Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft
File:                     63u7_vWVCecmOYb3gFiaseeZhCM.mft (raw, json)
Hash identifier:          MC3hih1mHYNEB83amwfnk072SLcmHMo4bkQ4Ate03dk=
Subject key identifier:   74:88:0A:4D:58:FE:2B:E5:AB:BE:CD:BA:15:42:1E:EB:6E:8A:F1:50
Authority key identifier: EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
Certificate issuer:       /CN=eb7bbbfef59509e7263986f780589ab1e7998423
Certificate serial:       019A52637B31C4C535D817E904940156EFEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft
Manifest number:          0C71
Signing time:             Wed 05 Nov 2025 05:00:42 +0000
Manifest this update:     Wed 05 Nov 2025 05:00:42 +0000
Manifest next update:     Thu 06 Nov 2025 05:00:42 +0000
Files and hashes:         1: 2BUGiRoL3RcSi7pY5f5xCjUN0VE.roa (hash: 6n3B6T6zOS7/ZMATij6xHm3dHxmihydJs8pSIyJdQOo=)
                          2: 3vDeAfLkiHCXh_bvB_uIne94H5g.roa (hash: b46TBjcEv5nDO9EWtbqceuM5D9jO8fm++JeI+6HPFkk=)
                          3: 63u7_vWVCecmOYb3gFiaseeZhCM.crl (hash: F0Z/IOM7NxLumc+sD49FOADo0u0R/Udry7/tKrwfkNE=)
                          4: JuLc15VQAUmfB5AhoFLPEFJjfOM.roa (hash: O2lLcciXAiORRxhqLiNEE2RffnRd8Q3rIUVOEkgnsXQ=)
                          5: LlVSfF2zbrfiTXsgpEfHg8iUgFg.roa (hash: YW2S4XaDpuDeBAX82B6q2dhsWAkKwz2ghZXjdNsB/3s=)
                          6: _cTjsccOlGfEayp8PXkvdYi_98o.roa (hash: FJYOiN3Fx5xaiccdaHyFz//7kwAj9hCTVSJd74dQwjU=)
                          7: i7e88REZIOCxR1OxendrEYYVqcE.roa (hash: NlgmAK3hiLBR5dH57/MCWPhaMtt4b6Gh+Scb1REySlY=)
                          8: tn6YiE2_z2Bgvd-QfHkeVEmemUU.roa (hash: hY4mdHuIs45tX1gpYMoJmJu5qNi8mSFLm+F2DSiuG10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:52:63:7b:31:c4:c5:35:d8:17:e9:04:94:01:56:ef:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7bbbfef59509e7263986f780589ab1e7998423
        Validity
            Not Before: Nov  5 05:00:42 2025 GMT
            Not After : Nov  6 05:00:42 2025 GMT
        Subject: CN=74880a4d58fe2be5abbecdba15421eeb6e8af150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2b:78:35:b0:3b:74:66:27:79:fb:c5:29:4e:
                    c1:73:4b:c0:37:fb:76:b4:2f:48:2a:86:2c:99:0f:
                    35:0c:7e:3e:74:7d:e8:3a:e6:88:c6:cf:98:d4:18:
                    7f:c1:17:f7:90:2a:7c:0a:62:3a:b6:7a:9e:01:68:
                    45:2b:ef:41:76:ce:4a:c2:93:c3:1d:13:9b:1d:9e:
                    d8:9f:16:05:fe:c0:80:b4:e1:19:97:39:71:85:16:
                    90:6c:2e:95:5d:9b:dc:90:bc:7c:78:d4:8e:f3:8e:
                    cb:11:ef:eb:2f:d0:5c:c6:00:13:4e:e4:f1:14:55:
                    89:de:00:1a:de:63:50:f1:3d:49:da:73:52:e1:0d:
                    e3:04:26:0d:86:13:3d:06:50:64:82:d0:73:58:4e:
                    24:d8:de:89:61:dd:a9:c1:5a:d1:7f:25:5c:00:84:
                    66:1d:bb:3c:a0:52:9d:09:26:3d:d5:bd:3c:43:35:
                    ba:ce:df:5d:b6:91:ae:eb:84:46:8e:30:38:55:db:
                    f2:42:e4:b2:4e:a4:9a:c4:fe:ec:b6:76:eb:73:3e:
                    bf:df:e3:b9:60:f3:4b:b3:1c:0b:39:41:19:37:96:
                    79:2e:a6:54:91:c0:15:d8:c2:6c:76:f4:9a:3d:3c:
                    3d:b5:90:a7:29:3b:dc:5c:28:3c:67:46:95:7c:63:
                    67:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:88:0A:4D:58:FE:2B:E5:AB:BE:CD:BA:15:42:1E:EB:6E:8A:F1:50
            X509v3 Authority Key Identifier:
                keyid:EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:6f:2b:7a:51:92:d7:a8:21:a2:db:bd:04:c2:20:be:33:1a:
         a7:0b:77:28:ce:9a:78:4f:07:9e:fa:a7:b3:a4:9b:d7:56:94:
         47:ee:30:6a:e1:1b:a9:9b:f3:60:d9:22:12:a6:25:6b:55:fe:
         f3:fa:da:98:60:2e:1a:86:00:0a:4b:c8:97:7d:33:e3:9b:44:
         05:a8:1d:b3:f2:5c:61:aa:9f:39:8f:a2:4e:95:d0:87:30:55:
         6b:c4:64:aa:c9:50:a5:79:26:16:8b:62:75:3f:c4:af:75:d5:
         7f:84:e1:27:a7:d8:91:cb:f5:28:be:96:9a:35:34:66:4a:af:
         4a:be:1f:11:35:77:31:04:b0:56:5a:8e:2c:3e:ac:a3:4a:d3:
         3d:cc:91:f7:14:4d:3c:59:55:8e:8a:c8:5c:65:1c:03:5c:cb:
         48:db:0c:28:4f:3d:89:db:e6:cf:f1:57:93:f6:be:ac:d4:0f:
         40:df:b0:5f:56:b3:65:6b:58:b4:f2:42:b5:cd:0c:98:bf:cf:
         f4:41:ce:30:5f:c8:ea:42:bf:75:a5:62:c1:3d:c9:96:7c:55:
         0a:70:c7:9b:8a:37:bf:80:19:08:a1:8e:00:2f:9d:35:8f:d2:
         6a:a8:04:55:95:85:95:a6:3f:84:00:b7:4c:b4:ea:fb:67:89:
         fe:78:2c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:10:21 2025 by rpki-client