Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft
File:                     t1RlKp6YkUWgWfeIg9U26SxDtT8.mft (raw, json)
Hash identifier:          zF5n4wDQVUz60fJaLazwoB4gJYEFM/zOjAu/0+JGVtU=
Subject key identifier:   4E:EA:F6:CD:65:24:F2:7A:35:66:C2:C8:71:BE:8A:7E:58:BC:B3:A7
Authority key identifier: B7:54:65:2A:9E:98:91:45:A0:59:F7:88:83:D5:36:E9:2C:43:B5:3F
Certificate issuer:       /CN=b754652a9e989145a059f78883d536e92c43b53f
Certificate serial:       01988CFE60EB404E52C72739A0EEE3672B9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t1RlKp6YkUWgWfeIg9U26SxDtT8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft
Manifest number:          B7
Signing time:             Sat 09 Aug 2025 04:02:17 +0000
Manifest this update:     Sat 09 Aug 2025 04:02:17 +0000
Manifest next update:     Sun 10 Aug 2025 04:02:17 +0000
Files and hashes:         1: 5Dk0AIyQ8366dMD1Y4_Uei8F_xA.roa (hash: zRbpvOB6g3fcUQ2lDKrBbTaTLHRrCOPhGnLFNdn6z9I=)
                          2: t1RlKp6YkUWgWfeIg9U26SxDtT8.crl (hash: ThsUHQIj8atzBsZ+wIvVuw4V0pv5GHf6lw9dNFkLAX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t1RlKp6YkUWgWfeIg9U26SxDtT8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 04:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8c:fe:60:eb:40:4e:52:c7:27:39:a0:ee:e3:67:2b:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b754652a9e989145a059f78883d536e92c43b53f
        Validity
            Not Before: Aug  9 04:02:17 2025 GMT
            Not After : Aug 10 04:02:17 2025 GMT
        Subject: CN=4eeaf6cd6524f27a3566c2c871be8a7e58bcb3a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c4:bf:4e:a9:d0:c8:00:70:1c:cf:7c:c7:f0:
                    3c:9b:85:dc:cd:0d:1e:f6:b8:1b:83:cc:f1:f7:bd:
                    73:cf:c6:f2:cc:58:53:2c:66:4b:9e:2c:15:be:79:
                    1d:53:ad:8a:04:2b:9f:5d:84:fc:8e:57:7d:19:8f:
                    fa:ea:da:4d:52:af:0b:6b:bf:58:da:02:7f:1b:13:
                    df:a3:e6:fd:9e:35:5e:7a:44:41:86:9b:91:ce:c2:
                    5c:d6:43:7b:1e:47:79:3c:84:6f:39:95:b2:04:80:
                    b7:f6:7b:e1:0d:8e:41:b1:2c:d1:db:89:bc:4e:ee:
                    5c:7f:2e:42:f9:8b:23:68:af:59:86:55:34:67:01:
                    72:0f:8c:41:42:0e:a1:a3:63:a1:dc:7a:df:03:3f:
                    57:1c:f7:16:21:0e:14:99:78:f1:ed:9a:1f:a3:20:
                    85:a6:6c:15:9d:11:60:62:0a:44:d3:1b:81:02:73:
                    c4:56:36:10:ad:ce:a5:95:ce:1d:ef:9f:34:f2:55:
                    8f:a3:1f:2e:5a:1b:29:b3:88:a0:3e:ed:8f:f4:07:
                    f5:3b:1e:28:c1:23:6f:07:22:a6:a2:00:0c:e5:d2:
                    5d:14:9d:91:92:f0:32:2a:a8:5f:d1:95:83:af:27:
                    67:17:b7:cc:79:4b:0c:7c:e9:bb:92:65:22:50:fd:
                    87:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:EA:F6:CD:65:24:F2:7A:35:66:C2:C8:71:BE:8A:7E:58:BC:B3:A7
            X509v3 Authority Key Identifier:
                keyid:B7:54:65:2A:9E:98:91:45:A0:59:F7:88:83:D5:36:E9:2C:43:B5:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1RlKp6YkUWgWfeIg9U26SxDtT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:e0:f7:67:40:5b:8d:77:ca:8c:16:f8:46:50:ef:5f:eb:ba:
         5b:46:cb:5c:34:c9:56:69:9a:f9:f2:4b:09:b9:65:8d:9c:fe:
         26:7f:cc:b1:b0:cc:29:92:b8:ef:3d:4e:9a:39:ce:e1:27:15:
         f5:93:df:0a:f4:6f:89:6f:f2:31:a9:3e:cf:0d:6c:f2:cc:d2:
         35:45:e0:79:e0:90:b1:22:77:81:d4:9e:73:18:b9:d3:78:72:
         03:4d:b4:19:80:2b:3f:c8:d1:a7:b7:40:49:e0:40:f5:f8:6e:
         84:37:39:60:65:c6:e0:bd:4e:31:56:66:e0:78:30:12:b5:60:
         2b:3d:da:8d:9e:9c:55:a3:69:f2:3a:52:bc:28:61:e6:11:a3:
         b7:fb:24:1d:a6:d5:f8:d4:f2:c7:83:12:fe:61:c7:2d:97:96:
         5f:de:11:90:ed:54:05:34:a8:6e:09:67:61:b8:58:33:a7:c4:
         87:05:1e:e0:bd:66:3e:b2:2f:83:f7:7c:3f:03:46:c2:06:80:
         04:e9:85:7a:c6:aa:82:bf:85:21:37:54:2e:08:9e:4e:2c:cc:
         e5:be:2d:79:0e:8a:88:0d:67:fa:11:88:73:9e:67:d8:86:57:
         1b:44:e8:4f:81:77:2e:ef:4d:d9:ac:2c:d1:be:22:ff:8f:0b:
         bb:66:b7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:42 2025 by rpki-client