Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.mft
File:                     iOuqLxdpo932X4c9wx81HvB4rSU.mft (raw, json)
Hash identifier:          omZj6YLT/n2Px3QnCuXDsOU1aV5uzDs6w2MEayMM6jI=
Subject key identifier:   ED:ED:9A:30:0C:0F:91:C3:9A:C8:C9:1C:8F:8B:63:13:1D:B8:28:6A
Authority key identifier: 88:EB:AA:2F:17:69:A3:DD:F6:5F:87:3D:C3:1F:35:1E:F0:78:AD:25
Certificate issuer:       /CN=88ebaa2f1769a3ddf65f873dc31f351ef078ad25
Certificate serial:       0198D705FDD18518FE9606EEDD6171B2D1AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iOuqLxdpo932X4c9wx81HvB4rSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.mft
Manifest number:          0DE8
Signing time:             Sat 23 Aug 2025 13:02:30 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:30 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:30 +0000
Files and hashes:         1: P5TwA4gqR6DNAZ9Tx38K6wVBeSw.roa (hash: JFHWlXs6ts8+WEohOsphMs0bmJPDZeURLkqEXMqad1U=)
                          2: iOuqLxdpo932X4c9wx81HvB4rSU.crl (hash: Q9Gl8St9oRGn/0E4NUICQ8SV96EeNICiwKljm7HLC6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iOuqLxdpo932X4c9wx81HvB4rSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:05:fd:d1:85:18:fe:96:06:ee:dd:61:71:b2:d1:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88ebaa2f1769a3ddf65f873dc31f351ef078ad25
        Validity
            Not Before: Aug 23 13:02:30 2025 GMT
            Not After : Aug 24 13:02:30 2025 GMT
        Subject: CN=eded9a300c0f91c39ac8c91c8f8b63131db8286a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ce:a6:40:2d:6c:11:1f:ae:14:49:ff:f4:f2:
                    23:b4:c3:a1:35:65:fb:0d:10:50:c4:97:51:3b:41:
                    d7:c0:0f:22:35:9a:bc:7e:54:d6:39:07:79:02:1a:
                    86:be:5b:b7:76:cb:98:f0:a9:cc:25:55:2d:46:62:
                    38:6c:70:92:00:6b:3c:95:64:91:9a:80:33:b3:3c:
                    f7:6d:cb:11:a0:1c:05:01:8c:8e:c6:a6:b2:e2:ad:
                    ed:de:42:b2:5e:d2:45:73:79:d0:94:f2:b6:a5:6d:
                    89:32:fa:4b:2b:ee:54:b3:5c:25:d8:8b:6f:76:48:
                    58:c8:1e:dc:ca:35:ec:52:7d:b0:6c:c6:66:fb:0c:
                    8b:78:04:a4:e6:cd:e0:45:8d:9c:1e:5c:1e:63:97:
                    3d:0d:8f:b4:eb:3a:0a:08:22:99:2d:6e:e8:af:6c:
                    3d:58:b0:fa:65:4f:c7:cc:14:08:3b:20:79:bd:4a:
                    c8:ec:34:d6:1e:cf:ce:2a:4d:ce:f8:8c:03:1f:3e:
                    bb:7a:b1:e0:74:c9:72:9f:49:72:25:b4:de:ac:84:
                    59:69:04:15:7b:fd:89:d1:24:c3:e5:5c:bb:c7:91:
                    b3:45:71:c0:5a:d7:b4:03:27:7e:fb:fb:48:61:d8:
                    cf:eb:d5:c9:4e:3d:ba:cb:09:3c:97:11:e5:18:66:
                    5b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:ED:9A:30:0C:0F:91:C3:9A:C8:C9:1C:8F:8B:63:13:1D:B8:28:6A
            X509v3 Authority Key Identifier:
                keyid:88:EB:AA:2F:17:69:A3:DD:F6:5F:87:3D:C3:1F:35:1E:F0:78:AD:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOuqLxdpo932X4c9wx81HvB4rSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:43:0b:07:7f:91:ae:9e:f0:fb:68:47:cd:ea:a6:35:f9:f9:
         9e:61:cd:7e:34:6d:be:42:08:5c:22:b1:2b:ae:75:b1:b9:8b:
         51:b7:83:4d:7a:8c:d6:4d:15:10:49:aa:2b:2b:e8:24:59:fb:
         9c:a2:b3:37:fa:ab:72:d2:7c:d1:57:ae:de:43:d3:6f:ee:d8:
         94:33:ca:ec:15:81:b8:a6:9c:db:de:12:3f:58:4a:ec:01:84:
         34:3b:04:ee:85:1f:d4:76:7e:53:f8:0c:25:46:f9:fd:fb:eb:
         59:d7:c2:c5:4b:7e:49:b0:02:21:a0:5b:2b:09:ba:02:79:b6:
         69:3e:1e:aa:bc:c0:d0:19:6b:b5:7e:b8:18:c6:79:f2:27:2e:
         6d:43:d3:89:f3:d6:58:ff:aa:07:70:41:89:2d:cd:0f:07:0d:
         c3:21:75:9b:ac:f7:e8:6e:c8:60:b9:c9:6e:af:ad:ea:a7:b2:
         1f:89:d9:cb:e1:cc:f6:54:8e:a9:72:e2:a4:bf:b3:5a:66:16:
         fe:58:ae:66:d6:7e:88:c2:62:34:ba:5f:97:39:9a:d5:7f:b3:
         62:eb:ea:13:a2:8f:24:99:58:aa:98:f3:d1:3d:b4:42:47:89:
         26:4f:76:e5:26:5a:fb:6c:ea:2b:09:c7:bd:e5:41:f3:a9:96:
         a6:8b:12:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:02:00 2025 by rpki-client