Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft
File:                     B94YU-WWYfkI4iaVDL3FK5f2IRM.mft (raw, json)
Hash identifier:          B/sElLfhg97Hs3VwFRyCjCV2jrL54ZmnuzvqTg8P7c0=
Subject key identifier:   E2:78:2E:76:DB:3C:31:55:95:1C:A7:8D:09:3A:77:E9:CE:E0:66:14
Authority key identifier: 07:DE:18:53:E5:96:61:F9:08:E2:26:95:0C:BD:C5:2B:97:F6:21:13
Certificate issuer:       /CN=07de1853e59661f908e226950cbdc52b97f62113
Certificate serial:       0198D73BE30949D083DCA4FB37B8D45FA904
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft
Manifest number:          0303
Signing time:             Sat 23 Aug 2025 14:01:22 +0000
Manifest this update:     Sat 23 Aug 2025 14:01:22 +0000
Manifest next update:     Sun 24 Aug 2025 14:01:22 +0000
Files and hashes:         1: 8z166PmMluGUtq4LMYoCmQWbrpw.roa (hash: WKHp+ZRmqGcWYXHDT5E01IWMi/o9ZxBUSy9tRRWhgjA=)
                          2: B94YU-WWYfkI4iaVDL3FK5f2IRM.crl (hash: BRAAVY9dA/KrgIdzX4saTEKkj8bK3PSa3CKK8cLES5k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3b:e3:09:49:d0:83:dc:a4:fb:37:b8:d4:5f:a9:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07de1853e59661f908e226950cbdc52b97f62113
        Validity
            Not Before: Aug 23 14:01:22 2025 GMT
            Not After : Aug 24 14:01:22 2025 GMT
        Subject: CN=e2782e76db3c3155951ca78d093a77e9cee06614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:72:35:f1:81:7c:a9:52:06:71:60:b4:c2:ff:
                    cb:d4:e5:f6:11:d7:21:9e:41:12:38:56:91:de:eb:
                    ca:29:5d:45:61:8f:66:9b:7a:fe:49:ef:e8:44:35:
                    a2:1e:de:27:ee:01:ac:f1:11:db:d1:2e:31:89:46:
                    12:49:d3:b6:ae:1e:35:cb:4d:95:4b:b1:89:c2:f3:
                    98:76:22:2b:cd:5b:4b:bb:15:41:a3:f5:4c:6e:c5:
                    e3:6a:fe:fe:03:d7:d4:30:c6:e2:b3:58:db:7d:78:
                    d3:54:90:71:e2:91:d1:cc:ea:01:83:88:71:05:6a:
                    26:02:6b:90:2d:0a:b3:a5:6e:e1:ad:ed:77:76:8b:
                    0c:8b:2d:6a:d5:6a:b1:77:b7:8d:83:d7:99:56:99:
                    f2:78:7d:44:9d:41:e5:bb:cd:70:4e:5a:95:8a:48:
                    a0:96:5d:b5:ff:6d:70:3f:8a:3a:8f:51:d2:78:19:
                    23:85:30:95:7b:fe:a0:23:e3:bb:99:d1:0c:8e:24:
                    77:33:f4:5e:f9:60:6a:70:98:fb:a2:ff:1b:9f:b4:
                    30:03:be:b1:8e:04:05:41:68:a2:f8:70:39:fa:da:
                    b6:87:d7:cb:a8:05:73:51:4a:48:fa:cc:48:1a:95:
                    a9:44:96:df:91:77:d9:4f:71:9e:4a:53:67:c1:eb:
                    78:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:78:2E:76:DB:3C:31:55:95:1C:A7:8D:09:3A:77:E9:CE:E0:66:14
            X509v3 Authority Key Identifier:
                keyid:07:DE:18:53:E5:96:61:F9:08:E2:26:95:0C:BD:C5:2B:97:F6:21:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:9a:87:82:31:2f:64:4a:ed:10:10:ba:9e:a5:be:5f:71:83:
         54:ca:f1:2e:80:3b:de:ef:15:4e:06:e1:48:95:3b:94:b7:83:
         e9:5c:3c:02:39:23:43:53:ee:f7:47:ac:0a:65:af:c3:d5:cf:
         7f:58:ef:88:7a:a8:82:67:24:2d:a2:0c:f8:2d:c0:74:2e:3d:
         16:2a:de:ad:49:be:87:c0:60:50:f8:70:6b:f4:f6:c1:3d:95:
         6e:b6:23:13:d1:8e:70:c7:dd:e5:48:15:07:52:47:b3:5b:3d:
         a2:a7:5a:5d:e7:2c:cf:93:30:5b:c2:5d:9d:e7:d2:84:e5:1e:
         07:4b:ef:47:24:ea:a3:e6:42:41:55:ca:d7:ab:5f:96:bd:6d:
         f4:95:ff:c9:b3:90:98:24:63:e7:b3:ec:b8:44:87:ae:77:fd:
         68:67:af:d5:e7:fa:20:6b:1f:f4:e6:27:b5:ad:0c:c3:1d:ba:
         ac:d9:88:38:81:05:a8:9a:ec:04:82:d2:14:49:aa:a6:57:68:
         ae:9f:3c:59:39:63:99:fb:1e:65:93:35:3f:db:6b:30:5e:18:
         6d:f6:e7:8e:9f:d2:60:7d:42:cf:e5:2b:9d:7f:df:9b:0f:bc:
         28:ab:ad:19:00:a7:3c:f3:bc:7a:f7:95:ab:3e:38:74:72:49:
         a7:f2:01:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:08:31 2025 by rpki-client