Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
File:                     j8Yziy6SHZEmxTYwPweMnruah1I.mft (raw, json)
Hash identifier:          p00rLWY9r7G9si85cFwXkViSFgZm2UnzA/O09njQhWM=
Subject key identifier:   24:97:1A:52:FB:36:40:C1:F0:57:8B:17:BF:5A:48:CE:4A:80:AD:20
Authority key identifier: 8F:C6:33:8B:2E:92:1D:91:26:C5:36:30:3F:07:8C:9E:BB:9A:87:52
Certificate issuer:       /CN=8fc6338b2e921d9126c536303f078c9ebb9a8752
Certificate serial:       0198D5BC304284E7F98310746A64EE7990C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 07:02:16 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:16 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:16 +0000
Files and hashes:         1: E9E2NhUKJP_3TXPCgDM1hcFl3-A.roa (hash: aBze8FprGa3p4/CGvI/TFD3mAyVwA/i5ic5RvbopQHs=)
                          2: j8Yziy6SHZEmxTYwPweMnruah1I.crl (hash: zkYuA5G83DY2KQoTGUkjop5bI6a5rmIC+M1RiyTZrvQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:30:42:84:e7:f9:83:10:74:6a:64:ee:79:90:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fc6338b2e921d9126c536303f078c9ebb9a8752
        Validity
            Not Before: Aug 23 07:02:16 2025 GMT
            Not After : Aug 24 07:02:16 2025 GMT
        Subject: CN=24971a52fb3640c1f0578b17bf5a48ce4a80ad20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ea:19:34:45:15:97:e7:09:00:cf:91:41:30:
                    13:b5:85:16:74:da:85:5f:37:c9:1a:c7:80:b1:55:
                    10:3e:bb:fa:f1:ad:bf:16:ef:5f:90:99:01:6c:b0:
                    b4:87:a5:84:62:f0:04:35:49:d6:bb:1e:7c:63:86:
                    eb:a3:da:7b:20:80:d6:ee:9a:6b:e4:54:45:51:ec:
                    ea:aa:e7:3a:7f:a3:81:d1:0f:08:c2:ce:9f:40:a7:
                    42:eb:d1:6a:33:84:7a:6e:72:d3:d7:eb:86:e0:89:
                    07:bf:af:4c:0d:35:21:06:6d:ed:1f:60:04:5f:a2:
                    10:de:ab:a1:ea:79:88:2f:bf:69:dc:cd:88:00:5d:
                    73:4b:50:4a:6d:2c:a4:47:61:d8:b8:63:52:bf:01:
                    88:6d:38:b6:28:f8:72:76:57:75:69:57:69:b0:13:
                    54:3d:9f:e9:a4:93:27:2d:6d:26:72:9b:72:e9:4d:
                    5b:9c:fa:eb:5b:aa:f9:4c:a8:eb:0e:ae:59:8c:c5:
                    9f:2c:9c:f8:d6:5c:d2:54:d8:5c:36:47:ce:b8:d3:
                    e6:ca:ba:3b:85:fa:28:59:58:8a:cc:5d:4e:a1:d2:
                    c1:6e:ef:50:a5:02:23:86:ff:8c:42:be:aa:7e:d2:
                    ae:f1:dc:42:82:e2:16:b6:5e:18:e6:f7:5c:00:65:
                    de:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:97:1A:52:FB:36:40:C1:F0:57:8B:17:BF:5A:48:CE:4A:80:AD:20
            X509v3 Authority Key Identifier:
                keyid:8F:C6:33:8B:2E:92:1D:91:26:C5:36:30:3F:07:8C:9E:BB:9A:87:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:9f:65:f7:68:ad:ee:06:38:1d:20:2c:e0:06:b4:31:bb:57:
         20:0b:52:7b:b3:b7:85:7a:16:53:a7:db:29:c7:4d:83:86:3a:
         07:ae:0f:87:c5:47:80:41:7a:ab:ae:7a:88:d1:a4:3b:42:b3:
         c1:e2:d9:bc:0f:47:02:10:73:73:19:20:45:53:1c:0f:71:f1:
         d5:ef:cc:04:db:a2:a2:3b:be:41:60:96:b5:62:ab:52:f7:ec:
         60:ce:f4:ee:cc:f0:78:c4:61:00:ca:ee:bc:4c:08:a8:1b:89:
         7d:ca:11:e8:24:50:15:a7:a4:58:45:cc:f4:4c:f6:4a:aa:d7:
         94:97:76:52:46:49:84:a1:f2:84:46:7d:ee:8c:a3:ab:c2:f1:
         90:20:9b:f2:38:dc:fd:57:6e:5d:e8:de:74:e8:ed:a3:d0:0b:
         01:00:5e:cc:a2:4b:46:1d:8c:fe:bd:63:2a:87:80:ea:04:49:
         90:fd:7f:07:2e:50:f5:9d:3a:fa:8c:8c:1b:a3:0a:b2:e1:55:
         cf:50:a3:92:a1:8c:4e:2f:14:a5:9c:d8:67:56:ce:38:85:ac:
         6e:d7:fb:a6:9b:26:90:27:eb:20:6b:d7:86:6e:dc:23:02:62:
         7d:ce:8e:e5:df:60:d4:38:44:97:31:4d:9e:30:14:d7:ac:bf:
         96:1d:c8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:07 2025 by rpki-client