Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
File:                     8_N8e7MVIGk0AdPGVyftXKpx3kM.mft (raw, json)
Hash identifier:          ubq/slt7xBnxBwnDhtfcYJkE6XQHVYZrulcuEEsJ4zk=
Subject key identifier:   82:62:1B:A3:8A:8F:68:D0:B7:1C:9D:3F:56:D9:86:49:D1:08:24:7B
Authority key identifier: F3:F3:7C:7B:B3:15:20:69:34:01:D3:C6:57:27:ED:5C:AA:71:DE:43
Certificate issuer:       /CN=f3f37c7bb31520693401d3c65727ed5caa71de43
Certificate serial:       0197B6A0D6E56C274D041EF31F6B19E02D14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 13:01:23 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:23 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:23 +0000
Files and hashes:         1: 8_N8e7MVIGk0AdPGVyftXKpx3kM.crl (hash: jmSusqcWpTuNJU6BCaxhf3RnDFJz7V/7qxmCzFpAjUU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:d6:e5:6c:27:4d:04:1e:f3:1f:6b:19:e0:2d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3f37c7bb31520693401d3c65727ed5caa71de43
        Validity
            Not Before: Jun 28 13:01:23 2025 GMT
            Not After : Jun 29 13:01:23 2025 GMT
        Subject: CN=82621ba38a8f68d0b71c9d3f56d98649d108247b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4c:e1:63:70:44:71:01:dc:03:9e:3d:dc:1b:
                    e3:3c:c1:e1:65:da:70:cc:14:b4:63:0a:92:38:68:
                    b7:88:9a:dc:b1:2a:f5:55:aa:a9:d1:f6:b5:e0:a8:
                    c5:74:36:c5:a2:7a:98:b8:93:8e:5e:fa:e8:b0:4f:
                    bc:51:62:e0:93:08:cb:19:fd:6f:c8:a2:c9:2d:31:
                    fd:8f:73:2f:f7:d3:b2:bd:5f:df:78:92:0a:05:3f:
                    04:b2:ba:ca:58:09:0e:74:1c:72:8e:cf:8d:16:60:
                    16:21:14:b6:5e:ba:f9:e4:bb:e1:2e:74:21:d3:29:
                    c6:34:a1:fd:be:6d:d1:0a:69:e7:d7:e0:54:f6:77:
                    7e:a8:32:8b:25:90:a3:72:6a:8f:0a:ad:ca:d3:d3:
                    e6:91:2d:fd:dc:12:30:f3:1e:11:e6:27:6b:b3:7d:
                    4c:48:5c:0b:56:36:3a:de:49:07:14:fc:d7:f1:19:
                    28:09:57:25:35:fc:e9:9d:76:95:ae:23:a5:a9:4a:
                    cf:27:13:13:0f:34:b2:0c:87:ad:cc:b4:3b:62:ac:
                    d7:8d:ea:c7:e0:2d:c5:b6:e3:c3:dc:e8:ec:73:41:
                    b2:9a:cc:36:61:9b:c4:81:7a:5b:7a:d7:17:b9:60:
                    5a:5d:76:bc:e0:03:e0:d6:b2:0b:6e:b5:3b:94:ed:
                    e9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:62:1B:A3:8A:8F:68:D0:B7:1C:9D:3F:56:D9:86:49:D1:08:24:7B
            X509v3 Authority Key Identifier:
                keyid:F3:F3:7C:7B:B3:15:20:69:34:01:D3:C6:57:27:ED:5C:AA:71:DE:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:f4:44:34:d3:87:64:1e:65:ce:99:e2:a2:3d:29:54:94:1b:
         1b:2b:a6:46:7e:55:cc:d7:b9:71:42:fc:55:b2:79:7e:d3:e5:
         7b:8c:15:d8:0e:3f:4b:e0:0a:fa:53:96:65:32:df:96:9f:d7:
         d0:25:88:61:85:38:f9:9a:22:a4:b4:d8:08:91:e7:a3:94:bf:
         eb:f8:de:41:b2:da:d9:92:d8:54:92:17:dc:50:8b:f7:a1:80:
         4f:18:ff:fb:17:b3:f5:08:63:f3:23:b0:f3:59:1f:d5:e0:8a:
         e2:7e:a6:66:ae:2e:5e:91:00:21:47:81:34:90:ce:81:80:01:
         9a:b7:7f:0e:98:18:30:f2:34:b7:4b:e0:a1:88:1a:59:ac:3f:
         42:21:81:c3:42:6c:17:e4:41:ed:e5:bc:99:c2:33:7d:75:ff:
         a1:64:76:cc:c7:68:a2:d0:7b:6f:1d:23:61:26:21:fe:dd:d9:
         f8:2c:74:c2:7d:da:b0:15:da:06:14:fb:ea:84:8a:21:e5:89:
         81:af:3c:1e:1b:a5:b2:45:3a:5d:36:3d:83:c6:2c:f9:3e:d0:
         f0:80:80:3e:30:02:89:cb:64:05:a9:25:58:8a:65:72:8f:43:
         5b:d7:01:7c:67:5d:3d:2a:80:5d:81:af:03:c2:d1:da:86:c5:
         64:cc:c9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:19:24 2025 by rpki-client