Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
File:                     t7wa3782Jkj8Y1wzMvODvLwB53Q.mft (raw, json)
Hash identifier:          rQUhacW1E43/OLcMUgZ/11Rajyj13gQHWYYGsfKtW1Q=
Subject key identifier:   AC:DC:80:84:7E:43:46:19:AC:0A:49:C6:7A:88:6F:BD:BF:60:36:43
Authority key identifier: B7:BC:1A:DF:BF:36:26:48:FC:63:5C:33:32:F3:83:BC:BC:01:E7:74
Certificate issuer:       /CN=b7bc1adfbf362648fc635c3332f383bcbc01e774
Certificate serial:       019882B04CFF6264024C1F0DB18399F3B85F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
Manifest number:          161E
Signing time:             Thu 07 Aug 2025 04:00:48 +0000
Manifest this update:     Thu 07 Aug 2025 04:00:48 +0000
Manifest next update:     Fri 08 Aug 2025 04:00:48 +0000
Files and hashes:         1: 696z34QMsC6_vR7KEfwUSvQdpWY.roa (hash: yNhDUKimDD5hTy/VhafEDO3vPLqIP7iVfa9gPXqtn9I=)
                          2: t7wa3782Jkj8Y1wzMvODvLwB53Q.crl (hash: JavNdl7kX1TMWfvMh5Y1Jxr8nT4/KV9mDZJijr9zABU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 04:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:b0:4c:ff:62:64:02:4c:1f:0d:b1:83:99:f3:b8:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7bc1adfbf362648fc635c3332f383bcbc01e774
        Validity
            Not Before: Aug  7 04:00:48 2025 GMT
            Not After : Aug  8 04:00:48 2025 GMT
        Subject: CN=acdc80847e434619ac0a49c67a886fbdbf603643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f6:d7:ca:be:07:0f:de:03:90:fc:4c:49:8d:
                    c9:f3:63:cb:59:59:f9:07:ba:4a:5e:e0:4d:23:ba:
                    a6:7f:28:9b:b3:1f:96:57:88:65:72:63:63:07:d7:
                    2d:af:06:41:1a:09:49:57:3e:01:c7:22:9d:eb:0d:
                    75:f4:4a:a6:86:7d:41:af:b9:3c:b9:7b:ec:03:bf:
                    ce:dc:9d:78:3b:0d:d5:51:0c:89:33:16:f3:18:31:
                    9a:44:45:0c:5f:88:27:28:02:8e:67:b1:5a:bd:25:
                    dd:98:9a:6c:42:bd:7e:6c:47:90:ba:9e:47:38:3a:
                    74:72:c3:47:70:f6:13:13:72:58:6f:e1:29:dc:07:
                    c4:a2:ca:2a:10:27:78:7b:d6:4d:a2:a5:1e:98:12:
                    44:2e:ae:c2:2a:cd:5a:1f:84:b3:4d:dc:78:50:48:
                    06:c7:15:cc:d5:0e:83:d1:71:f1:a5:6c:d1:39:38:
                    23:30:30:3e:95:88:ff:17:86:6c:d6:98:20:39:bf:
                    61:5a:67:17:8f:7d:76:04:ba:19:66:1b:6a:bc:b1:
                    b2:4e:59:ce:1c:bc:b4:bb:f0:3b:59:42:3a:42:1e:
                    ab:11:d7:b2:06:26:9d:be:d1:b8:33:5c:69:b9:c6:
                    3b:d5:23:f4:71:d9:c1:39:4f:6e:5d:42:63:e4:2a:
                    4e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DC:80:84:7E:43:46:19:AC:0A:49:C6:7A:88:6F:BD:BF:60:36:43
            X509v3 Authority Key Identifier:
                keyid:B7:BC:1A:DF:BF:36:26:48:FC:63:5C:33:32:F3:83:BC:BC:01:E7:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:c6:95:8f:92:b9:b2:01:76:38:c9:c5:00:94:c8:75:ee:4c:
         8a:bd:9d:58:50:01:c4:aa:6a:9d:9e:34:65:77:a6:40:88:fc:
         13:f6:bd:63:93:35:30:89:30:a6:30:4c:61:7c:ab:f7:aa:30:
         86:64:7a:4a:f4:b2:92:e4:8c:e1:90:ce:2f:ea:5d:27:9c:e3:
         4c:a9:81:1a:bf:3b:49:78:de:77:60:53:bc:86:ec:ca:04:0b:
         c4:84:1a:94:da:eb:70:0e:86:46:0f:c0:22:40:05:69:43:bb:
         b4:9b:2d:41:8e:36:7b:02:7f:2e:31:f7:72:6e:bb:b8:15:40:
         29:88:f3:c4:38:43:a2:33:31:82:d7:3c:a1:59:1d:80:bd:16:
         15:c7:e7:94:1d:c2:62:4f:e5:15:f8:eb:33:51:28:6f:a2:b8:
         a3:c1:cb:c2:78:aa:3d:f9:21:ff:2e:2c:af:3f:a7:fb:52:c7:
         7e:1f:6a:75:06:ba:7e:fb:8c:11:20:28:cb:b2:e8:c2:b0:2f:
         17:15:cc:98:6f:53:1b:4c:d7:af:c8:c6:3b:71:22:6e:67:8d:
         9b:bc:73:28:ec:33:8c:8c:3c:a6:c1:1d:d2:f3:2d:ba:b2:3b:
         db:1c:01:5e:89:40:fb:8a:4b:ad:bf:50:13:e9:7e:59:5c:59:
         0b:29:de:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:16:33 2025 by rpki-client