Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
File:                     IS7ROxq32gkK7kL2rt3f27FWpfg.mft (raw, json)
Hash identifier:          tCWwqlJAbCeH8Abas02kAK7Rd9KfiC6xHZP9ONmRdGg=
Subject key identifier:   3D:B9:7A:23:4A:52:B5:6E:85:AE:AD:58:58:C5:AE:70:1A:4D:72:8F
Authority key identifier: 21:2E:D1:3B:1A:B7:DA:09:0A:EE:42:F6:AE:DD:DF:DB:B1:56:A5:F8
Certificate issuer:       /CN=212ed13b1ab7da090aee42f6aedddfdbb156a5f8
Certificate serial:       01988242B6DE548A619F1899E7A898F987A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
Manifest number:          0E36
Signing time:             Thu 07 Aug 2025 02:01:06 +0000
Manifest this update:     Thu 07 Aug 2025 02:01:06 +0000
Manifest next update:     Fri 08 Aug 2025 02:01:06 +0000
Files and hashes:         1: IS7ROxq32gkK7kL2rt3f27FWpfg.crl (hash: exXMt9Y+9BukxIS+EWpOIm0nxWUJitqM8F1ZjBSSg8k=)
                          2: pYYF24wF2qUQt0FJlZ3YB5wUYkU.roa (hash: zEnazzlJdeIGpPAdwwnulmZqiWyOGMOyiwVZOjKNgZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:42:b6:de:54:8a:61:9f:18:99:e7:a8:98:f9:87:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=212ed13b1ab7da090aee42f6aedddfdbb156a5f8
        Validity
            Not Before: Aug  7 02:01:06 2025 GMT
            Not After : Aug  8 02:01:06 2025 GMT
        Subject: CN=3db97a234a52b56e85aead5858c5ae701a4d728f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1c:32:5f:1c:a0:a0:77:10:96:46:8f:ca:eb:
                    e9:49:33:bc:ac:c2:d9:6f:18:cc:1d:98:96:27:20:
                    3a:78:27:98:ce:fa:ff:37:93:1d:7e:4d:b2:26:65:
                    69:d4:5e:b1:ff:76:6d:63:09:e6:45:0e:e0:ae:ec:
                    8b:cf:fd:10:fd:d5:b4:93:56:99:d1:62:e7:0b:09:
                    59:4f:fd:fe:02:d3:2d:35:33:bf:d2:59:6a:de:97:
                    05:b0:e8:d7:e4:bd:c4:e2:60:13:31:ab:65:1e:7b:
                    e3:8b:3c:da:84:34:c4:a6:b2:a3:f4:d8:ae:f2:0d:
                    dd:d1:74:39:1d:f4:01:0e:ab:6b:fe:4b:78:8a:5f:
                    9e:8d:6e:77:b7:77:91:8b:9a:e2:37:e4:08:b9:3a:
                    34:09:49:15:f5:d4:83:dc:9b:ca:7f:df:1a:7e:1f:
                    27:9e:d0:0d:c9:d2:12:d3:e6:e5:7f:95:4d:c3:9b:
                    ae:9c:50:1a:88:82:aa:a4:c5:dc:71:f9:2f:09:74:
                    51:04:2d:66:ff:52:63:f5:93:8a:04:9f:00:27:6e:
                    08:79:98:68:82:a1:0d:5b:6d:db:ed:73:ce:71:ce:
                    df:9d:ee:e2:a2:bc:95:4e:6c:ea:86:d5:05:63:58:
                    f6:f1:7c:0a:97:55:de:e2:03:a4:ad:a5:a4:23:92:
                    0f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B9:7A:23:4A:52:B5:6E:85:AE:AD:58:58:C5:AE:70:1A:4D:72:8F
            X509v3 Authority Key Identifier:
                keyid:21:2E:D1:3B:1A:B7:DA:09:0A:EE:42:F6:AE:DD:DF:DB:B1:56:A5:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:d5:bc:7d:22:63:ad:e8:ab:88:7f:22:1c:73:22:bd:02:5e:
         26:7f:b3:32:e2:6b:25:42:ff:b4:db:73:82:da:18:6d:8e:46:
         12:de:b4:39:fa:7b:5e:f2:02:5b:47:85:41:86:73:3f:eb:58:
         b5:b4:9e:b8:58:ab:be:76:53:6c:93:ba:5d:d7:dc:ce:c9:a0:
         2e:77:81:1c:4a:a5:7f:5e:f3:e3:03:96:de:d4:02:6c:c3:5a:
         61:d6:bd:32:8f:46:20:78:9a:cc:e1:56:63:95:d4:4a:cb:2b:
         ca:42:34:3b:74:01:23:7e:09:67:ad:d2:65:a4:4f:79:b0:b1:
         05:53:92:ec:05:50:00:88:ed:69:42:08:94:d6:9b:39:40:da:
         a5:1a:6c:2c:32:34:4e:5d:2a:1e:ee:14:a2:ef:32:da:05:94:
         1d:48:64:68:6d:9f:82:9e:3e:e5:ae:00:8f:ea:d9:43:32:aa:
         64:d2:b2:0b:be:63:37:b3:fc:9d:4a:76:27:b8:e4:0e:1c:33:
         1f:a6:b8:1c:08:67:c1:4f:03:fd:d6:26:6b:fb:53:6c:b8:03:
         94:98:33:ec:ed:aa:69:a0:cc:23:e3:1a:02:fb:ab:6e:16:c0:
         1b:3f:73:90:7c:37:d3:9a:95:45:38:10:57:96:96:e5:08:2d:
         a7:30:17:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:23:53 2025 by rpki-client