Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
File:                     08YXj7A0kFEwrwzhzSdRVPK1m3g.mft (raw, json)
Hash identifier:          96QfcTq32PfqVOchks9z+UiC/ByigAhfsORYwju8n6I=
Subject key identifier:   08:78:9C:FB:E7:E9:A6:D1:21:9F:63:45:C8:E0:A5:83:07:CD:7B:A7
Authority key identifier: D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78
Certificate issuer:       /CN=d3c6178fb034905130af0ce1cd275154f2b59b78
Certificate serial:       0198974994A487B29C86F508C8EE57C1E731
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
Manifest number:          162C
Signing time:             Mon 11 Aug 2025 04:00:38 +0000
Manifest this update:     Mon 11 Aug 2025 04:00:38 +0000
Manifest next update:     Tue 12 Aug 2025 04:00:38 +0000
Files and hashes:         1: 08YXj7A0kFEwrwzhzSdRVPK1m3g.crl (hash: ByC3LMALjHadiPH9BGUnG7pdBTC8SAWETp47zzYfPm4=)
                          2: Z9dAkp6DWkibOyxuZSYF8JC0FP8.roa (hash: Di2cqBcEpf6hgxQLLA7v+y+JplI7ajbTFP4r/fEMeKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:97:49:94:a4:87:b2:9c:86:f5:08:c8:ee:57:c1:e7:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c6178fb034905130af0ce1cd275154f2b59b78
        Validity
            Not Before: Aug 11 04:00:38 2025 GMT
            Not After : Aug 12 04:00:38 2025 GMT
        Subject: CN=08789cfbe7e9a6d1219f6345c8e0a58307cd7ba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:39:23:63:54:da:8d:28:f7:a9:54:87:16:a3:
                    77:65:d6:91:87:73:a2:e1:63:c9:43:e8:27:27:d4:
                    64:ea:02:58:d4:13:6c:48:4b:93:71:ca:75:29:c4:
                    86:66:ab:25:15:91:b2:49:c5:bc:d9:55:58:fd:be:
                    f6:b0:99:14:9d:9c:8a:c2:83:25:83:4f:6a:83:1f:
                    67:7c:1b:20:c8:86:de:27:ec:a4:4d:64:cf:59:5e:
                    e6:dd:ea:49:62:e3:a7:7e:ca:c1:0f:5e:61:0e:27:
                    2c:2e:c0:f6:da:f5:3e:7e:f5:ec:b7:3e:6f:24:79:
                    b0:c3:d8:bf:b8:ba:b5:e8:f2:0c:2a:7d:f1:a5:f6:
                    cb:65:19:54:8f:21:ae:8f:82:44:ab:d9:82:41:da:
                    41:b8:fa:14:0f:a1:62:aa:78:db:b9:62:04:ef:52:
                    c0:a9:9b:a0:a5:51:23:0e:bb:f2:18:2e:19:24:37:
                    dd:f3:c4:e0:69:ab:9e:bc:bb:79:34:ab:bc:0c:cb:
                    56:00:9a:15:00:02:7e:27:ce:0b:38:d3:09:da:0d:
                    d9:92:92:fc:67:e7:87:4d:47:f4:b9:93:c2:75:1b:
                    15:ed:79:da:55:2f:ba:f6:44:6f:ac:59:a1:a9:74:
                    84:63:1f:cf:64:a6:ef:c3:7f:b7:6c:fe:21:8b:43:
                    f1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:78:9C:FB:E7:E9:A6:D1:21:9F:63:45:C8:E0:A5:83:07:CD:7B:A7
            X509v3 Authority Key Identifier:
                keyid:D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:a0:f9:55:7a:a7:21:45:6d:fa:e8:86:a1:46:f9:61:cc:1d:
         2a:24:95:b7:64:be:aa:28:57:55:f3:41:8e:2b:8a:69:a8:c2:
         05:ff:81:25:56:2b:52:44:f0:af:58:c5:0e:23:19:c3:6e:27:
         04:16:fe:a1:d0:6f:60:51:8f:61:1e:89:e8:6f:85:13:a7:51:
         dd:bb:bc:e9:2a:19:93:bc:fd:56:8f:58:70:59:95:58:91:a1:
         41:ee:e2:28:ea:80:e7:9b:50:07:9f:af:10:48:5e:52:86:ad:
         c5:dc:19:8a:43:74:4b:a9:f9:74:a7:17:62:ac:4a:01:3e:2c:
         2c:b1:5a:16:56:c5:77:80:57:74:1c:f2:4b:cd:6b:3b:f3:80:
         0c:86:bb:f5:d1:11:f5:17:be:e1:b7:7b:9f:33:b1:b9:de:ab:
         3b:6f:d9:bd:46:6d:dd:af:7e:ee:8c:1e:f5:d4:e7:1a:19:22:
         07:6e:24:18:21:7f:e3:7a:94:e4:e0:1e:8f:4c:0c:74:cb:ae:
         ef:ed:ad:9b:0e:39:18:2c:f8:df:c2:4f:af:1b:0b:e6:ed:dc:
         cf:78:da:ce:37:78:eb:fa:30:0b:c4:7e:dc:8a:95:46:76:9c:
         aa:9c:8f:e3:4b:c4:dc:f6:d7:3d:59:04:2a:8a:99:1c:08:83:
         bf:85:2a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:57:06 2025 by rpki-client