Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
File:                     t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft (raw, json)
Hash identifier:          RDccJdZ9OBRNQM7wvSUpffd400G6uvMlbv+8vz1U0Pg=
Subject key identifier:   12:09:62:3B:72:BF:05:DC:8D:CA:9C:14:18:CB:4D:05:87:24:7E:33
Authority key identifier: B7:B9:2B:DE:A5:B9:7A:CA:BC:2F:65:8C:41:2B:F7:46:EE:0E:20:7D
Certificate issuer:       /CN=b7b92bdea5b97acabc2f658c412bf746ee0e207d
Certificate serial:       019872CFBB56C8C8098C9F534D76BACD056C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
Manifest number:          046A
Signing time:             Mon 04 Aug 2025 02:01:12 +0000
Manifest this update:     Mon 04 Aug 2025 02:01:12 +0000
Manifest next update:     Tue 05 Aug 2025 02:01:12 +0000
Files and hashes:         1: 5UnHlEhm50CtuwPcH8NrwNWIRVE.roa (hash: WYorLJXt+zMh+fr/A2gm/2FsojIk0FopUtuRBXlC1D0=)
                          2: t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl (hash: ziFy5fiv83PxUJL+3F2pP9tThsNJJj5gTD5yKSx42ak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:bb:56:c8:c8:09:8c:9f:53:4d:76:ba:cd:05:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7b92bdea5b97acabc2f658c412bf746ee0e207d
        Validity
            Not Before: Aug  4 02:01:12 2025 GMT
            Not After : Aug  5 02:01:12 2025 GMT
        Subject: CN=1209623b72bf05dc8dca9c1418cb4d0587247e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:08:47:87:65:fd:20:03:20:5b:91:e1:bf:5a:
                    6e:d6:8a:72:ee:45:de:59:2b:2d:e8:ce:f2:2c:7f:
                    92:6e:53:88:95:26:9d:5b:eb:b1:8b:f3:50:83:a3:
                    cb:63:87:24:96:ac:81:a0:0e:d6:b6:a1:0b:81:8b:
                    b9:fe:30:f4:4a:a2:a3:df:4d:a5:fd:b4:33:86:ae:
                    ac:ca:47:e9:fb:c8:86:5f:df:85:c8:48:7b:48:76:
                    06:91:4e:79:6c:1b:e5:ee:06:b4:4f:1f:08:9c:d6:
                    9a:21:96:0a:62:9e:e3:d8:30:58:ff:14:8a:ac:ae:
                    f2:18:14:45:a1:93:ba:37:ac:61:5e:b1:0c:22:6f:
                    da:47:86:31:3a:86:99:50:ec:e1:59:4c:5e:03:a1:
                    af:92:8c:26:86:c8:ac:86:9b:c9:c0:ed:2b:98:dc:
                    31:c7:fa:cd:04:ca:bb:59:59:99:0a:1e:a0:fa:1f:
                    8a:80:5e:87:55:d8:3f:dd:41:d7:bc:76:b6:51:1b:
                    d9:f0:31:1f:d5:7a:a1:ab:36:e8:08:3b:da:68:74:
                    66:dd:86:91:dd:9a:27:47:4c:fd:2b:94:0b:17:51:
                    dd:f2:2b:d2:5c:1b:15:a0:02:b0:30:0e:ac:5d:d3:
                    f4:5d:f7:9b:86:61:e1:92:b3:81:cf:86:16:4a:f2:
                    7e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:09:62:3B:72:BF:05:DC:8D:CA:9C:14:18:CB:4D:05:87:24:7E:33
            X509v3 Authority Key Identifier:
                keyid:B7:B9:2B:DE:A5:B9:7A:CA:BC:2F:65:8C:41:2B:F7:46:EE:0E:20:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:b6:96:b4:d4:a0:d4:da:ea:05:34:68:96:a8:86:2f:63:d4:
         39:02:94:de:50:46:bd:81:98:9c:ff:d3:5b:95:9b:95:26:b6:
         1e:90:6d:ed:bd:9e:2e:6e:50:75:54:f7:71:be:be:33:16:f1:
         97:2a:c3:36:a4:e9:9b:39:59:bb:93:4a:b7:6a:98:b6:d9:7e:
         99:44:3d:1f:bc:e7:a6:4a:5c:6c:d2:06:ad:b8:f9:d1:8b:a0:
         be:70:a0:43:aa:ea:28:a1:b8:2d:b9:77:24:7d:d3:aa:9f:64:
         9c:a1:bf:80:8c:cf:ff:94:a9:72:dc:09:21:94:64:c8:81:9c:
         80:59:02:c4:72:06:33:e2:1c:30:24:6f:ba:f2:04:29:28:38:
         56:da:34:24:60:97:04:32:4d:48:77:c8:8e:02:bd:d0:1c:23:
         70:29:8d:b5:c9:37:98:8f:cd:88:c5:58:8a:d5:74:e5:17:2b:
         3d:38:5d:8d:1c:dd:df:cd:4a:c9:0d:00:d6:11:df:0c:71:f6:
         6d:b0:18:a8:dc:54:13:05:59:17:21:32:cd:51:5f:ce:8e:cc:
         e4:44:81:f2:08:63:fb:d1:b4:0a:ac:b4:ed:36:68:90:5d:f3:
         a7:2d:e3:d0:45:fa:b1:85:3a:ad:d4:22:4a:d5:67:1e:61:83:
         1a:12:8d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:38 2025 by rpki-client