Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft
File:                     8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft (raw, json)
Hash identifier:          qvYns9R6astgbP1j7qMvGCkelV1+l1WPVv80Je0cCyo=
Subject key identifier:   EC:53:EF:8F:62:B0:0F:E6:A2:C2:91:50:27:61:C9:DF:D2:F1:FD:28
Authority key identifier: F1:F4:60:9D:0D:05:3A:EC:03:07:DA:44:B0:E6:78:C3:88:F6:41:A4
Certificate issuer:       /CN=f1f4609d0d053aec0307da44b0e678c388f641a4
Certificate serial:       0198D65F456CA5A5C4CAA816F05AE87E1573
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft
Manifest number:          0B44
Signing time:             Sat 23 Aug 2025 10:00:24 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:24 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:24 +0000
Files and hashes:         1: 8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.crl (hash: ZjLl9ZfrD8hBSueYm1vGNRRqeTCmqbPdhb+RxIp2StQ=)
                          2: UEbyIO2QVlOQRHoJpjetZw63ZWc.roa (hash: B817opIktL38b1nWyMw+3o8iSD6n1l22i7ARYEndhTU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:45:6c:a5:a5:c4:ca:a8:16:f0:5a:e8:7e:15:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1f4609d0d053aec0307da44b0e678c388f641a4
        Validity
            Not Before: Aug 23 10:00:24 2025 GMT
            Not After : Aug 24 10:00:24 2025 GMT
        Subject: CN=ec53ef8f62b00fe6a2c291502761c9dfd2f1fd28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:82:9d:24:82:ed:bf:d6:51:fa:dd:ad:48:fb:
                    d5:71:83:44:4f:74:a2:b2:91:52:22:05:d7:32:f3:
                    2b:c9:e8:8f:c5:63:70:4f:a2:b7:ce:e3:82:b8:08:
                    70:2a:37:5d:ac:6a:78:b1:25:79:69:5d:76:8a:a0:
                    7b:5a:e7:29:b3:31:35:80:24:01:c5:3c:42:be:81:
                    9b:d9:d6:dc:91:56:ba:72:d8:8b:c2:62:d8:ef:79:
                    66:99:4a:02:7f:2b:5b:6f:cb:d2:d3:e2:27:1a:ed:
                    1d:29:05:56:cb:ec:5e:70:51:3a:68:35:24:c5:99:
                    dc:86:6f:d3:b3:d8:65:ca:3e:8d:29:58:54:1f:59:
                    e5:29:87:d2:5b:8e:7f:1a:93:1c:02:80:56:7c:e5:
                    9d:13:4d:e5:1c:07:8d:b5:71:e4:3e:b4:e9:67:74:
                    29:56:5a:f4:71:be:c7:c2:ba:ed:59:ab:bf:2e:cd:
                    78:0d:35:5c:b8:5f:15:06:69:02:50:f2:74:a0:97:
                    9f:4a:ef:20:6a:1e:30:e8:06:e7:82:fe:37:dd:16:
                    51:71:75:3a:91:76:76:b0:1d:e0:2f:4e:c3:01:83:
                    4d:c7:25:1d:7a:3f:81:e3:69:29:b3:e4:4f:6d:b4:
                    22:4e:89:1b:6a:9d:db:3c:42:0d:88:be:29:88:a6:
                    e2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:53:EF:8F:62:B0:0F:E6:A2:C2:91:50:27:61:C9:DF:D2:F1:FD:28
            X509v3 Authority Key Identifier:
                keyid:F1:F4:60:9D:0D:05:3A:EC:03:07:DA:44:B0:E6:78:C3:88:F6:41:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:4c:0b:63:a4:5c:d7:33:37:c7:9d:d6:65:9d:5d:25:17:34:
         60:d4:81:26:45:04:e6:6c:eb:4e:ac:a6:b5:3d:ba:00:ad:13:
         be:2b:e2:2e:2c:52:6b:b6:a0:7f:58:0a:c0:09:fd:51:fd:f3:
         81:89:e6:60:ae:f8:59:70:3c:28:d4:73:e6:b4:89:4c:22:b6:
         63:55:20:92:b7:7b:21:42:a1:09:38:08:87:ff:54:66:ae:a6:
         05:d6:53:13:c6:63:3f:ae:71:02:f7:be:92:96:f7:45:27:ac:
         40:c8:52:b6:70:3a:c1:f4:5e:28:cd:2c:23:4e:55:e0:d7:7f:
         e9:44:fc:2b:9b:08:f8:56:f5:4a:ed:b9:72:97:6f:e0:10:d0:
         b6:1f:26:5f:fb:bf:3b:5a:ad:61:d2:a0:98:16:29:79:55:a0:
         b6:62:43:9d:66:9a:e1:c3:d5:29:23:37:f0:98:a0:93:20:63:
         89:9f:b2:59:bb:6c:02:91:57:f2:13:bf:96:a5:c2:d3:ef:98:
         be:d6:b4:8e:52:cb:49:25:1a:50:a3:52:7e:93:59:f9:19:98:
         bb:b0:61:4e:c6:36:7f:f8:1f:0d:35:b8:7e:e8:e1:71:47:19:
         d7:05:f2:36:23:14:17:34:fc:64:37:dd:4d:17:85:2e:11:ec:
         7e:40:c7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:31:00 2025 by rpki-client