Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
File:                     iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft (raw, json)
Hash identifier:          Fzjk9rDBI+Srbbx3IC83E5YMGz4Pjqu5c9Z6afNyIuE=
Subject key identifier:   9F:78:54:D2:EA:E1:1E:58:96:2E:28:EA:DD:18:18:90:2E:AB:47:98
Authority key identifier: 89:2F:3F:F3:C0:A1:FF:B3:AF:20:F5:B9:5E:8C:B6:4C:88:04:3F:39
Certificate issuer:       /CN=892f3ff3c0a1ffb3af20f5b95e8cb64c88043f39
Certificate serial:       019880F912A8E5ABEBF42C627A8287A0A4D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
Manifest number:          88
Signing time:             Wed 06 Aug 2025 20:01:03 +0000
Manifest this update:     Wed 06 Aug 2025 20:01:03 +0000
Manifest next update:     Thu 07 Aug 2025 20:01:03 +0000
Files and hashes:         1: FN5Ke6qZ9WFTebO_qSnsGPrtdwA.roa (hash: znT88sYfk6NGdvoBku5OfzDNqhRT8YmCdSbEF1DvoG4=)
                          2: iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl (hash: SVHtdAA1C16NJII5mI0mdoGlwyu1uOobw8W9ip8tsU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:f9:12:a8:e5:ab:eb:f4:2c:62:7a:82:87:a0:a4:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892f3ff3c0a1ffb3af20f5b95e8cb64c88043f39
        Validity
            Not Before: Aug  6 20:01:03 2025 GMT
            Not After : Aug  7 20:01:03 2025 GMT
        Subject: CN=9f7854d2eae11e58962e28eadd1818902eab4798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2f:53:f0:0a:7f:c4:e5:c0:2f:ec:cb:73:ab:
                    09:71:1f:eb:8c:93:88:18:ab:f6:01:b6:0a:24:db:
                    b7:a5:06:94:9e:3b:a6:0c:a0:dc:a0:65:3e:7c:b2:
                    ce:b8:c3:02:14:fe:b5:54:3e:9f:7a:5a:04:8b:c0:
                    74:9b:fa:9c:62:72:2a:9d:b1:6c:6c:7d:ea:9f:b4:
                    82:ea:a8:88:32:11:7b:1d:36:ac:60:bf:15:00:d3:
                    24:b4:e8:a2:b4:00:60:57:c7:87:32:ac:ce:44:45:
                    88:8a:23:bf:90:bc:43:a7:ac:5e:7a:76:d3:80:fd:
                    fa:3b:6f:c5:9f:86:47:f0:bc:0c:fa:78:c4:9a:6d:
                    84:c4:75:81:e2:4c:ac:ac:4e:13:e6:5a:b0:86:e1:
                    47:78:7a:63:06:f3:a1:11:46:ff:a3:ee:4d:38:6b:
                    cc:2d:1e:0e:fb:a4:78:de:c9:20:f5:7e:89:da:e5:
                    03:99:22:c0:80:c2:2d:11:7b:a0:be:19:c3:dd:56:
                    6f:ad:f6:c3:ca:51:a0:5e:e0:92:c0:7c:3f:94:fe:
                    4b:b5:cc:2a:5e:06:c6:76:66:ba:dc:1d:69:bb:ec:
                    63:56:f4:29:34:de:a2:82:ed:04:4d:10:45:37:be:
                    dd:4a:77:ac:38:b5:d4:67:4e:f4:3e:dd:15:c5:1f:
                    13:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:78:54:D2:EA:E1:1E:58:96:2E:28:EA:DD:18:18:90:2E:AB:47:98
            X509v3 Authority Key Identifier:
                keyid:89:2F:3F:F3:C0:A1:FF:B3:AF:20:F5:B9:5E:8C:B6:4C:88:04:3F:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:9c:74:bc:78:60:1f:79:b0:10:38:a4:35:2b:e6:10:94:35:
         03:7f:fa:db:50:2b:2c:52:da:90:a9:54:ce:52:ea:8a:6b:84:
         98:34:e2:be:ac:3d:fc:b8:43:e6:60:c0:14:e9:69:19:45:74:
         0e:6b:61:f4:d8:fd:12:09:06:04:ad:30:d6:c3:73:18:73:d0:
         5d:ae:9b:06:af:dc:b0:25:b1:40:e6:93:ce:98:66:83:54:64:
         21:60:5b:d9:5c:38:2c:8b:e3:9e:2a:c2:14:ec:9e:18:ff:49:
         99:86:1c:7e:79:ad:ca:1e:65:d0:0f:cf:87:0f:df:d1:a3:cb:
         6b:54:ff:9c:73:77:0d:a0:b7:1e:8b:2a:63:58:33:6a:f0:ec:
         63:aa:94:30:eb:17:87:88:48:9e:88:71:be:10:d9:e2:8b:bc:
         09:cf:82:49:30:8c:90:f8:67:cb:58:10:d0:6e:00:c0:ff:db:
         79:eb:ee:64:5b:ed:b8:5d:4b:24:76:a0:47:92:13:aa:ae:b6:
         fe:88:b8:7a:9f:eb:fe:ba:97:75:8f:d7:32:f0:3b:46:92:d4:
         23:df:ec:c9:f9:f4:46:bc:4b:44:56:d2:37:92:1a:e4:34:73:
         a1:df:54:0e:5d:51:68:e6:2b:7a:a3:a5:a5:3b:24:32:d6:e5:
         ec:19:e9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:26:30 2025 by rpki-client