Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft
File:                     7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft (raw, json)
Hash identifier:          Dqtfiu5nS4xvv2Ql1ShMx7YhHf5XVQQbiZJFeFoKinQ=
Subject key identifier:   48:ED:0D:59:32:7A:D3:DF:85:19:78:3A:1C:99:9C:AF:51:36:21:5F
Authority key identifier: ED:24:15:01:3F:2E:9C:4E:E5:8D:7C:2D:FE:EE:AB:28:16:92:D8:57
Certificate issuer:       /CN=ed2415013f2e9c4ee58d7c2dfeeeab281692d857
Certificate serial:       0198744FC6D8084F62917C8529C69027467E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft
Manifest number:          15A7
Signing time:             Mon 04 Aug 2025 09:00:41 +0000
Manifest this update:     Mon 04 Aug 2025 09:00:41 +0000
Manifest next update:     Tue 05 Aug 2025 09:00:41 +0000
Files and hashes:         1: 7SQVAT8unE7ljXwt_u6rKBaS2Fc.crl (hash: evhENc9ctgq5DUIjlCRUAWtD6mYzKn1a2WpxdvlrVQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:4f:c6:d8:08:4f:62:91:7c:85:29:c6:90:27:46:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed2415013f2e9c4ee58d7c2dfeeeab281692d857
        Validity
            Not Before: Aug  4 09:00:41 2025 GMT
            Not After : Aug  5 09:00:41 2025 GMT
        Subject: CN=48ed0d59327ad3df8519783a1c999caf5136215f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6c:91:cd:87:20:ec:d9:4b:eb:96:21:fa:4a:
                    cc:9f:71:85:d2:27:60:3c:5c:1a:bc:ab:03:42:01:
                    3c:c6:bc:ae:02:6e:75:6e:a4:65:14:60:2c:11:23:
                    16:2a:9a:52:5f:16:ad:a9:de:8e:f8:a8:6b:78:6f:
                    9d:71:ee:d5:bc:55:1b:de:7f:c4:15:78:f1:24:62:
                    ab:db:41:0a:87:13:81:c2:22:71:3c:26:90:66:5b:
                    ba:65:8f:43:a6:8d:92:2b:32:3d:3f:1b:76:85:2d:
                    00:14:2b:52:80:cd:d0:28:bf:54:b5:04:fa:51:00:
                    63:c5:d3:12:62:1e:e1:14:ff:e1:22:31:24:79:a4:
                    4a:2b:16:6e:cc:f0:16:e7:a6:df:aa:d8:ec:b0:ed:
                    aa:b6:78:85:75:16:a6:21:9e:28:e6:a2:53:89:a9:
                    8a:3a:cf:6b:bd:04:6a:18:88:91:d8:90:9a:e1:2a:
                    1c:57:30:92:0f:98:7a:92:04:30:6c:81:e9:65:0f:
                    6a:e9:9e:27:39:2b:65:8b:97:89:ae:6b:15:92:b8:
                    66:2e:a7:e9:d0:15:21:62:3c:82:92:ff:5c:aa:dd:
                    ce:50:f4:cd:a5:1b:14:d0:d6:60:d6:f7:41:f5:4d:
                    8e:85:c3:bc:61:02:76:0b:45:b2:10:a0:b2:80:f0:
                    dc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:ED:0D:59:32:7A:D3:DF:85:19:78:3A:1C:99:9C:AF:51:36:21:5F
            X509v3 Authority Key Identifier:
                keyid:ED:24:15:01:3F:2E:9C:4E:E5:8D:7C:2D:FE:EE:AB:28:16:92:D8:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:b6:67:20:68:25:42:4a:ee:ca:2f:d1:14:d7:0b:07:5e:27:
         8a:fb:e8:4d:e3:47:82:0f:07:ca:61:4d:fa:93:05:75:f3:a9:
         f9:b8:5d:d0:1c:9a:5f:b6:c4:e6:54:55:14:23:52:cc:54:df:
         a3:96:6e:31:22:55:35:fa:d5:c4:c8:47:b1:c7:8b:dd:e3:40:
         d6:ec:d1:21:8e:21:56:7f:be:5c:ed:2c:d2:3c:49:03:a4:21:
         e9:f9:db:b3:79:b7:7e:c2:fa:8b:46:c5:21:48:95:90:f5:80:
         4a:8a:78:0a:3f:35:9b:3a:e7:a9:e6:bc:7f:8e:2d:18:94:92:
         8f:23:90:d1:0c:ca:79:bc:88:6f:05:e0:06:f8:f3:04:fb:9b:
         d9:b0:b7:f1:f7:0a:3a:d1:e9:7d:4e:e3:85:95:36:21:0b:8e:
         ab:0b:db:d3:19:c4:86:6f:eb:a1:1a:a6:82:39:46:e5:8f:a4:
         20:2f:6a:cd:42:d4:0f:d7:50:b0:84:bd:b1:69:10:d5:db:90:
         82:08:63:f5:1f:52:3f:69:80:74:4c:ea:84:4e:7e:40:cb:a5:
         ce:67:f5:a1:58:d7:d4:0e:b7:5e:f9:2b:a7:a6:9f:42:17:d7:
         f8:86:77:b8:88:0e:21:f5:52:57:41:e8:c7:b9:39:38:8f:8e:
         9e:e9:48:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:07:53 2025 by rpki-client