Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft
File:                     w8zhZV8_ceTv_qTec6GuyCKCnWE.mft (raw, json)
Hash identifier:          mcc7dlWxmipzETwtepYeWlGzEIOxxGzCaczwLdCCJ/A=
Subject key identifier:   2F:D8:CF:A3:40:16:EB:9D:2B:01:BA:13:F2:78:B7:C2:F0:B9:CF:6C
Authority key identifier: C3:CC:E1:65:5F:3F:71:E4:EF:FE:A4:DE:73:A1:AE:C8:22:82:9D:61
Certificate issuer:       /CN=c3cce1655f3f71e4effea4de73a1aec822829d61
Certificate serial:       0198D4E067A9FD4DC97016E72ADA31FAEAFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8zhZV8_ceTv_qTec6GuyCKCnWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft
Manifest number:          01F1
Signing time:             Sat 23 Aug 2025 03:02:12 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:12 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:12 +0000
Files and hashes:         1: qel6ufOI0K0P6RzF02UdBRZmZOs.roa (hash: 0w6Fd2wQlTNYoLFBh1jxH0G1R4nWQ+6pOgjLnjgYDIc=)
                          2: w8zhZV8_ceTv_qTec6GuyCKCnWE.crl (hash: qjt6LXmgRu8d+ZDaX7lICv8LnQm77bEhnMsTtOjHmwg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w8zhZV8_ceTv_qTec6GuyCKCnWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:67:a9:fd:4d:c9:70:16:e7:2a:da:31:fa:ea:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3cce1655f3f71e4effea4de73a1aec822829d61
        Validity
            Not Before: Aug 23 03:02:12 2025 GMT
            Not After : Aug 24 03:02:12 2025 GMT
        Subject: CN=2fd8cfa34016eb9d2b01ba13f278b7c2f0b9cf6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:60:98:35:e1:f1:55:e5:b2:6c:d6:ca:8b:a1:
                    d7:07:c4:9d:f5:da:3a:ca:56:86:88:d4:1a:5b:b7:
                    dc:50:5d:0b:dc:17:2f:d7:68:5b:7d:88:b3:86:c0:
                    3b:18:9a:7e:7d:30:4a:10:9a:8c:73:fc:70:9c:99:
                    ef:d1:e6:77:9b:24:7c:a3:83:e8:2e:c2:a2:b9:c9:
                    b1:18:50:eb:87:b4:5b:94:4b:72:4a:89:22:92:82:
                    a5:23:df:a1:7f:56:c7:95:bb:f2:c6:31:63:57:a3:
                    d4:d3:f2:6d:82:23:47:da:c9:d1:17:db:69:0f:f3:
                    1e:7d:0c:c4:63:40:78:3a:1e:6e:dd:8e:02:9e:79:
                    bb:eb:69:d4:8d:c3:99:2d:bc:08:e9:9f:ec:60:9a:
                    28:70:d6:fb:ad:58:a4:e5:c1:ba:e4:3f:ea:ca:2e:
                    7e:12:f5:b3:08:da:3e:4c:b9:97:ff:30:e6:a6:e5:
                    67:00:12:57:28:86:ac:cd:a0:05:07:f3:60:cf:dc:
                    b0:95:27:77:ca:3b:0b:64:3f:fc:a8:a4:19:68:e0:
                    39:19:ee:c5:78:9d:a8:50:44:84:50:c1:0c:88:ab:
                    a5:d4:e6:f7:8d:81:53:48:d7:87:27:2b:91:7d:a1:
                    31:02:ae:15:3a:19:cd:a2:4c:06:66:bd:4f:f9:69:
                    4b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D8:CF:A3:40:16:EB:9D:2B:01:BA:13:F2:78:B7:C2:F0:B9:CF:6C
            X509v3 Authority Key Identifier:
                keyid:C3:CC:E1:65:5F:3F:71:E4:EF:FE:A4:DE:73:A1:AE:C8:22:82:9D:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8zhZV8_ceTv_qTec6GuyCKCnWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:ff:f2:59:fd:ad:6a:23:b6:3c:b1:7b:56:99:f3:f9:a3:32:
         5f:e6:99:d1:8d:91:37:d2:d1:94:01:bd:05:cd:fc:f4:fc:21:
         dd:25:84:42:77:e4:ef:09:fc:c6:d6:76:18:bf:e6:b9:81:0e:
         00:c1:25:5d:b4:d3:b0:f8:35:a7:5a:cf:a2:c6:0e:30:e1:9b:
         ab:e1:bd:29:e3:1e:49:18:0e:ab:62:11:3a:48:9b:74:12:d3:
         8a:06:82:f6:d0:5f:e5:6b:52:df:de:b5:7f:c9:37:10:c2:5b:
         fb:24:de:df:33:d1:dd:c6:28:73:9d:d4:af:4c:3e:01:b3:a5:
         bf:2b:52:bf:ea:cc:9b:ec:3c:57:bb:97:ec:04:96:4a:0c:cb:
         50:ea:53:bd:a9:f0:f6:f3:b9:90:08:53:85:f4:e3:24:c4:a9:
         a8:d9:7f:02:d3:63:b6:3f:cf:ba:14:75:a8:c9:bc:1d:80:f1:
         aa:aa:b8:90:1d:2c:6a:31:31:96:82:c3:67:85:a0:1e:58:50:
         11:d4:46:2f:6f:65:09:c6:1c:ce:5e:98:7e:81:3f:16:f5:09:
         07:7b:5e:60:bb:24:56:d4:1f:27:03:46:03:a4:7b:25:c9:f0:
         34:b6:27:1f:56:3e:87:dd:ed:58:01:37:a0:a0:29:fc:2a:2f:
         cd:33:6e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:52 2025 by rpki-client