Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft
File:                     7WUYxCbPxAgvuS7HQNfDx4glVjs.mft (raw, json)
Hash identifier:          Hd0G+4Owoa3lOaxOd8dVkQP+uADbsIq4L51ruQQz7h0=
Subject key identifier:   0D:B0:7D:8F:95:28:B7:40:B2:52:0B:38:19:8C:67:58:AD:B8:80:E9
Authority key identifier: ED:65:18:C4:26:CF:C4:08:2F:B9:2E:C7:40:D7:C3:C7:88:25:56:3B
Certificate issuer:       /CN=ed6518c426cfc4082fb92ec740d7c3c78825563b
Certificate serial:       0197789CE876B87429194D0E7810B40034A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7WUYxCbPxAgvuS7HQNfDx4glVjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft
Manifest number:          09E8
Signing time:             Mon 16 Jun 2025 12:00:38 +0000
Manifest this update:     Mon 16 Jun 2025 12:00:38 +0000
Manifest next update:     Tue 17 Jun 2025 12:00:38 +0000
Files and hashes:         1: 7WUYxCbPxAgvuS7HQNfDx4glVjs.crl (hash: GsmoKM+2logBLpRTHzPeTKcXThRbHx9uQgMMKSD8Zz8=)
                          2: Aiqke6vAdjSDZXc7_x-2ztL2HMM.roa (hash: 4MgcyURZP/QIugzfGvm0/MM0dlghCJFIzgyt28gsogw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7WUYxCbPxAgvuS7HQNfDx4glVjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:78:9c:e8:76:b8:74:29:19:4d:0e:78:10:b4:00:34:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6518c426cfc4082fb92ec740d7c3c78825563b
        Validity
            Not Before: Jun 16 12:00:38 2025 GMT
            Not After : Jun 17 12:00:38 2025 GMT
        Subject: CN=0db07d8f9528b740b2520b38198c6758adb880e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5f:66:b5:ac:b4:3f:31:39:fa:ff:5d:e4:22:
                    09:90:49:85:9a:03:13:7b:fc:fe:d6:94:bb:9c:06:
                    39:87:ae:37:f3:bb:f1:47:08:1d:5b:c1:36:15:72:
                    bf:d1:7e:7b:cc:1f:f3:c5:0c:fc:1b:48:00:a8:9c:
                    42:72:6c:f5:54:32:aa:9e:cc:a1:13:2d:86:41:1a:
                    d0:3d:c7:c9:ae:5e:1a:26:3a:20:52:32:b7:19:9b:
                    9a:ef:f4:31:dd:d9:4c:ec:b8:5f:09:82:e4:60:38:
                    33:da:24:ac:8d:d7:29:72:5c:ac:d1:a6:70:16:9c:
                    96:fa:bd:82:57:b9:82:50:12:39:3c:cf:4b:28:25:
                    52:44:fd:1c:31:d7:34:5e:20:e1:89:f0:f7:42:41:
                    b7:2a:d1:9d:8e:c2:61:e2:47:b9:33:48:18:b7:b4:
                    e0:4d:20:52:eb:1a:a2:ea:06:fc:fd:bf:24:91:c2:
                    a4:7c:84:f1:1a:da:4f:ac:f5:c5:23:14:98:f7:28:
                    b2:40:89:55:75:19:d7:04:26:e8:a0:01:8e:2d:2a:
                    a7:b2:b8:1d:ef:84:a5:e3:09:b5:82:6c:30:60:b4:
                    bf:cc:c1:04:4c:cc:31:4e:8c:f1:36:6a:79:fc:db:
                    e9:cf:90:1c:66:99:87:79:93:63:f5:28:19:ec:94:
                    a8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B0:7D:8F:95:28:B7:40:B2:52:0B:38:19:8C:67:58:AD:B8:80:E9
            X509v3 Authority Key Identifier:
                keyid:ED:65:18:C4:26:CF:C4:08:2F:B9:2E:C7:40:D7:C3:C7:88:25:56:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WUYxCbPxAgvuS7HQNfDx4glVjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:48:4f:72:04:50:f7:01:c7:f4:6e:91:65:99:b9:05:86:17:
         56:21:67:dc:21:cb:68:01:c2:61:49:fc:e0:c2:de:8f:b2:b8:
         fd:29:b5:55:17:23:3c:30:8e:c5:1a:14:06:3e:18:ee:5b:97:
         06:ac:d2:ea:db:40:60:bc:cb:ca:94:d8:5c:c1:1d:ac:2a:e9:
         47:7b:13:d9:27:76:26:ca:7b:a1:99:47:a6:ca:87:6f:6a:b6:
         ce:62:41:2e:b2:c6:2d:f1:ed:d8:aa:80:25:82:24:aa:7c:9b:
         62:e3:54:a0:54:0a:61:d8:96:bb:4c:97:d2:27:df:c4:d1:a9:
         ec:c4:97:e1:f4:26:52:32:d0:ad:06:cc:f0:ec:93:ea:c6:90:
         dd:99:63:e4:22:0b:0b:2c:8e:e6:26:ba:19:de:d3:75:51:32:
         41:cf:b1:6f:c0:d9:b9:7b:f6:8b:f5:9a:1a:1d:13:89:f5:dc:
         8d:38:90:3c:81:aa:14:90:e6:53:7f:15:2f:44:fd:a9:84:8e:
         0d:d2:1f:24:f2:ce:df:95:57:9a:3e:94:56:e1:a1:a7:47:f2:
         d4:8a:7f:a6:b7:d6:1a:bf:31:9e:31:0c:1a:d0:03:46:3f:18:
         a1:b6:82:5f:60:41:01:48:01:9e:f3:b1:42:20:97:aa:54:33:
         98:a8:a4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:21:59 2025 by rpki-client