Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
File:                     7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft (raw, json)
Hash identifier:          yNbYP/lAnUrUtCqc5Ys2kBNRa8q9p2MbOndxFFqMdgs=
Subject key identifier:   E6:38:01:B3:50:A8:E5:B7:39:0E:21:36:5B:7B:7A:9F:41:9C:A6:99
Authority key identifier: EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1
Certificate issuer:       /CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
Certificate serial:       01987450BBE1BB8CFDD9336EB540BCEB5D67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
Manifest number:          115C
Signing time:             Mon 04 Aug 2025 09:01:44 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:44 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:44 +0000
Files and hashes:         1: 7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl (hash: zMpbz2BTWpu4LpI90a6cfGZ2TxPvRTPGbtuTmqQOt+c=)
                          2: Z6AAXuXVnBC0PnCaLGdVCJDGtlo.roa (hash: mDlSiJmg0BY9JeNZWlLLq7LDLb9jKGHM+mo1bQwoBt0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:bb:e1:bb:8c:fd:d9:33:6e:b5:40:bc:eb:5d:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
        Validity
            Not Before: Aug  4 09:01:44 2025 GMT
            Not After : Aug  5 09:01:44 2025 GMT
        Subject: CN=e63801b350a8e5b7390e21365b7b7a9f419ca699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2b:8a:0d:0f:ea:9f:d8:85:56:ff:15:40:d8:
                    2f:0f:63:3c:df:cc:a8:92:a1:50:47:a8:d3:53:c5:
                    90:4e:29:fc:2e:9d:df:57:88:72:14:82:4b:5f:62:
                    e2:97:7b:6f:f7:ff:2b:30:1e:00:82:65:87:19:bb:
                    5e:d8:fd:0f:32:fe:df:e6:e6:e5:c2:1e:52:34:8e:
                    2d:32:8e:af:04:a1:ec:0b:ff:9d:20:f0:d8:12:c2:
                    f5:f3:aa:9e:de:b3:c9:9c:50:17:de:21:df:10:21:
                    42:e3:fb:8e:0f:70:d7:bc:d7:3e:d4:72:ec:3b:47:
                    99:74:bd:2c:80:dc:44:43:b2:33:d7:87:51:e1:f9:
                    88:fa:ad:30:cb:ea:54:29:fa:4d:ad:bc:0c:62:93:
                    20:4d:9a:76:a3:98:f9:dd:10:6f:42:85:3a:0d:5b:
                    db:86:0b:91:57:8a:14:fd:50:6b:8d:69:51:70:3f:
                    a3:0e:d6:1d:35:42:de:60:48:85:96:aa:93:f5:1c:
                    94:32:8f:db:ed:ed:db:ba:3b:24:d8:c4:39:8b:70:
                    7e:39:43:c4:1b:28:fe:ac:5c:92:9d:e7:16:a0:ac:
                    75:fb:ef:65:29:60:d1:df:81:1b:3b:e0:45:a2:13:
                    05:03:9e:16:25:37:78:3c:e1:88:73:b7:3f:4a:f1:
                    54:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:38:01:B3:50:A8:E5:B7:39:0E:21:36:5B:7B:7A:9F:41:9C:A6:99
            X509v3 Authority Key Identifier:
                keyid:EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:b1:5f:f1:66:dc:63:c9:06:97:ed:5f:e8:b2:b2:06:7c:38:
         f2:1e:8f:20:94:4a:5c:01:59:c7:ea:a3:d4:00:48:b8:e5:ce:
         d7:7b:8a:71:9b:e8:90:af:33:68:1d:08:54:92:21:6c:f2:b9:
         91:ed:46:b1:17:4e:57:8e:6f:ac:a2:bd:a4:73:77:e2:01:5f:
         6b:02:c0:c9:96:ab:e8:76:d7:b2:53:d1:3d:86:d1:98:0a:64:
         a3:e0:85:0b:54:fd:47:19:79:cb:d0:64:bb:c1:d1:77:72:fc:
         92:4b:76:86:e9:82:cb:78:74:a8:a0:00:91:74:73:a1:fb:dd:
         b9:d5:4d:66:f6:72:29:75:ea:dd:ec:20:9f:08:0c:93:8b:a2:
         41:b5:1d:58:88:a5:9b:22:9e:cb:dd:df:dd:ec:ee:85:ec:ac:
         13:b4:ba:8d:98:9f:a5:a9:1d:dd:39:fd:58:24:67:67:f7:7e:
         94:68:f2:ce:b7:10:b1:9a:51:4c:4f:7a:7a:69:8e:9c:8f:4c:
         13:7f:d5:88:a7:11:6c:e4:e4:d0:e8:8d:52:62:71:51:ec:48:
         f9:2a:bd:e8:56:2a:0f:27:0c:cc:b4:d5:97:4a:66:f3:74:8b:
         77:88:c5:23:a7:30:11:37:13:0f:5f:76:bf:93:5f:d1:41:99:
         69:22:0b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:47 2025 by rpki-client