Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/510e57-38da-494d-8200-891fa21c6f0b/1/i8OUjYuToh5tV9nGVU1e3RB9Ca8.mft
File:                     i8OUjYuToh5tV9nGVU1e3RB9Ca8.mft (raw, json)
Hash identifier:          MQuOGN4MHfAGwkICrlBtN+3RxeO7h2ifXHlSQRVmmXI=
Subject key identifier:   84:0C:82:4B:D8:FB:4B:38:57:27:FC:5A:52:C4:2D:28:E6:73:50:87
Authority key identifier: 8B:C3:94:8D:8B:93:A2:1E:6D:57:D9:C6:55:4D:5E:DD:10:7D:09:AF
Certificate issuer:       /CN=8bc3948d8b93a21e6d57d9c6554d5edd107d09af
Certificate serial:       0198D583489A912E37385C1DA709E7E81703
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i8OUjYuToh5tV9nGVU1e3RB9Ca8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/510e57-38da-494d-8200-891fa21c6f0b/1/i8OUjYuToh5tV9nGVU1e3RB9Ca8.mft
Manifest number:          024B
Signing time:             Sat 23 Aug 2025 06:00:07 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:07 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:07 +0000
Files and hashes:         1: fvjwad8hv5M8RT1bW6F3smOFB2Y.roa (hash: at0gl2Sa+um/oWDDDgR4biQkEbCFJi5QlnnXaGwjc0g=)
                          2: i8OUjYuToh5tV9nGVU1e3RB9Ca8.crl (hash: hRJzXjU9St3TBye8yHcafWbD1xWOfK3SiWX8DJCp+20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/510e57-38da-494d-8200-891fa21c6f0b/1/i8OUjYuToh5tV9nGVU1e3RB9Ca8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/510e57-38da-494d-8200-891fa21c6f0b/1/i8OUjYuToh5tV9nGVU1e3RB9Ca8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i8OUjYuToh5tV9nGVU1e3RB9Ca8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:48:9a:91:2e:37:38:5c:1d:a7:09:e7:e8:17:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bc3948d8b93a21e6d57d9c6554d5edd107d09af
        Validity
            Not Before: Aug 23 06:00:07 2025 GMT
            Not After : Aug 24 06:00:07 2025 GMT
        Subject: CN=840c824bd8fb4b385727fc5a52c42d28e6735087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d3:2e:c1:48:83:df:23:aa:c8:db:ac:ce:81:
                    9d:51:ae:c3:04:68:0f:d0:e0:52:1c:a8:fa:61:61:
                    a0:11:b1:36:44:9e:92:3c:e8:3c:24:c4:64:b0:f2:
                    a3:b4:3b:07:ac:7d:7c:f8:91:d3:84:b9:1a:52:ee:
                    71:a1:5e:8f:a3:d8:0b:ac:e0:15:71:05:62:ff:d0:
                    f5:f2:cb:ac:67:2b:e3:a4:0c:04:b3:bd:22:11:1a:
                    c7:27:91:3d:f9:2d:38:58:3a:f6:a1:83:e8:89:14:
                    c9:74:f7:64:af:0b:af:09:af:d2:63:fa:72:17:bd:
                    06:8d:fa:a1:98:33:bb:8b:00:00:58:d1:08:29:40:
                    b8:e8:cb:98:ad:68:72:1b:a5:db:7e:f2:22:5d:cb:
                    1b:8c:ff:98:3b:4a:b0:53:0f:06:2c:fc:2f:2d:d5:
                    d0:91:31:39:7b:aa:8b:72:99:f5:f9:93:e2:a8:a0:
                    91:ce:8b:68:a1:bd:0c:d2:2e:f8:73:be:8f:04:79:
                    02:2d:c1:fc:38:29:d4:d5:9c:7e:fb:34:7b:4f:04:
                    3c:ba:fd:68:55:33:76:90:78:88:c1:46:41:14:e3:
                    df:db:c4:d3:45:be:42:0f:fe:0f:97:ca:10:4d:4b:
                    91:97:d1:b7:47:cb:44:f9:37:0d:d4:dd:ec:17:a3:
                    ad:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:0C:82:4B:D8:FB:4B:38:57:27:FC:5A:52:C4:2D:28:E6:73:50:87
            X509v3 Authority Key Identifier:
                keyid:8B:C3:94:8D:8B:93:A2:1E:6D:57:D9:C6:55:4D:5E:DD:10:7D:09:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8OUjYuToh5tV9nGVU1e3RB9Ca8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/510e57-38da-494d-8200-891fa21c6f0b/1/i8OUjYuToh5tV9nGVU1e3RB9Ca8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/510e57-38da-494d-8200-891fa21c6f0b/1/i8OUjYuToh5tV9nGVU1e3RB9Ca8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:dd:0a:0c:6d:3f:7a:0d:d0:3b:19:3f:e9:db:3b:74:8f:bd:
         04:49:f0:ab:f3:50:aa:80:4f:b7:ee:a9:c3:1e:3e:3d:ae:9a:
         50:00:e5:4a:04:0a:d0:69:ea:8f:e4:10:2e:b1:8f:fc:e2:fa:
         11:22:5d:48:e0:9b:0e:e6:9a:e6:de:95:56:fa:c6:ca:bb:ae:
         c3:6b:ba:79:dd:f8:9d:be:20:3e:a5:ff:e1:80:0b:aa:0e:53:
         8e:b8:47:cf:67:22:f4:3f:99:53:5c:14:33:cf:b7:14:63:a7:
         cb:0f:62:5f:f7:1c:21:dc:47:6a:31:1c:6c:b5:85:20:dc:e2:
         ac:39:0a:38:65:56:3c:3c:96:df:d9:98:fe:49:91:7b:6f:95:
         17:62:23:06:e5:bf:a1:1d:57:34:41:3c:f4:f2:e4:64:95:9a:
         2f:34:e0:6a:47:43:ad:c7:7c:95:78:24:77:09:a1:5d:59:f1:
         81:78:1c:5a:e8:98:1d:09:d3:ac:ae:90:be:2b:64:e5:ed:88:
         48:ff:af:d3:eb:d7:8d:f3:a3:0c:de:c0:b6:e1:29:50:fd:22:
         1b:78:3e:30:31:f0:96:30:fc:77:e5:eb:41:ae:e1:dd:f5:be:
         e5:18:a1:e6:26:d4:d4:1a:2e:4d:44:31:b6:fc:fa:2a:c5:42:
         ba:8d:b2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:43 2025 by rpki-client