Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
File:                     C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft (raw, json)
Hash identifier:          JvIJ89eQoHAsOyMXfItoBvwqcjtTEIOnyLS8Uoali9w=
Subject key identifier:   B4:01:B7:6A:B8:64:69:B5:C4:F7:03:58:6C:BF:3E:B6:3E:EE:E0:0C
Authority key identifier: 0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2
Certificate issuer:       /CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2
Certificate serial:       01987ED3409A3066E1218D1C5ADC084AA596
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
Manifest number:          F7
Signing time:             Wed 06 Aug 2025 10:00:30 +0000
Manifest this update:     Wed 06 Aug 2025 10:00:30 +0000
Manifest next update:     Thu 07 Aug 2025 10:00:30 +0000
Files and hashes:         1: C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl (hash: x0OUHKm2OhL6R+PZzS6KtTdDSbhmOiNXx+twAFH0FtY=)
                          2: ZFWlomNdM98mTRRpq_aoaHkQskg.roa (hash: 2nCI1N6NzlzYTCwqy1BPldF9j5r8eU6FY2+RvTWo+Dc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:d3:40:9a:30:66:e1:21:8d:1c:5a:dc:08:4a:a5:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2
        Validity
            Not Before: Aug  6 10:00:30 2025 GMT
            Not After : Aug  7 10:00:30 2025 GMT
        Subject: CN=b401b76ab86469b5c4f703586cbf3eb63eeee00c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:13:72:47:6b:40:41:f8:d3:f2:fd:81:32:62:
                    77:c4:ab:e1:1d:62:ff:8c:23:60:8e:b7:9d:dc:48:
                    70:c2:ce:25:a3:eb:5d:ad:0c:e9:81:bb:55:9a:66:
                    0a:dd:b2:34:42:f6:bd:98:02:d1:51:76:73:cb:e6:
                    0a:9a:c8:4f:ba:06:db:a5:12:61:a3:bc:c9:f7:9d:
                    ca:19:3c:ae:1a:a0:79:65:cb:44:d1:cb:09:73:fa:
                    64:ca:a5:5c:07:aa:ee:a5:cb:8c:e5:d1:57:d1:01:
                    79:7c:b0:1b:5f:e7:6f:77:32:38:c3:70:74:3a:15:
                    c7:fa:31:34:24:a7:ea:72:39:22:cb:9d:ae:f1:58:
                    fd:59:ac:70:8d:32:52:6a:48:6c:48:cf:22:03:e9:
                    e3:be:d1:38:3b:35:57:f2:6c:3f:06:39:4b:f1:39:
                    06:fa:e5:d5:89:8a:44:50:76:2c:ef:e2:aa:47:96:
                    27:00:a0:1a:34:bb:14:70:b0:0c:a1:6b:72:ef:93:
                    4e:04:0c:22:aa:97:87:cb:93:d4:5e:45:b4:41:bf:
                    6c:54:76:28:6e:53:8b:a4:4f:df:a5:f0:df:ff:4c:
                    4b:36:14:0f:80:9f:66:17:e8:1a:22:e2:27:68:4e:
                    6c:66:a8:8a:4c:7e:dc:81:55:08:7b:c0:72:90:51:
                    16:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:01:B7:6A:B8:64:69:B5:C4:F7:03:58:6C:BF:3E:B6:3E:EE:E0:0C
            X509v3 Authority Key Identifier:
                keyid:0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:15:b8:8b:8b:5b:86:36:61:36:ab:df:d7:d2:9f:18:60:55:
         e0:3e:50:09:43:cb:85:57:70:a5:a4:fb:bc:2e:70:8d:0a:b1:
         82:3f:7a:5e:a9:68:cc:79:37:44:5e:49:54:d4:ac:35:84:84:
         f8:19:2e:09:4a:0c:39:1f:a8:d4:43:f6:8d:94:0f:c3:dd:32:
         7a:5f:1c:1b:80:bc:b5:b3:89:53:66:68:e7:b7:10:79:4e:47:
         0f:d3:b2:f7:34:c1:89:0c:e0:ea:4d:43:24:6d:4a:ed:69:d5:
         57:b8:f1:e8:3c:3c:a0:22:2b:3f:8a:22:aa:57:ae:10:f4:34:
         ad:49:a0:55:43:ea:6c:11:60:d2:25:fd:14:9a:9e:c1:27:b9:
         f6:ab:91:a6:c9:84:ea:69:ef:81:2e:f2:0d:f5:14:41:fe:cd:
         94:01:de:67:5d:23:d1:b1:f3:8c:59:c4:a1:cb:4f:38:fc:78:
         ba:d7:49:ac:5f:23:80:7e:9f:bd:54:a3:a2:47:15:30:25:79:
         71:c5:d0:0e:a9:9d:7a:7b:67:d6:8f:0a:f7:20:f4:f3:69:9b:
         12:9b:80:25:52:c0:3b:4a:7d:18:28:88:9a:7c:0d:dd:41:73:
         64:d1:f2:7f:19:b8:30:d1:f0:40:d1:c1:4f:b8:bf:24:47:9d:
         d1:2d:c0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:35:26 2025 by rpki-client