Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
File:                     iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft (raw, json)
Hash identifier:          D/YvUjR3d62o5oBxX2ZnYrh0pEiZLPPSEPqUuGB3jAo=
Subject key identifier:   06:77:A7:A9:DF:A0:07:FF:7B:39:D9:D1:7C:22:18:75:C7:A7:0D:C3
Authority key identifier: 89:2F:3F:F3:C0:A1:FF:B3:AF:20:F5:B9:5E:8C:B6:4C:88:04:3F:39
Certificate issuer:       /CN=892f3ff3c0a1ffb3af20f5b95e8cb64c88043f39
Certificate serial:       0198D404C573BC90D59BB3D55A20532F1DB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
Manifest number:          B3
Signing time:             Fri 22 Aug 2025 23:02:19 +0000
Manifest this update:     Fri 22 Aug 2025 23:02:19 +0000
Manifest next update:     Sat 23 Aug 2025 23:02:19 +0000
Files and hashes:         1: FN5Ke6qZ9WFTebO_qSnsGPrtdwA.roa (hash: znT88sYfk6NGdvoBku5OfzDNqhRT8YmCdSbEF1DvoG4=)
                          2: iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl (hash: c0qaDfsRJ3Q2V2n4CbXrcoodUhNu/y+bOUM1KNm40Og=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Aug 2025 23:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:04:c5:73:bc:90:d5:9b:b3:d5:5a:20:53:2f:1d:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892f3ff3c0a1ffb3af20f5b95e8cb64c88043f39
        Validity
            Not Before: Aug 22 23:02:19 2025 GMT
            Not After : Aug 23 23:02:19 2025 GMT
        Subject: CN=0677a7a9dfa007ff7b39d9d17c221875c7a70dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:de:6c:81:f2:3f:73:6a:ad:b6:4b:22:7e:16:
                    ea:5c:48:51:d5:02:a4:28:1b:07:c8:5b:51:ef:47:
                    a0:09:cc:dd:ed:5f:e3:3b:36:b7:d5:5e:94:02:80:
                    f9:10:5b:55:67:5e:68:88:cb:af:0b:b9:30:ee:2d:
                    ab:84:73:eb:77:2b:a3:c6:e9:14:b2:f7:f1:c6:4a:
                    af:4d:22:05:43:53:fb:62:50:1b:48:7a:27:58:1d:
                    76:45:58:64:78:70:ac:5c:fa:08:d4:d7:d6:03:36:
                    d7:ae:7c:79:f8:c5:23:9d:32:77:2d:16:6c:13:dc:
                    43:82:ad:d1:b8:c0:29:e2:9b:54:87:f0:4d:e5:a8:
                    f8:ea:59:59:16:53:43:61:fb:89:79:c5:c7:b2:10:
                    6a:8b:3e:4a:d1:35:d6:ed:b3:3d:b6:7d:ba:54:60:
                    76:08:1e:74:cf:1a:c2:43:8b:fc:a5:2b:c7:5f:3d:
                    d9:7a:04:0b:ca:14:b1:be:ff:92:e6:36:94:67:08:
                    01:10:5f:9b:73:db:c3:65:a2:77:23:bc:b5:1c:ce:
                    d2:ed:51:e3:11:ad:82:bb:65:3a:95:09:83:c8:7f:
                    92:a9:8d:53:40:04:ef:86:94:69:3e:e2:d9:49:44:
                    12:14:7c:a9:cf:12:69:64:71:5c:d1:ae:36:d3:e5:
                    7f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:77:A7:A9:DF:A0:07:FF:7B:39:D9:D1:7C:22:18:75:C7:A7:0D:C3
            X509v3 Authority Key Identifier:
                keyid:89:2F:3F:F3:C0:A1:FF:B3:AF:20:F5:B9:5E:8C:B6:4C:88:04:3F:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:49:31:ba:33:44:26:0f:47:31:e6:6b:28:34:8f:25:66:b2:
         24:f1:66:71:63:8d:e6:21:8a:e9:92:27:0a:5c:db:1f:6a:15:
         ec:02:94:e4:c8:ee:05:15:82:2a:34:a5:a9:4c:25:b8:47:3b:
         17:cb:07:94:74:79:e3:a5:45:33:1f:c4:0a:ab:53:99:e5:3a:
         3f:4e:b8:92:10:9e:f3:d3:8e:ea:7b:a4:fa:e9:2c:59:ec:0f:
         4b:61:93:4f:64:ea:a7:18:b7:40:d2:57:51:74:35:d5:ea:dc:
         ec:86:51:89:d4:83:ac:1a:33:75:17:ee:d0:1d:f4:96:e7:1b:
         b0:41:88:05:d9:04:40:74:ba:55:48:8e:e5:3f:bb:a0:ba:93:
         38:b7:dc:b8:fc:a1:22:b4:a2:1d:37:04:d2:93:90:7d:aa:ef:
         c4:f8:28:be:47:6b:30:99:a8:e9:a8:8c:f5:24:fe:f9:7b:ff:
         49:89:d5:e7:19:a8:c7:b6:27:6e:ee:13:c0:95:ac:63:10:52:
         1e:43:da:d0:5c:c5:e8:02:41:6e:d2:2d:d5:80:65:7f:28:29:
         2c:58:7e:9e:30:5f:3a:95:2e:33:24:94:5b:d2:20:39:a9:92:
         31:f5:78:3f:16:05:25:6e:c8:a7:48:e0:f0:d9:40:f3:49:99:
         90:50:c6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:08:18 2025 by rpki-client