Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft
File:                     cHdwf2aXiCaodeuNLrMzvthWlmc.mft (raw, json)
Hash identifier:          FaNowf9+qMNaYMQo4137OiZu4ORNYncwWAIWN6zsUQE=
Subject key identifier:   C2:3F:EA:BE:7D:3B:FC:14:F6:36:DF:3A:FB:3C:15:A3:8C:E4:5C:93
Authority key identifier: 70:77:70:7F:66:97:88:26:A8:75:EB:8D:2E:B3:33:BE:D8:56:96:67
Certificate issuer:       /CN=7077707f66978826a875eb8d2eb333bed8569667
Certificate serial:       019873E4174BE0CDA85B73FAAE63993F5758
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft
Manifest number:          07FD
Signing time:             Mon 04 Aug 2025 07:03:04 +0000
Manifest this update:     Mon 04 Aug 2025 07:03:04 +0000
Manifest next update:     Tue 05 Aug 2025 07:03:04 +0000
Files and hashes:         1: ZBqGiL5Lwt5_4rzPo7SO0cTda9c.roa (hash: KELG75sz8Tw2WawKyeiPVA4v+ezxNcK7f4e9XzFuUUw=)
                          2: cHdwf2aXiCaodeuNLrMzvthWlmc.crl (hash: 00tK3/SUct0T3VaSO0yd7StEInT1pfdBQ//6Kc01OV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e4:17:4b:e0:cd:a8:5b:73:fa:ae:63:99:3f:57:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7077707f66978826a875eb8d2eb333bed8569667
        Validity
            Not Before: Aug  4 07:03:04 2025 GMT
            Not After : Aug  5 07:03:04 2025 GMT
        Subject: CN=c23feabe7d3bfc14f636df3afb3c15a38ce45c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b0:cc:11:78:65:98:54:4d:09:34:0e:72:bf:
                    08:89:92:b8:b9:b7:42:32:9c:5a:85:cb:61:bd:3f:
                    1e:4f:88:f5:2b:4d:19:80:66:a4:59:de:5d:06:90:
                    3e:a1:43:67:f2:26:c0:64:0d:9f:d7:12:5b:b5:91:
                    1b:31:fb:fb:b7:f4:d3:fc:25:51:05:64:71:e4:34:
                    1f:c8:3f:fc:a5:58:a7:aa:84:da:ec:ea:9b:ea:c9:
                    dc:34:0b:37:74:a1:44:2d:24:b7:8a:24:a5:01:ca:
                    2a:1d:d7:de:e8:b3:4d:a1:4e:52:c6:5b:7c:6d:33:
                    58:f9:11:42:6a:39:73:94:f3:71:a8:9b:6c:f3:6f:
                    d3:3e:80:bf:1a:35:7c:b7:66:02:b4:79:3f:33:8d:
                    84:03:fa:61:f0:a6:8f:97:b8:07:ee:db:7d:54:99:
                    86:13:c9:47:08:97:8b:c0:a3:10:ad:d7:9a:46:70:
                    de:95:00:36:43:88:9a:72:4a:29:a8:44:fd:e4:73:
                    4c:16:40:a4:41:18:18:15:27:5f:4d:e6:52:77:d1:
                    7a:2a:6c:f1:a6:a0:e2:72:f2:ee:11:7e:0c:ea:dd:
                    b1:bd:bd:72:e1:02:b3:57:9d:38:55:f0:17:03:be:
                    e6:f8:69:ab:38:08:d8:81:5e:c9:c3:1b:32:10:fe:
                    c8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:3F:EA:BE:7D:3B:FC:14:F6:36:DF:3A:FB:3C:15:A3:8C:E4:5C:93
            X509v3 Authority Key Identifier:
                keyid:70:77:70:7F:66:97:88:26:A8:75:EB:8D:2E:B3:33:BE:D8:56:96:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:e9:5a:a8:83:b6:8a:57:17:30:68:4c:1a:f3:ee:6f:bc:c9:
         db:c6:89:a8:11:a3:c7:e7:c9:83:c3:40:33:4b:85:59:c2:7e:
         21:fa:fb:31:d3:16:9e:e6:04:59:45:9c:d5:4d:2a:a1:d8:1b:
         97:a1:99:30:3f:11:3c:02:d8:94:73:ff:e2:31:8a:38:45:41:
         98:db:39:84:01:02:8b:d1:0f:a2:a9:4d:15:9a:d2:84:54:cc:
         01:dc:59:da:26:80:a9:4a:7a:4e:aa:f8:ed:3f:da:8c:12:ae:
         ef:61:31:07:75:42:72:ca:c5:60:8c:a8:d5:d0:da:2a:0a:71:
         09:01:26:0b:d8:6e:a8:ee:c0:dc:4a:fb:74:70:63:1c:df:ff:
         fa:ad:d2:8d:4e:66:df:ef:c0:b2:59:9c:61:6d:bf:b5:fb:ce:
         0c:f4:53:f2:fd:a5:7f:89:45:f8:59:21:bb:b2:a7:e1:00:5d:
         c0:7c:de:6c:e9:c6:0b:14:ed:b3:25:88:cd:3a:0e:03:2b:b5:
         a6:d9:e8:bf:40:b2:18:13:8b:bb:50:5b:95:45:33:2f:56:65:
         4d:4b:3a:50:31:84:03:97:96:c8:8d:0e:38:00:92:d2:58:34:
         66:5f:0c:3e:ce:a2:f4:45:97:f1:f0:67:df:ab:4d:2f:86:44:
         1f:a9:41:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:52 2025 by rpki-client