Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft
File:                     7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft (raw, json)
Hash identifier:          QNNC5rRx8cAzHCh0JvWL5whPNhfOMokCLgcbiPU4Pv0=
Subject key identifier:   AA:BC:BE:EE:87:7A:BC:11:A0:DC:7C:39:7B:5C:16:72:C0:D3:D1:3A
Authority key identifier: EC:65:F2:46:BF:C1:EA:8F:C3:86:C8:6D:D4:9F:BA:A8:D8:8C:48:81
Certificate issuer:       /CN=ec65f246bfc1ea8fc386c86dd49fbaa8d88c4881
Certificate serial:       019893A3F3D45C9363D801B8DFB350D9B1BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft
Manifest number:          0520
Signing time:             Sun 10 Aug 2025 11:00:52 +0000
Manifest this update:     Sun 10 Aug 2025 11:00:52 +0000
Manifest next update:     Mon 11 Aug 2025 11:00:52 +0000
Files and hashes:         1: 4VbWJVNiMGPo_kQuPLRCvD3mIqs.roa (hash: Q1EDGWxO124hc6aCjobmLg6QYopu1SoqLikDIBWxFXQ=)
                          2: 7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl (hash: XhejVDlOJ+SJZ3FykTQfgYpzIHlkCmTsKojx25PiYnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 11:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:a3:f3:d4:5c:93:63:d8:01:b8:df:b3:50:d9:b1:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec65f246bfc1ea8fc386c86dd49fbaa8d88c4881
        Validity
            Not Before: Aug 10 11:00:52 2025 GMT
            Not After : Aug 11 11:00:52 2025 GMT
        Subject: CN=aabcbeee877abc11a0dc7c397b5c1672c0d3d13a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:93:69:05:58:83:df:45:d1:96:7a:52:a5:a1:
                    26:4f:18:83:93:95:d5:20:9f:6f:80:dd:71:43:88:
                    1b:e6:e5:ad:c2:e9:c9:da:a1:df:29:df:f3:80:89:
                    04:95:a0:c1:79:3b:7b:4d:95:c1:60:fc:4d:8c:9d:
                    f6:fd:9a:02:da:be:77:c6:e0:2e:f9:17:b9:57:2d:
                    2d:b6:cd:5a:29:a3:da:c3:3a:f8:97:d1:fe:ac:40:
                    75:be:f4:c2:55:0f:65:c4:ba:a9:14:1b:9d:93:ac:
                    fc:15:43:89:bf:ed:4b:47:fb:7c:d4:89:21:ee:b6:
                    68:e1:dd:db:23:6d:ee:3e:50:93:14:5a:e8:66:05:
                    61:5c:71:1a:5e:40:a6:aa:38:3c:46:cd:0f:fd:ab:
                    8e:1d:1b:1e:ed:64:7c:84:7b:40:c8:a0:98:41:2a:
                    18:4f:51:f5:bd:fc:1d:b7:df:1b:4e:a9:f0:74:be:
                    f7:24:00:59:0d:35:d1:0e:6f:5a:f8:b1:64:c6:b9:
                    3f:6a:81:49:b0:37:63:39:66:73:cc:38:c1:fa:c5:
                    c6:f0:ba:c1:46:1d:4f:7f:a4:39:e5:16:38:69:c8:
                    8a:4f:1d:f6:cc:a0:6f:52:dc:ce:ff:ff:9e:3d:ad:
                    d4:a6:04:a7:f1:b0:e6:db:7e:57:7c:79:5d:bd:52:
                    13:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:BC:BE:EE:87:7A:BC:11:A0:DC:7C:39:7B:5C:16:72:C0:D3:D1:3A
            X509v3 Authority Key Identifier:
                keyid:EC:65:F2:46:BF:C1:EA:8F:C3:86:C8:6D:D4:9F:BA:A8:D8:8C:48:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:a4:9e:d3:06:de:b0:5d:fa:77:fe:1e:b5:d1:d2:ba:0e:d1:
         1c:11:1f:89:2e:13:39:4b:45:6c:ca:7d:b5:62:82:3c:f3:1b:
         40:7b:1a:eb:f6:c1:64:1c:18:26:32:9f:f8:9e:e5:67:26:fe:
         e3:80:ec:bf:bd:4c:ba:16:e9:65:5c:c8:25:73:17:82:38:87:
         dd:1e:b8:4a:28:cd:0b:7e:73:a5:77:f2:7e:ce:35:f5:df:28:
         a1:bb:60:42:55:fe:42:18:63:84:60:65:93:0d:89:c1:33:7a:
         61:2b:23:f9:9f:75:2b:65:5b:92:2a:14:75:44:3d:3c:18:46:
         dc:67:ac:5e:28:e2:63:d3:fd:b2:aa:66:18:f1:9a:65:24:84:
         d0:30:95:d5:f1:6c:b6:17:3f:41:c8:67:3e:01:70:25:cf:0a:
         32:22:a4:a4:0d:76:8a:b5:0d:a4:ea:54:ec:6d:c0:28:af:4c:
         6b:d6:6b:82:f7:1d:16:69:d8:d6:df:23:af:fd:59:27:0a:d6:
         3e:46:81:f5:f4:8b:b2:6f:78:76:65:5f:0e:f2:e7:4f:20:23:
         0c:4a:3c:e4:88:84:5b:cc:56:5f:da:7b:30:41:99:95:5b:3c:
         6f:23:39:ad:5f:6c:2b:d9:7e:a5:86:61:f4:0a:28:fe:df:0d:
         a4:2b:60:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:04:31 2025 by rpki-client