Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft
File:                     c7mBy27nnS34yJ1qNMVUveP8x18.mft (raw, json)
Hash identifier:          jI1GU/xL9+aBg65GjByjQ22mE8z48JqTMLkWxGPA1rY=
Subject key identifier:   81:67:F6:63:5C:63:E6:99:F8:24:25:3D:86:D8:9B:AC:37:3E:04:D0
Authority key identifier: 73:B9:81:CB:6E:E7:9D:2D:F8:C8:9D:6A:34:C5:54:BD:E3:FC:C7:5F
Certificate issuer:       /CN=73b981cb6ee79d2df8c89d6a34c554bde3fcc75f
Certificate serial:       01987B2DC5D042C7C7815E7C70CDF4F0B5E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft
Manifest number:          0A02
Signing time:             Tue 05 Aug 2025 17:00:53 +0000
Manifest this update:     Tue 05 Aug 2025 17:00:53 +0000
Manifest next update:     Wed 06 Aug 2025 17:00:53 +0000
Files and hashes:         1: c7mBy27nnS34yJ1qNMVUveP8x18.crl (hash: yIs3CRIEdKeXNfqMyfDblPICj8CHwGpl97U102i+jmY=)
                          2: pP7tyuuRn66UIb06Z8juPizzBlI.roa (hash: vMVBYtNtS/yDZwAn3TTK359AmlCLqfTH6tG5fmDA5mE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:2d:c5:d0:42:c7:c7:81:5e:7c:70:cd:f4:f0:b5:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73b981cb6ee79d2df8c89d6a34c554bde3fcc75f
        Validity
            Not Before: Aug  5 17:00:53 2025 GMT
            Not After : Aug  6 17:00:53 2025 GMT
        Subject: CN=8167f6635c63e699f824253d86d89bac373e04d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:af:9c:7c:26:3b:cd:06:bd:62:c7:b0:8f:b7:
                    89:d3:fa:75:3f:8b:05:72:3b:7b:f3:6c:25:64:69:
                    d5:70:82:c1:5a:ef:d3:14:51:94:25:4a:1c:16:85:
                    af:85:4b:25:18:8e:3d:f3:b1:de:59:70:30:6d:46:
                    52:be:8d:8b:d1:80:b6:88:1f:40:c1:54:e1:44:f2:
                    eb:59:c8:18:94:e6:f4:c1:42:a4:84:18:81:bf:cc:
                    fb:46:8d:90:a1:d6:33:69:98:4c:4b:c2:3b:41:f9:
                    a4:37:f6:40:75:d0:cc:b2:31:5e:4e:e1:ec:50:d4:
                    03:8b:87:be:dc:45:50:0c:57:66:0e:40:5b:f5:3e:
                    c5:77:77:ab:12:8a:00:e8:9f:80:b6:b3:ef:8d:80:
                    fd:77:67:fb:62:b9:a2:fa:a4:b3:de:f2:9f:88:c8:
                    13:f4:83:45:91:51:1e:88:98:56:2a:c4:d9:b1:ca:
                    d4:9b:08:86:ab:f1:39:20:20:21:3c:55:25:f9:da:
                    fe:d9:a1:51:7f:8b:7c:4d:84:2c:c7:49:34:bd:09:
                    88:00:a0:5a:b9:9d:8e:3f:d8:07:29:00:25:7f:7a:
                    c0:c2:29:b7:a1:eb:ff:22:a9:04:f8:7c:59:ef:ab:
                    8e:90:31:03:3c:15:ce:d4:9a:90:f9:01:a6:94:1e:
                    b5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:67:F6:63:5C:63:E6:99:F8:24:25:3D:86:D8:9B:AC:37:3E:04:D0
            X509v3 Authority Key Identifier:
                keyid:73:B9:81:CB:6E:E7:9D:2D:F8:C8:9D:6A:34:C5:54:BD:E3:FC:C7:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:f5:3d:45:ea:bb:09:26:a6:fe:f8:5e:3c:b3:e2:d7:5e:aa:
         1d:0d:28:98:77:c1:37:65:da:13:43:a7:cf:ae:02:b1:91:e2:
         47:b0:cf:40:7d:7b:f3:3d:71:5c:51:f3:2f:b5:61:0c:ef:c4:
         8c:07:66:f6:29:3c:16:00:f7:92:7c:f4:7a:23:07:ab:0f:8f:
         c5:59:25:58:ed:fd:5f:8c:62:bd:55:be:3b:8b:5f:54:e8:43:
         98:45:e6:50:85:be:57:64:fd:4b:1e:6e:fd:7e:02:1d:7f:7f:
         03:08:4a:1e:7b:31:e8:3c:8f:bb:b8:3f:65:1c:e0:83:b6:98:
         d3:d7:48:90:e1:23:73:d5:98:4a:2c:c4:da:09:06:7a:ec:d4:
         24:bf:be:72:c0:21:7a:16:61:4e:12:4a:4a:3a:79:87:21:78:
         32:7d:20:cc:fe:24:67:7c:ad:ed:d0:9e:de:9c:df:7f:e2:0b:
         0d:12:1f:54:33:f5:b7:cd:2b:ef:45:10:e3:69:bb:ce:77:ae:
         82:44:87:51:7a:53:50:47:6c:dd:bc:10:5f:55:59:f5:78:3e:
         b5:23:35:10:8a:87:63:dd:6b:4b:12:fd:93:f1:fa:9b:87:79:
         57:e2:ee:f2:a8:de:d9:85:ac:02:15:71:b8:24:d8:4a:03:75:
         54:6c:b2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:03:56 2025 by rpki-client