Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
File:                     7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft (raw, json)
Hash identifier:          XmioQpyNANBxdz0CFNk7PPPqhmH/4NIx2NhA2qC/W2Y=
Subject key identifier:   7F:63:06:F1:5A:E6:BE:5B:1E:BB:F6:7C:4F:58:34:86:55:38:0A:1B
Authority key identifier: EC:5F:DF:6A:51:B9:80:91:E9:EC:7B:DF:AF:48:3E:C7:74:3A:5A:25
Certificate issuer:       /CN=ec5fdf6a51b98091e9ec7bdfaf483ec7743a5a25
Certificate serial:       0196914C38D8A86467F4D9339D5C03E821D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
Manifest number:          08A6
Signing time:             Fri 02 May 2025 14:00:13 +0000
Manifest this update:     Fri 02 May 2025 14:00:13 +0000
Manifest next update:     Sat 03 May 2025 14:00:13 +0000
Files and hashes:         1: 7F_falG5gJHp7Hvfr0g-x3Q6WiU.crl (hash: ABGAVyGjpyBl2Mzp+X0mwxAXDAzAFS8qY5ZVg8HVJZ4=)
                          2: e64v2Sa7kZCTmVuIe0U1EA1y5UE.roa (hash: 4+uTyAtFS8DAUClwiFHwirOIVJLgQjU/10EzULT806g=)
                          3: hiAVbhcO1TwVpozBkcEWuw9CQcA.roa (hash: cM6xE/ZqL2V37JUXZnVYtBWEG50dOsPtinGWqXaIJmw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 14:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:91:4c:38:d8:a8:64:67:f4:d9:33:9d:5c:03:e8:21:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec5fdf6a51b98091e9ec7bdfaf483ec7743a5a25
        Validity
            Not Before: May  2 14:00:13 2025 GMT
            Not After : May  3 14:00:13 2025 GMT
        Subject: CN=7f6306f15ae6be5b1ebbf67c4f58348655380a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cd:9e:0b:eb:34:6e:16:af:d9:d2:20:2f:ac:
                    5c:7b:cf:ee:db:72:12:e0:69:98:aa:73:bf:d6:62:
                    c1:39:d9:15:17:78:f8:a2:50:60:ad:bc:13:bd:68:
                    43:bd:b1:b5:95:94:c7:24:28:f7:37:e9:e2:35:95:
                    f0:65:e7:a8:b0:9b:1e:5b:5b:a7:24:f4:91:2d:00:
                    ab:4f:e5:79:d1:08:ce:60:24:dc:5a:d3:12:e8:f7:
                    fc:f4:ec:4b:5a:6b:4b:79:3c:a4:ad:42:5a:b6:85:
                    2b:89:45:2d:ed:68:71:86:24:f1:f5:35:b1:85:10:
                    61:bc:47:40:6d:f5:2c:21:ab:d6:70:38:f7:fb:3f:
                    d7:b9:64:a1:08:ce:85:f0:7d:1c:d3:23:47:cc:e0:
                    d0:f7:17:84:d0:04:36:18:0e:15:d7:ba:4b:78:54:
                    a2:dd:70:32:c2:24:65:04:d1:ab:1a:93:84:7a:ea:
                    42:6a:bc:c9:8a:7e:df:aa:fa:80:cb:ba:09:bf:25:
                    f0:73:4a:b8:90:c7:74:a0:33:7a:a2:30:0c:0a:72:
                    14:88:f2:4a:d3:24:7e:a1:e0:0e:7c:db:c4:9a:79:
                    ee:11:e6:a8:d7:79:04:c6:31:5b:95:4c:22:66:57:
                    ea:a1:6d:bd:74:fc:13:2a:0e:fa:53:90:54:2e:cd:
                    a5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:63:06:F1:5A:E6:BE:5B:1E:BB:F6:7C:4F:58:34:86:55:38:0A:1B
            X509v3 Authority Key Identifier:
                keyid:EC:5F:DF:6A:51:B9:80:91:E9:EC:7B:DF:AF:48:3E:C7:74:3A:5A:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:b5:37:74:7a:ac:d8:63:cf:ec:12:3a:8a:15:a6:00:3f:ba:
         20:ef:a7:2f:8a:71:9f:82:17:ff:b8:61:f5:a7:f3:1b:63:db:
         83:ee:a0:28:ad:4f:35:f8:07:a3:a8:00:29:a4:f2:e9:90:18:
         70:1e:3f:d9:20:c0:9b:ee:84:01:90:47:cd:3d:55:0d:bb:fb:
         1e:7d:5e:46:ca:b4:68:96:6d:6e:bb:93:74:99:6a:57:90:87:
         66:cf:93:90:4f:f4:cb:67:3e:c8:8b:36:97:f7:c4:f1:30:ed:
         7d:ba:0e:6a:95:9a:a9:d8:4e:c9:51:0c:9b:e7:f1:aa:97:f4:
         bd:62:b8:48:92:08:2a:58:af:59:02:d6:95:e4:30:82:aa:f9:
         31:c7:15:34:91:14:17:13:66:08:ac:34:df:81:94:68:f1:b4:
         14:e1:19:b2:70:26:f7:48:c4:30:3e:4b:46:49:95:22:31:f0:
         75:30:8f:67:48:e3:a5:66:dd:a8:af:84:24:af:2e:18:85:b2:
         50:39:fe:04:06:b4:04:43:ba:45:8f:7b:40:7b:f9:da:e5:2f:
         04:1f:20:cd:f7:97:6d:78:2c:4f:c4:b4:99:7a:43:1b:7c:76:
         2e:97:bd:97:fe:44:c2:2a:8d:a6:22:22:b0:89:63:dd:54:65:
         b6:2b:db:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 00:22:23 2025 by rpki-client