Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
File:                     8_N8e7MVIGk0AdPGVyftXKpx3kM.mft (raw, json)
Hash identifier:          WgovIeXq35CiMAfANJKSV/GVnkZlfKXyZBpXB7IUh/A=
Subject key identifier:   76:65:7B:66:35:E8:DB:40:25:4A:6D:B2:B7:7B:B8:71:84:1D:DC:24
Authority key identifier: F3:F3:7C:7B:B3:15:20:69:34:01:D3:C6:57:27:ED:5C:AA:71:DE:43
Certificate issuer:       /CN=f3f37c7bb31520693401d3c65727ed5caa71de43
Certificate serial:       019873E2CF9FCE1436A73FBFBC4DD6E4263D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
Manifest number:          1617
Signing time:             Mon 04 Aug 2025 07:01:40 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:40 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:40 +0000
Files and hashes:         1: 8_N8e7MVIGk0AdPGVyftXKpx3kM.crl (hash: 5WAcYi7FfEjwpt124z4nCwc9D0vesg5spaX1PIy9ncE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:cf:9f:ce:14:36:a7:3f:bf:bc:4d:d6:e4:26:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3f37c7bb31520693401d3c65727ed5caa71de43
        Validity
            Not Before: Aug  4 07:01:40 2025 GMT
            Not After : Aug  5 07:01:40 2025 GMT
        Subject: CN=76657b6635e8db40254a6db2b77bb871841ddc24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e4:f7:1e:fc:87:7b:90:d3:cd:82:e0:8b:7e:
                    90:2b:62:c0:d4:09:3c:aa:9d:f1:33:ef:c0:08:af:
                    fa:4a:5c:20:ce:00:78:a7:d5:df:04:f1:fe:fc:ae:
                    72:2b:6f:bb:f3:5c:d6:67:e1:93:e6:7c:05:d8:dc:
                    e0:a6:1a:37:30:84:d6:42:37:b0:85:33:35:42:6e:
                    21:31:99:d4:44:38:dd:41:2f:f6:98:8d:d1:b7:a2:
                    4f:37:db:36:dc:1e:d6:40:b1:41:f1:3c:61:b4:9f:
                    e2:db:ad:b1:e7:7a:c0:14:ee:7d:22:30:77:6d:27:
                    f3:41:5a:90:e4:3d:05:b9:fd:43:4a:8e:8b:02:eb:
                    04:bb:dc:4b:73:ac:70:ee:2f:32:d9:e3:55:db:a4:
                    83:10:2b:5b:b4:7e:c7:1b:a3:7e:96:ed:06:06:8b:
                    3d:e3:89:be:2b:0d:09:ad:3b:80:2a:4d:c8:2e:08:
                    a8:c6:7e:4a:10:a1:db:19:ce:30:29:6b:82:61:66:
                    05:98:c6:4c:83:4e:61:7a:12:5e:d1:7e:e5:3d:6d:
                    bf:27:40:27:15:8d:06:b3:46:50:b8:6a:bb:37:9d:
                    96:dd:f4:57:fb:5a:dc:bf:a4:21:ce:2b:65:bd:ea:
                    b0:20:ca:b1:81:10:20:3b:ea:e4:55:13:2e:e4:8a:
                    d5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:65:7B:66:35:E8:DB:40:25:4A:6D:B2:B7:7B:B8:71:84:1D:DC:24
            X509v3 Authority Key Identifier:
                keyid:F3:F3:7C:7B:B3:15:20:69:34:01:D3:C6:57:27:ED:5C:AA:71:DE:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:57:da:70:5a:a8:63:a6:9b:4c:c2:2a:4c:67:f3:2a:e4:6d:
         37:8e:af:5d:c2:42:8f:dc:a7:2e:10:5f:ee:ef:84:f6:cf:7a:
         6e:89:85:b4:70:2b:51:c1:cf:00:5b:29:e8:21:2f:7a:1b:8c:
         7c:e4:b6:79:05:52:ab:67:65:c6:f7:3b:24:b6:52:03:ad:04:
         fc:7a:eb:ea:c6:2e:30:7c:7c:39:db:a0:a4:f6:19:d5:43:32:
         ae:51:0d:9f:75:3f:25:cb:be:7c:db:78:9f:b6:a2:2e:90:d6:
         af:48:5e:87:af:67:ac:1a:dd:b2:52:be:76:ca:f5:71:24:b5:
         80:d4:bd:f8:12:14:0a:47:13:3e:0d:16:e5:22:c2:28:66:35:
         04:6e:05:c4:42:9e:ed:3d:83:74:39:df:bf:8d:83:c5:c6:a5:
         f3:e2:9a:dc:66:c8:e2:38:b7:6e:e5:e2:fe:de:d6:49:96:d2:
         d6:d5:ae:0c:37:1d:98:b7:76:60:3e:9e:15:07:f0:60:fb:95:
         32:6a:c2:45:cf:56:4e:7a:f6:89:6e:2d:17:7f:21:73:c2:21:
         42:3f:04:50:7d:84:eb:e4:6c:e4:40:b4:c3:8a:0b:d6:c7:c7:
         19:1e:02:e3:32:09:9c:24:a4:7a:9b:fc:d5:51:7b:c6:64:fe:
         c3:b1:77:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:50 2025 by rpki-client