Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft
File:                     E8xjCawwp_wBXDNEy8gIYbTFR88.mft (raw, json)
Hash identifier:          Qt4i/68jqwdyTTEP8/1eYziFEO7kpywzX5Kn+zPkPwg=
Subject key identifier:   C8:AB:87:71:0D:EB:9E:16:13:D7:01:49:9F:42:F0:2E:0F:F4:EE:48
Authority key identifier: 13:CC:63:09:AC:30:A7:FC:01:5C:33:44:CB:C8:08:61:B4:C5:47:CF
Certificate issuer:       /CN=13cc6309ac30a7fc015c3344cbc80861b4c547cf
Certificate serial:       0198D473059006AA872F439A73891EE3C6D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 01:02:44 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:44 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:44 +0000
Files and hashes:         1: E8xjCawwp_wBXDNEy8gIYbTFR88.crl (hash: uenZvSmhEF5ZYUE3ioRDGif2vcklN1Q8Zk2LDXGNK48=)
                          2: jzVDE20GlCgVCg-KhJB_QzsLMCg.roa (hash: LaydqvlZJmK18FahUwbjtSgT6W86Q5gZmcNPgCbbqe4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:05:90:06:aa:87:2f:43:9a:73:89:1e:e3:c6:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13cc6309ac30a7fc015c3344cbc80861b4c547cf
        Validity
            Not Before: Aug 23 01:02:44 2025 GMT
            Not After : Aug 24 01:02:44 2025 GMT
        Subject: CN=c8ab87710deb9e1613d701499f42f02e0ff4ee48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:5b:c0:f7:36:8c:06:c8:19:08:c3:00:40:5e:
                    a9:6e:74:50:3d:a8:93:1a:e3:d8:3b:43:d9:78:25:
                    c2:3b:48:dc:df:c0:b4:3b:7f:e6:05:af:f6:23:d6:
                    50:bc:59:ce:e2:fa:d5:93:89:a5:a8:9d:81:01:38:
                    4b:39:3f:72:57:ae:46:7b:ce:53:a0:c8:08:cc:42:
                    72:4a:8f:dc:3f:c7:d1:2f:d1:60:d6:fb:50:43:6a:
                    02:85:91:48:1a:6c:4a:00:b8:c9:8f:c1:4e:d2:4d:
                    cf:91:f2:97:ac:52:4c:db:12:a8:5d:a7:8b:49:d3:
                    e5:ed:c1:2e:79:97:a2:04:0f:1a:cf:44:d8:c7:03:
                    3c:8b:ab:19:46:29:c0:89:b4:d9:a4:e5:f4:d8:d5:
                    92:a3:e9:7f:77:5d:4e:5d:ce:33:c3:00:96:fe:2b:
                    d8:10:88:e4:17:f8:86:1f:11:e1:87:52:8c:00:50:
                    64:8e:eb:e3:df:6f:6c:ee:53:c5:f8:01:de:1b:4b:
                    16:c6:7c:ce:5c:87:64:c1:fd:62:a6:89:06:26:c9:
                    1d:83:a4:79:20:e0:df:eb:1a:0e:02:1a:15:49:d6:
                    0b:3e:5f:9b:9a:c1:ca:be:89:ad:bf:25:4f:b2:59:
                    40:3c:8a:2d:0b:e9:d7:38:ab:1e:1d:7f:55:7e:7c:
                    3c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:AB:87:71:0D:EB:9E:16:13:D7:01:49:9F:42:F0:2E:0F:F4:EE:48
            X509v3 Authority Key Identifier:
                keyid:13:CC:63:09:AC:30:A7:FC:01:5C:33:44:CB:C8:08:61:B4:C5:47:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:0c:ac:ab:bd:d2:f6:6e:87:3f:4d:cd:4f:8c:24:b6:c4:84:
         63:a8:06:28:c1:f5:c5:9a:40:5b:ac:46:a2:8d:5d:ca:da:8d:
         d3:e0:19:4f:11:0b:d4:ff:3d:83:1f:cb:f1:43:7b:a2:da:76:
         9c:03:bb:d3:d9:98:0e:29:a4:8c:9b:ec:f0:93:c7:16:e1:81:
         98:ba:f9:c1:57:17:d1:b7:ba:15:86:55:c4:6c:4a:0e:51:ec:
         fe:63:bc:d5:eb:fe:6a:e5:c6:5b:b5:2c:3e:cd:a7:5a:35:9f:
         81:9c:b0:67:f6:b7:ad:71:f4:e0:6a:a6:9d:55:3a:51:2b:ec:
         d4:1f:28:64:14:51:48:99:f0:d2:cb:a0:63:43:1e:dc:7e:5d:
         db:64:e0:6e:16:e1:fc:e1:30:85:df:f5:e4:0e:e7:35:0e:3a:
         72:2b:d9:38:20:7c:82:c0:a1:fb:aa:44:ea:cf:ea:db:cc:22:
         80:e3:99:49:2b:98:35:40:3e:4d:55:0c:22:24:d2:e2:1c:3b:
         49:e0:e6:0d:c0:35:5e:ad:6c:b4:38:41:23:57:b9:02:ba:21:
         f5:51:4b:60:c2:28:b6:ac:a4:37:fc:bf:71:d9:d3:2d:13:a4:
         f6:2f:3c:31:31:ae:51:17:9a:f3:3f:60:80:b6:cf:6a:6f:63:
         af:5c:58:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:59 2025 by rpki-client