Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
File:                     ewjhaHh0S4i4QgPu_i13qH2rkLE.mft (raw, json)
Hash identifier:          DtwSEZ1Ktz2y/UlUFlBu5QhU2H2fATESFOkNg2/TZxg=
Subject key identifier:   C1:1B:7C:E8:33:88:97:97:70:AA:81:82:3B:04:85:61:D4:76:86:8A
Authority key identifier: 7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1
Certificate issuer:       /CN=7b08e16878744b88b84203eefe2d77a87dab90b1
Certificate serial:       01987F0A741F737E5EC3B375F6B0737E8339
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
Manifest number:          0DD3
Signing time:             Wed 06 Aug 2025 11:00:48 +0000
Manifest this update:     Wed 06 Aug 2025 11:00:48 +0000
Manifest next update:     Thu 07 Aug 2025 11:00:48 +0000
Files and hashes:         1: SPkSmU2cuYPaslq98jH650uCm8U.roa (hash: 3l9S6s2Phg4ZgQxgg2kV0SAhmKBDDFr+VpsMCOZHDtE=)
                          2: ewjhaHh0S4i4QgPu_i13qH2rkLE.crl (hash: RDGcoHB8OKush6h7Y0lOXTczzDT3e8pK8Ar+MgG5OIw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 11:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:0a:74:1f:73:7e:5e:c3:b3:75:f6:b0:73:7e:83:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b08e16878744b88b84203eefe2d77a87dab90b1
        Validity
            Not Before: Aug  6 11:00:48 2025 GMT
            Not After : Aug  7 11:00:48 2025 GMT
        Subject: CN=c11b7ce83388979770aa81823b048561d476868a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fc:97:48:6a:ff:e5:35:dc:54:9e:5b:c7:02:
                    b9:4a:3f:35:a1:39:3b:59:bd:4b:b9:60:b0:d6:1a:
                    19:f5:be:c8:f8:20:8a:75:20:ae:85:66:fb:f6:87:
                    8b:c7:fe:93:2e:9a:68:3c:08:03:7b:ff:3b:80:e2:
                    4d:8c:09:c7:16:3d:cb:bb:a0:da:0e:3b:22:ed:96:
                    63:80:82:45:78:06:22:fb:8a:8f:59:57:3a:9b:cc:
                    72:a9:e7:f8:f7:7b:51:40:62:b1:cd:2d:ad:6e:cc:
                    d2:d2:bf:1f:63:7c:57:e0:b7:a0:3d:36:09:56:26:
                    60:68:0a:e4:ee:e3:da:07:bd:5b:06:48:cf:25:67:
                    ca:71:60:fa:50:42:bd:c7:7b:7e:fc:b9:ef:5d:b3:
                    ea:c6:fb:ab:59:97:11:60:a5:6e:ae:56:71:36:69:
                    97:55:08:98:c9:4d:24:2e:7d:dc:6d:9d:b6:37:c8:
                    77:14:5e:a2:96:24:9c:a9:ef:55:5b:7b:ec:86:16:
                    66:39:34:7c:7c:4a:2d:bf:6a:28:bb:e4:cf:0d:ae:
                    c6:af:02:7b:6d:85:f9:20:7d:6c:b9:23:e3:e8:ad:
                    2b:9c:97:f5:cb:dd:9c:49:8a:7f:7f:c8:77:75:54:
                    66:43:17:d9:1b:87:23:13:7d:b2:92:13:ea:ab:9b:
                    ad:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1B:7C:E8:33:88:97:97:70:AA:81:82:3B:04:85:61:D4:76:86:8A
            X509v3 Authority Key Identifier:
                keyid:7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:6c:ec:0a:7d:07:fa:bc:ff:28:09:dc:82:9f:4c:f3:3e:67:
         c1:2c:87:97:19:10:31:04:4b:00:d1:fd:28:3b:37:cf:0d:66:
         1f:31:96:9e:ad:c4:22:33:e5:74:7f:4c:13:0a:72:c3:c2:53:
         fc:29:35:4c:a7:b1:64:75:1e:0e:7b:24:55:70:d7:55:00:19:
         a5:4d:d3:d1:d1:2a:15:e4:03:26:03:5d:fb:d2:17:95:36:64:
         cd:d7:48:dc:3c:c9:0a:35:c5:76:5f:97:40:1d:68:6a:4e:33:
         2c:da:5c:16:eb:69:17:14:84:2b:6f:71:fa:2e:e2:db:13:b9:
         23:3a:4f:3f:a8:95:02:88:27:dd:29:40:2d:b4:0c:7f:7f:b3:
         93:5d:7f:b4:cf:96:3c:3c:20:2a:d9:38:f7:d7:24:60:7c:23:
         70:44:a5:bc:82:eb:8e:88:d4:af:f0:bf:7d:7a:49:af:a9:f1:
         22:eb:93:00:fd:2c:1e:5f:b0:62:10:da:5a:70:cb:2f:f0:f9:
         ae:f8:49:9c:1b:37:85:8d:02:f2:0f:13:67:db:6e:8d:79:53:
         fc:56:57:32:c2:88:88:fd:b8:cf:0d:07:dc:ba:4b:44:d0:61:
         00:7d:95:45:ee:28:6d:66:bd:fe:04:99:37:8b:4f:fe:22:ac:
         b3:18:2a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 19:34:32 2025 by rpki-client