Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
File:                     x-ur14baE4BWVbG1UB_cv0M7x40.mft (raw, json)
Hash identifier:          WmJ7lW922pzwuLrcEVYS+F10pOVWCz+KAZslhk7FDYg=
Subject key identifier:   2B:F6:56:EE:D8:50:95:3D:F2:2F:50:BC:9D:34:6C:07:80:36:E8:BA
Authority key identifier: C7:EB:AB:D7:86:DA:13:80:56:55:B1:B5:50:1F:DC:BF:43:3B:C7:8D
Certificate issuer:       /CN=c7ebabd786da13805655b1b5501fdcbf433bc78d
Certificate serial:       019872CF5CF8A4C779E3D93C6FF82FD4E990
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
Manifest number:          0D9C
Signing time:             Mon 04 Aug 2025 02:00:49 +0000
Manifest this update:     Mon 04 Aug 2025 02:00:49 +0000
Manifest next update:     Tue 05 Aug 2025 02:00:49 +0000
Files and hashes:         1: DwNEa67GeVfXPcLrWPlMm4OLjVo.roa (hash: 3gEhvhLUNasIQ2pRn7FSbquTzSKI+z6q4epOcxacj1o=)
                          2: elJTMVmgnWj44OPlL-6xmFMzLhQ.roa (hash: GWf5WI3kD5bsPfeiOoXwWgNYLd20Fx5ww7PTXcPPcr4=)
                          3: x-ur14baE4BWVbG1UB_cv0M7x40.crl (hash: 8htOi6qgaFtZOlPTh+U8XMpHAp/hvt2Put9tpUKXoec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:5c:f8:a4:c7:79:e3:d9:3c:6f:f8:2f:d4:e9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7ebabd786da13805655b1b5501fdcbf433bc78d
        Validity
            Not Before: Aug  4 02:00:49 2025 GMT
            Not After : Aug  5 02:00:49 2025 GMT
        Subject: CN=2bf656eed850953df22f50bc9d346c078036e8ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:92:8d:e8:16:5f:d9:ec:7a:b4:08:12:21:89:
                    f9:48:e1:b0:f5:97:d2:87:54:2f:f6:93:12:08:a8:
                    28:14:62:48:df:57:e4:2d:6d:e2:1f:be:0d:97:b7:
                    ec:83:8a:80:cf:d4:ab:f6:aa:f8:a0:64:98:16:8e:
                    d7:58:c7:b2:4e:b0:b9:b0:8c:74:4e:e2:62:71:ef:
                    53:00:70:cd:10:7a:50:ce:13:a0:52:5f:87:ed:8e:
                    22:ba:90:23:9e:f7:a2:8e:3f:6f:5b:40:04:45:8c:
                    43:3b:3d:88:f9:9c:60:19:d5:da:ed:db:29:bf:7a:
                    1f:83:f6:6c:2b:8b:0b:6b:52:10:ea:3f:70:0f:49:
                    e7:9a:9f:65:aa:0e:82:73:b2:dd:8d:c1:99:45:97:
                    ec:44:42:6e:02:ba:3e:75:bb:83:a0:e3:a0:c6:1c:
                    8e:45:22:7c:3e:03:37:a5:4a:8c:e9:22:5c:0d:52:
                    b7:c3:a0:9a:35:bb:af:28:58:17:b2:f1:09:cc:bb:
                    ff:68:42:5a:75:31:77:49:19:56:fe:7d:c8:fe:85:
                    b9:54:37:8c:21:b9:5f:3a:d6:39:f9:56:c3:54:9b:
                    6b:cb:68:c0:f2:ae:e8:fc:37:b7:10:6e:74:41:6f:
                    b9:53:ec:20:bf:f0:62:ea:69:ce:69:26:53:96:42:
                    46:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F6:56:EE:D8:50:95:3D:F2:2F:50:BC:9D:34:6C:07:80:36:E8:BA
            X509v3 Authority Key Identifier:
                keyid:C7:EB:AB:D7:86:DA:13:80:56:55:B1:B5:50:1F:DC:BF:43:3B:C7:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:5b:b5:57:db:f0:59:59:29:48:46:b2:99:f6:59:9d:55:d9:
         4f:74:9b:35:66:26:4e:82:f3:cd:43:32:38:2d:0d:0c:b1:b6:
         bc:87:33:77:86:27:87:85:9d:17:0b:6d:30:19:73:91:a4:4a:
         e8:9c:87:58:3b:d7:b0:cc:53:56:fc:9e:2c:65:77:43:17:12:
         18:86:15:6d:f4:9d:52:7c:8a:c7:d8:b2:94:3a:bb:46:b5:ec:
         95:45:d3:a1:2f:8f:cd:c8:fd:4b:51:9d:00:7f:d3:10:81:82:
         fd:35:7a:6a:e4:fb:99:f1:8f:91:37:ad:4c:f8:7a:30:1e:48:
         94:0e:1f:d6:f4:3b:49:5a:33:2c:6b:9e:82:af:c8:aa:f7:1c:
         9e:b3:e3:8f:a6:07:12:b7:9e:11:24:ab:a9:5a:20:9d:ec:de:
         95:cd:f5:60:41:de:6b:f8:7d:32:4e:a3:1a:fe:c4:46:99:01:
         92:cb:9d:bb:50:ad:f7:ae:92:c6:1c:04:b7:fc:c0:75:04:6e:
         b6:f8:61:c3:95:79:33:55:d4:76:74:4b:63:79:5c:60:fd:94:
         09:4c:b3:67:12:8f:21:4c:60:1a:d3:d5:39:bc:6d:15:22:69:
         bf:51:7c:b2:1a:3d:2a:cf:47:70:56:1e:f5:e1:b2:eb:c8:b1:
         24:9f:cd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:30 2025 by rpki-client