Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
File:                     x_o8rcpOExoPvhueQNujg4M89Io.mft (raw, json)
Hash identifier:          SHztnEImNMnzqT9P4O7heqeYg8Q3FLCnC8t9BF9G9/o=
Subject key identifier:   C9:22:7D:3F:B6:55:3D:F5:27:77:A1:33:5D:D8:93:25:B4:40:07:97
Authority key identifier: C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A
Certificate issuer:       /CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a
Certificate serial:       0198D5F11DC4AE2DA93746B4D7A2A1EB89D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
Manifest number:          1613
Signing time:             Sat 23 Aug 2025 08:00:05 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:05 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:05 +0000
Files and hashes:         1: 6BkAjCciZdkVim2iQSRHdt1sfiU.roa (hash: ht4W9yWg20hMczJ5oRJNnUfqsbvH+S+TLA3MoaL5IE8=)
                          2: x_o8rcpOExoPvhueQNujg4M89Io.crl (hash: H4J1wFIdmB/N0BZcgB2U1SVzxbAxipEjD2c8jEdZc4s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:1d:c4:ae:2d:a9:37:46:b4:d7:a2:a1:eb:89:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a
        Validity
            Not Before: Aug 23 08:00:05 2025 GMT
            Not After : Aug 24 08:00:05 2025 GMT
        Subject: CN=c9227d3fb6553df52777a1335dd89325b4400797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:81:70:7f:c2:e5:d6:8b:59:04:de:48:99:89:
                    14:bb:ae:4a:52:e1:43:ca:ec:95:58:de:64:04:95:
                    3f:c3:9b:65:00:42:9b:81:20:7e:c5:b8:6f:da:30:
                    24:c2:98:b6:06:5d:4e:d7:7a:08:41:ca:23:3f:bf:
                    35:6d:6d:eb:0d:90:c8:ed:6a:e8:3e:de:23:4e:42:
                    93:80:9b:55:c4:0e:b5:6a:a3:6f:41:16:c9:82:3c:
                    51:0b:b0:38:27:66:d3:01:c4:21:8e:45:9d:23:d1:
                    99:96:a7:98:80:bd:28:67:3c:77:b2:5d:30:56:d9:
                    53:e4:a7:b5:73:c0:da:b4:49:f2:6d:80:a0:28:c4:
                    e9:04:ad:1d:8a:7e:6f:fb:63:51:dd:fa:69:62:ad:
                    95:45:91:a0:8e:9b:65:05:d9:d9:7e:70:ea:91:fd:
                    4a:c9:e2:cf:0f:66:41:c2:2e:d6:bb:62:f6:f2:a1:
                    b1:12:5c:0b:37:11:5a:e7:ba:f7:b8:7f:c1:5c:aa:
                    33:94:aa:37:f9:a9:c6:ce:90:97:25:19:a5:7f:e3:
                    28:1e:40:e6:45:5e:df:3d:28:4c:59:be:1c:af:3a:
                    fa:d1:06:6b:fd:52:28:ba:36:23:9d:a2:dc:de:21:
                    fd:39:b7:98:4d:c4:4e:83:75:0b:bd:99:9e:8b:b5:
                    cb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:22:7D:3F:B6:55:3D:F5:27:77:A1:33:5D:D8:93:25:B4:40:07:97
            X509v3 Authority Key Identifier:
                keyid:C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:b5:ee:a4:7d:11:fd:83:c7:79:f1:e0:28:11:e4:38:e1:d3:
         1c:94:cc:9c:cd:87:67:8e:cb:51:b3:99:4a:3b:2b:23:fe:72:
         ce:6e:1f:a1:f6:fd:39:b8:1a:72:c6:41:a9:ee:43:69:ae:30:
         a0:bb:46:42:93:12:7d:5a:3d:e4:18:4b:0b:20:8b:40:7c:64:
         61:81:f3:6b:a1:54:27:79:91:df:96:88:6f:7e:c1:2a:19:b2:
         3b:62:69:a1:5a:d1:8b:6d:fe:0e:13:f0:55:32:37:a8:b5:56:
         89:cd:a0:4c:8c:2b:f0:b1:99:7a:c2:99:c3:c9:aa:1c:92:6b:
         36:5d:a4:ce:f5:c1:ff:10:bf:1f:63:7e:ff:25:80:77:de:c0:
         ec:fa:e7:e1:76:42:0e:94:38:89:72:be:b8:4f:42:b2:11:c8:
         70:2b:ce:10:fc:67:49:7a:dc:44:44:5c:05:d3:f8:85:57:6e:
         d0:c2:0e:2d:63:79:bf:7a:e9:cc:1e:05:87:c0:7c:46:2c:a4:
         87:9e:a6:bd:b2:b8:f3:19:20:06:f2:08:18:ab:46:54:08:60:
         48:66:71:98:ce:84:75:ee:ed:75:ab:30:39:bf:f2:d2:f5:0f:
         7b:f2:5a:ad:1a:f0:22:94:c2:7d:c0:06:07:79:af:38:5f:c0:
         8d:80:f7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:36:36 2025 by rpki-client