed9ceefd0d0f6f9b41695723f
        Validity
            Not Before: Nov  4 14:00:27 2025 GMT
            Not After : Nov  5 14:00:27 2025 GMT
        Subject: CN=6fe9df836ecbee6be9adf2a096bfbe608919c896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:92:1c:64:51:b4:30:28:66:ec:d7:e0:f6:90:
                    56:c2:32:11:46:23:35:b0:be:2a:c7:34:0f:fc:6c:
                    14:82:b3:35:a2:5a:34:02:5b:dc:38:42:ae:36:21:
                    2a:b3:ce:50:9d:a6:de:39:16:bd:57:52:94:b0:5a:
                    d2:a1:95:ae:7c:5b:a5:ef:35:99:85:56:80:da:90:
                    9f:85:c6:e0:2d:f9:94:e5:1a:43:f0:26:39:59:5c:
                    b6:3e:9a:fe:d1:a0:73:e0:61:2c:d3:4b:b1:79:7a:
                    8e:76:6d:39:09:1a:02:3c:0d:af:f6:c9:5a:b7:51:
                    54:91:73:50:1a:1b:45:0d:0b:53:d7:d1:67:75:71:
                    d6:df:f4:61:e2:5f:c3:b0:17:cd:23:0e:cc:fb:22:
                    3f:01:de:36:ef:84:bd:17:72:8b:c7:18:3c:8e:c8:
                    5f:3c:35:f5:87:49:47:52:0e:54:21:67:fd:b3:c0:
                    df:bc:50:54:ed:09:bd:2e:2f:ce:71:c8:8c:f6:23:
                    0b:bd:22:4c:4c:1d:ca:8a:11:d8:e3:d5:11:f5:14:
                    05:ef:b4:3d:ba:d8:a4:e0:9e:66:db:d7:87:c2:fb:
                    45:57:1a:8d:01:65:1e:5f:01:79:b8:49:12:86:96:
                    50:fe:5a:8f:95:53:d8:7e:af:fb:0f:9b:0c:f1:f3:
                    fd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E9:DF:83:6E:CB:EE:6B:E9:AD:F2:A0:96:BF:BE:60:89:19:C8:96
            X509v3 Authority Key Identifier:
                keyid:EF:0F:D1:3A:DC:B9:C5:5E:D9:CE:EF:D0:D0:F6:F9:B4:16:95:72:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9795cc-3700-4aa0-a1ed-a6d94bf244b4/1/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9795cc-3700-4aa0-a1ed-a6d94bf244b4/1/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:1c:80:9a:a2:98:6d:e8:96:80:07:0e:9d:a0:83:cf:14:30:
         73:da:af:eb:a8:00:2d:56:1a:87:a9:08:d5:70:a2:a6:1c:aa:
         8d:32:c5:8c:69:58:04:4b:93:a5:0a:97:c1:8d:73:37:57:b8:
         36:b0:c5:c3:ca:a8:b7:f8:6f:80:65:52:93:f8:01:6a:a9:c5:
         51:c5:e9:35:87:16:56:9c:87:19:2a:8c:ff:ba:61:3d:91:ff:
         c1:e8:3f:98:c4:96:89:fb:3e:a6:0b:ef:0e:ca:37:d2:c5:7b:
         19:0e:82:a0:fa:af:4b:ca:d4:9e:6b:46:54:1a:d5:ee:83:97:
         aa:23:46:7d:91:2a:74:58:51:54:9f:a2:9c:4b:67:fd:8c:83:
         10:a1:c7:ac:9e:83:7e:ee:07:6d:fa:26:eb:30:ee:b4:76:a3:
         b0:01:0b:03:f0:89:5b:67:84:1d:08:cb:48:07:76:b2:1e:11:
         cc:b6:b3:f3:61:2a:47:9e:98:49:d4:3a:0b:48:82:62:0b:9e:
         73:cc:ad:96:87:da:58:18:fc:f8:ec:1f:19:55:f9:ca:67:ab:
         0e:79:5c:7b:5d:70:d5:a1:ae:58:19:b0:64:d2:0e:70:a2:d8:
         ce:f6:39:a0:62:96:7e:74:59:13:0c:ce:a3:61:d7:bd:40:11:
         3f:02:3f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:25:17 2025 by rpki-client