Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
File:                     Ac8qcbLHv1QcbMBBUc0CB402mSY.mft (raw, json)
Hash identifier:          0bIX5JYZ1yUF5qQ0xxMTtYaR7bzbyEy3sCcHg1K3Yxk=
Subject key identifier:   75:CA:B8:22:80:A5:85:15:5A:99:E4:D1:DF:4A:35:F3:12:92:00:34
Authority key identifier: 01:CF:2A:71:B2:C7:BF:54:1C:6C:C0:41:51:CD:02:07:8D:36:99:26
Certificate issuer:       /CN=01cf2a71b2c7bf541c6cc04151cd02078d369926
Certificate serial:       0199FB0EE3BC35D241B04935CB4D2943065C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
Manifest number:          03E8
Signing time:             Sun 19 Oct 2025 06:01:20 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:20 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:20 +0000
Files and hashes:         1: Ac8qcbLHv1QcbMBBUc0CB402mSY.crl (hash: mkjpgpT8uxDxuv/uGbH4nIiJtr3bb/ZlSnXPgJzcYtY=)
                          2: rygZTFCBNWEkh81f14PWqNNI1kI.roa (hash: Nw/ZIl2uHVeZMov8V5+Nv9xGTV5/WVlGxw5x2u+Et/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0e:e3:bc:35:d2:41:b0:49:35:cb:4d:29:43:06:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01cf2a71b2c7bf541c6cc04151cd02078d369926
        Validity
            Not Before: Oct 19 06:01:20 2025 GMT
            Not After : Oct 20 06:01:20 2025 GMT
        Subject: CN=75cab82280a585155a99e4d1df4a35f312920034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a1:c0:60:5f:b1:b9:12:e3:27:33:b4:49:2c:
                    24:7c:e1:8f:c7:9e:ec:1d:e4:21:7d:fb:d4:f5:17:
                    00:3f:b7:0e:d9:53:52:0f:73:41:89:0a:b8:72:85:
                    45:a9:ba:57:83:f4:4c:5b:ef:41:0a:4a:46:d4:98:
                    ac:76:af:e5:0a:39:32:60:32:91:a0:ae:e0:30:53:
                    8e:a3:02:74:5b:7c:3d:13:d5:92:1b:05:1a:b3:e1:
                    90:fc:96:2b:dc:66:6d:34:17:da:79:b0:e8:94:f3:
                    a7:c1:63:dd:0b:48:65:74:de:ac:2e:f3:92:29:90:
                    2f:c6:3c:28:2b:6a:6a:b1:1e:63:d5:d6:2a:94:2a:
                    40:8a:9a:5c:77:a0:69:c5:f3:d8:60:e9:3b:d8:85:
                    fc:ce:33:0a:35:27:7e:ca:dd:d7:42:21:04:5b:67:
                    2f:16:fb:07:18:af:ea:02:0e:2b:c7:61:3e:56:e0:
                    c4:0e:12:dd:23:36:31:75:90:d2:89:c0:a6:e5:b3:
                    3f:73:3d:f5:f2:58:2d:fa:cb:fe:a3:5f:ed:f6:e5:
                    78:46:8d:e6:2e:78:b0:9b:bc:6c:fb:e8:78:14:a1:
                    97:db:88:dd:c2:11:d3:5c:70:98:ab:e2:9a:c7:58:
                    4e:75:17:b6:53:35:e7:b2:4b:a3:7c:d3:66:19:c1:
                    10:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:CA:B8:22:80:A5:85:15:5A:99:E4:D1:DF:4A:35:F3:12:92:00:34
            X509v3 Authority Key Identifier:
                keyid:01:CF:2A:71:B2:C7:BF:54:1C:6C:C0:41:51:CD:02:07:8D:36:99:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:04:17:57:b1:42:ef:6d:cc:4e:43:3a:32:fc:cf:ab:1b:54:
         df:0a:c0:fc:e7:b3:d9:0a:e4:30:cd:89:79:a3:50:58:cd:0a:
         36:22:f2:b1:4f:08:17:28:e7:8d:e7:ec:9a:c0:a8:6f:ed:2e:
         2f:de:5f:3a:42:f9:67:9b:56:e9:28:24:da:79:7f:7f:8b:d3:
         1a:67:f9:82:d2:2b:b0:40:70:8e:09:d7:9a:d6:58:8b:c6:4d:
         f9:e2:40:ef:6c:e6:48:47:c3:93:bd:81:00:b4:95:8c:93:ea:
         22:71:da:9a:3a:d2:75:9f:a5:f5:8e:29:4e:98:6d:ea:3a:35:
         ac:1f:04:45:7d:20:74:9e:dd:01:69:2e:eb:83:23:a2:f9:ab:
         b8:9d:bc:7d:63:91:93:8a:4b:ab:87:3c:fe:d0:d5:18:a1:d2:
         54:37:6c:88:84:95:a2:d6:b1:de:ad:43:b4:45:ca:82:b7:56:
         4d:35:f3:9d:05:62:80:e8:37:fa:fb:c9:61:cd:a4:41:1e:4f:
         02:a3:54:a8:eb:6f:96:25:23:3e:2d:a1:f5:de:50:01:f6:22:
         3c:6c:c6:89:68:b9:b4:8e:2e:88:21:12:d9:c5:2e:32:dd:c0:
         08:fe:61:80:49:ff:a6:9a:fc:f5:a7:be:c6:24:db:e2:e7:aa:
         26:07:04:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:43 2025 by rpki-client