Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
File:                     e7M4LBagpWFZkNS85jTcUWgvLqo.mft (raw, json)
Hash identifier:          8D0LpTbKpJ2ebpf7l/MF43ek/guIr3nVCvWGyII7jSE=
Subject key identifier:   2C:4F:79:09:1B:FE:9C:1D:98:78:17:A5:6E:13:F0:13:A0:C5:27:1E
Authority key identifier: 7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA
Certificate issuer:       /CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa
Certificate serial:       0198868D0295926CDC2397713526FB379757
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
Manifest number:          0914
Signing time:             Thu 07 Aug 2025 22:00:44 +0000
Manifest this update:     Thu 07 Aug 2025 22:00:44 +0000
Manifest next update:     Fri 08 Aug 2025 22:00:44 +0000
Files and hashes:         1: e7M4LBagpWFZkNS85jTcUWgvLqo.crl (hash: lKR0lsNEGqtnnlEvEncgHqj/5IMpId7bXS2vHlsaEaw=)
                          2: qGUXVQ_YIWaxyPrsBvv99Mi17Xk.roa (hash: ahyxLXkQdJnYzPf9suZu/LdsDie1JIPApAeOAOCQ4OE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:86:8d:02:95:92:6c:dc:23:97:71:35:26:fb:37:97:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa
        Validity
            Not Before: Aug  7 22:00:44 2025 GMT
            Not After : Aug  8 22:00:44 2025 GMT
        Subject: CN=2c4f79091bfe9c1d987817a56e13f013a0c5271e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:74:dc:9c:9a:bd:11:33:d8:d2:f0:aa:0d:c2:
                    ed:c0:ba:ed:85:90:0e:7f:7d:c7:4c:20:5f:95:1f:
                    52:05:0c:7a:18:59:6b:d6:ea:92:00:3b:bc:ad:93:
                    7c:d7:4c:94:d7:af:37:a6:4f:44:73:6e:67:20:bd:
                    22:cd:b7:d0:35:4b:7f:e2:5d:f5:d0:3e:fd:6d:10:
                    16:95:57:19:16:7b:a6:49:97:5e:7c:f5:4a:54:be:
                    0f:7e:63:9a:00:5b:ed:40:6e:78:a8:58:96:ec:e8:
                    8b:10:cb:66:c1:f3:90:7c:bc:29:95:d0:9d:2e:fe:
                    29:5b:4c:4c:ae:8a:31:e6:5c:86:28:f9:41:09:33:
                    d5:b2:7e:f1:17:aa:84:17:9e:ba:43:1b:2b:e2:65:
                    47:16:93:f6:61:74:c7:92:7d:8d:75:0e:49:37:1e:
                    88:90:de:20:6a:b8:63:18:7d:33:43:bd:1c:f6:2a:
                    1b:2b:93:d4:03:6f:50:23:c9:86:dd:35:11:4a:77:
                    a6:58:9f:49:43:69:7d:67:e6:78:01:04:cb:82:15:
                    75:71:67:ce:5b:35:28:ea:41:9d:43:84:bb:d9:1e:
                    bf:f7:a9:4f:f5:f8:55:53:b5:b8:2a:fe:03:77:bd:
                    8a:90:1c:33:7e:41:96:b2:d3:f5:ec:e9:02:c0:60:
                    26:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4F:79:09:1B:FE:9C:1D:98:78:17:A5:6E:13:F0:13:A0:C5:27:1E
            X509v3 Authority Key Identifier:
                keyid:7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:42:c6:5e:e9:49:fa:4c:9a:4a:74:1e:7b:29:55:0b:a0:bd:
         25:9a:50:d0:90:d8:2b:f5:9b:31:a2:76:f3:55:16:ce:b2:71:
         dd:9c:1d:7c:74:cd:8b:55:a3:09:0f:13:46:7e:de:c6:9a:cd:
         79:5b:11:f9:76:c7:c2:37:ad:23:6c:65:ba:9a:b2:a9:ed:5d:
         f3:41:a2:a9:0f:a7:ae:8e:52:2f:42:4e:d8:f7:87:64:97:45:
         78:d2:c0:dc:ab:7c:27:50:00:95:4f:f4:08:dc:43:9e:d7:86:
         8e:84:10:1b:03:5a:b8:78:0a:32:fe:44:c0:b1:86:05:ae:dc:
         68:17:7d:39:5b:f6:d4:27:01:bb:39:dd:31:a7:24:d3:71:70:
         09:3a:e4:b1:dc:a8:2d:ad:6e:2a:e2:ae:5f:f6:db:0b:9f:68:
         6e:4e:9e:15:37:38:72:8a:44:51:8c:86:80:e4:9f:09:69:95:
         e5:df:69:b9:4b:6e:91:89:80:ac:4b:c7:e5:51:e8:a4:b4:35:
         90:6d:82:b1:47:29:83:86:f9:a2:77:9a:29:ac:43:d5:2d:07:
         53:26:f2:a1:37:9f:67:9e:f0:41:79:99:40:48:33:ac:f5:5f:
         3f:b1:9c:80:51:f8:de:50:4a:1d:06:b0:46:e3:59:57:f6:2c:
         c4:1f:ee:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:43:48 2025 by rpki-client