Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
File:                     i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft (raw, json)
Hash identifier:          uuOpHpBWWL1rBsKyZqEX4od8GNO+JuMj8dJ8u1mGrhE=
Subject key identifier:   58:C9:7C:21:70:25:27:6C:D0:17:51:33:C5:B9:31:B7:21:87:9B:09
Authority key identifier: 8B:CB:DB:51:EB:80:22:6F:41:47:7A:7B:C5:0E:0F:96:14:55:ED:83
Certificate issuer:       /CN=8bcbdb51eb80226f41477a7bc50e0f961455ed83
Certificate serial:       0198D65F83C19F8FC7B8B480A45BD9D3F887
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
Manifest number:          15DC
Signing time:             Sat 23 Aug 2025 10:00:40 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:40 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:40 +0000
Files and hashes:         1: di6vtJn17ke553wiZoaxDGK1MLE.roa (hash: HpCMH1Ia0lvZ8f3O26OMSYPbId0TPu+1abwCSdtco9A=)
                          2: i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl (hash: l0tutV1kjn32C2+A/a2lUKKnrnChzUvSQSbQ+IbN+SU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:83:c1:9f:8f:c7:b8:b4:80:a4:5b:d9:d3:f8:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bcbdb51eb80226f41477a7bc50e0f961455ed83
        Validity
            Not Before: Aug 23 10:00:40 2025 GMT
            Not After : Aug 24 10:00:40 2025 GMT
        Subject: CN=58c97c217025276cd0175133c5b931b721879b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5e:c4:7a:19:18:36:08:ec:cd:2a:05:3d:39:
                    96:a1:7e:bb:2b:b7:b4:f1:66:0e:65:1f:97:bc:b7:
                    1c:74:9b:8e:25:12:a9:e5:0f:e7:14:b0:2e:4a:2a:
                    cd:dd:e5:e9:df:f9:d3:9d:91:00:81:4a:ef:14:9e:
                    fb:b6:d4:22:5c:0b:76:10:d5:70:26:9b:a3:31:4c:
                    02:e3:b5:36:b6:52:72:44:78:d8:94:85:a5:e2:d2:
                    c6:d0:41:43:58:c0:67:28:34:22:41:38:f7:a3:33:
                    6d:26:f6:74:42:08:e3:ec:cd:67:6c:57:29:e9:3d:
                    d8:78:11:e7:67:37:de:6a:74:21:30:05:33:f0:c8:
                    76:45:27:e5:8a:aa:ae:ad:0e:15:a1:a2:c9:33:60:
                    47:aa:05:88:23:38:5d:b2:21:bc:b6:f4:03:d5:28:
                    de:0c:51:a7:7e:8c:33:1a:46:b5:51:6f:5b:dd:5e:
                    fe:77:e4:88:d1:a5:91:38:db:ec:47:aa:f8:e7:b9:
                    36:49:a6:1b:6b:90:42:67:b8:07:38:95:90:54:71:
                    a3:e4:19:ad:f4:86:26:96:ae:4d:f4:a5:c9:54:f5:
                    2d:b4:f2:32:8d:b3:c7:34:65:9a:11:9e:0b:34:73:
                    c7:2e:b3:0e:93:fb:88:d5:bc:da:ed:8d:1b:75:35:
                    d0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C9:7C:21:70:25:27:6C:D0:17:51:33:C5:B9:31:B7:21:87:9B:09
            X509v3 Authority Key Identifier:
                keyid:8B:CB:DB:51:EB:80:22:6F:41:47:7A:7B:C5:0E:0F:96:14:55:ED:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:a7:04:54:85:ca:70:cd:9e:ed:9e:c2:37:f4:ac:d1:a0:a0:
         b1:35:55:9d:04:57:ea:1b:0d:2c:47:b9:1d:cf:b4:fa:aa:26:
         a2:5f:77:02:a8:de:40:27:ef:8c:8a:33:27:2e:30:18:36:97:
         bc:4b:94:bc:9a:fc:f7:4d:0d:8f:5c:96:49:af:dc:71:92:fa:
         d9:cf:fe:97:f0:cd:ec:2e:b6:d8:6f:e8:a2:85:49:24:48:8f:
         f3:0b:df:e5:3d:bf:5b:79:37:90:fc:ba:78:a9:f0:fb:9f:12:
         b5:d7:af:59:71:55:62:37:77:2e:7d:6d:7a:0e:d5:3a:95:21:
         08:3e:bf:c1:75:46:01:0c:dc:20:f5:1e:b6:85:d7:81:0c:4d:
         28:77:23:fd:5f:13:40:b7:65:72:6c:f8:36:49:f6:78:e7:e4:
         98:e3:73:77:86:23:7d:e2:e4:23:cb:70:2e:75:3e:a4:f1:e5:
         13:44:1d:fd:92:80:18:84:75:d6:3b:1d:17:ee:42:01:1f:68:
         93:af:3a:ac:8d:99:40:3b:f1:91:1d:24:8f:81:1f:f2:a1:3b:
         33:90:a3:3f:6c:ce:00:ce:55:b7:72:df:17:70:80:57:88:64:
         bc:53:73:0c:27:da:bd:bf:d9:6a:2f:cc:70:4b:b0:2f:9c:e7:
         bf:84:99:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:32:38 2025 by rpki-client