Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/70d112-0221-4b04-ac83-6123fd1f5fcd/1/P8ar6uG2IiVtuy2LdFHSdJDSdLs.mft
File:                     P8ar6uG2IiVtuy2LdFHSdJDSdLs.mft (raw, json)
Hash identifier:          D7Pt34j+jYUUd5aIYsPM5T6ibSXl/LP5MU4TueiCTe4=
Subject key identifier:   91:C7:74:41:02:C9:3A:DB:9C:72:05:FF:DF:D8:E5:97:41:03:08:22
Authority key identifier: 3F:C6:AB:EA:E1:B6:22:25:6D:BB:2D:8B:74:51:D2:74:90:D2:74:BB
Certificate issuer:       /CN=3fc6abeae1b622256dbb2d8b7451d27490d274bb
Certificate serial:       0198D5F1B5C2AF191EDCF5E8E4DA4B5B2D9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P8ar6uG2IiVtuy2LdFHSdJDSdLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/70d112-0221-4b04-ac83-6123fd1f5fcd/1/P8ar6uG2IiVtuy2LdFHSdJDSdLs.mft
Manifest number:          0353
Signing time:             Sat 23 Aug 2025 08:00:44 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:44 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:44 +0000
Files and hashes:         1: P8ar6uG2IiVtuy2LdFHSdJDSdLs.crl (hash: Svi1S30XMaB9vsbHWSva7B3CJEfZvfq8G2Rn7zxbqsk=)
                          2: mmWIUy6R5upz2L1YINLOdfsMMT0.roa (hash: wBplVEEyq+VUYs/M8XPCNDfyw39oDDlnudAvkLvbSPo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/70d112-0221-4b04-ac83-6123fd1f5fcd/1/P8ar6uG2IiVtuy2LdFHSdJDSdLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/70d112-0221-4b04-ac83-6123fd1f5fcd/1/P8ar6uG2IiVtuy2LdFHSdJDSdLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P8ar6uG2IiVtuy2LdFHSdJDSdLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:b5:c2:af:19:1e:dc:f5:e8:e4:da:4b:5b:2d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fc6abeae1b622256dbb2d8b7451d27490d274bb
        Validity
            Not Before: Aug 23 08:00:44 2025 GMT
            Not After : Aug 24 08:00:44 2025 GMT
        Subject: CN=91c7744102c93adb9c7205ffdfd8e59741030822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:07:1b:70:6b:2e:e2:61:91:27:d9:3d:91:11:
                    f9:9b:78:eb:08:86:b8:1b:df:0e:37:80:96:98:e9:
                    cd:69:26:69:83:f1:d6:fa:08:3d:e5:31:0b:07:d1:
                    42:08:47:8b:df:63:a8:c5:23:cb:23:c6:0b:b4:12:
                    4a:ee:4a:cd:a4:79:40:f5:e7:e6:30:0e:06:cc:75:
                    9c:6b:1c:ea:cb:a4:6b:fb:0a:9b:1b:d8:b3:17:82:
                    3f:9b:a9:2a:2d:4b:6d:4f:b6:b6:e2:39:56:3b:02:
                    14:8a:18:1c:89:63:74:ef:aa:a5:2d:fe:7f:92:30:
                    f5:db:a1:0a:bd:2e:09:ad:6e:77:7a:dd:e2:69:0f:
                    54:82:37:a7:dc:5e:99:b7:2a:07:05:28:b3:57:46:
                    11:b0:a6:ed:5c:93:b1:2d:46:cd:59:80:11:7d:4a:
                    99:cb:b4:eb:24:81:56:f6:d2:75:84:f9:6c:27:07:
                    ae:12:a5:fe:3d:b8:89:58:ac:af:af:05:1d:a7:d3:
                    14:b5:8b:f7:ec:41:e6:84:45:cf:66:bc:8c:37:19:
                    88:9d:10:8c:d6:94:8a:d4:4d:8f:d3:77:1a:ad:6c:
                    e1:00:85:72:4c:82:0c:25:14:af:07:be:f1:04:df:
                    c9:62:9d:76:de:bf:b3:3b:09:5d:ca:4b:38:9d:18:
                    72:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C7:74:41:02:C9:3A:DB:9C:72:05:FF:DF:D8:E5:97:41:03:08:22
            X509v3 Authority Key Identifier:
                keyid:3F:C6:AB:EA:E1:B6:22:25:6D:BB:2D:8B:74:51:D2:74:90:D2:74:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P8ar6uG2IiVtuy2LdFHSdJDSdLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/70d112-0221-4b04-ac83-6123fd1f5fcd/1/P8ar6uG2IiVtuy2LdFHSdJDSdLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/70d112-0221-4b04-ac83-6123fd1f5fcd/1/P8ar6uG2IiVtuy2LdFHSdJDSdLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:d2:f4:98:3b:57:3d:ba:72:b1:d9:ec:7d:ba:57:c4:f3:24:
         7c:31:e2:cb:4e:d0:4a:ed:01:40:79:a8:97:d8:c6:bf:ad:77:
         fb:a9:b3:23:ea:5c:6e:0a:56:21:bc:6a:df:b3:2f:90:e1:41:
         42:12:6e:55:57:90:6c:e1:9e:72:20:b6:80:86:3f:09:a3:02:
         56:3f:be:45:ad:62:42:22:39:8c:ae:6a:41:da:9f:df:93:a2:
         a5:09:06:c2:d6:44:b5:dd:72:c2:bf:e4:b4:b1:52:0a:f0:06:
         23:63:70:49:48:c5:a2:e6:89:d5:5d:4f:69:02:22:ab:e9:b7:
         de:09:35:54:f0:91:20:fa:18:cb:4b:a8:03:6b:99:e0:c5:b8:
         36:4d:97:d6:44:7a:8c:48:fe:12:cc:6f:07:45:48:8b:04:e9:
         82:4d:f8:b9:f8:9c:84:67:e9:10:ef:6b:81:24:cf:5d:4c:6a:
         6b:7c:d9:34:e0:30:84:fe:8c:68:e8:8d:f8:8b:a8:1c:50:f3:
         02:e7:f3:c4:a2:55:f8:df:da:31:47:25:16:93:83:66:7d:66:
         22:c1:89:f2:8a:b2:eb:f7:6e:94:91:be:56:fb:0e:2a:42:d0:
         76:41:9e:c1:19:37:15:37:40:7b:67:f6:ac:5f:0a:75:7d:54:
         54:2b:0e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:17 2025 by rpki-client