Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
File:                     Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft (raw, json)
Hash identifier:          EeSa/3Q/bf+nZi57IMlKdLed3LWjspFrlYvCiMmUGuk=
Subject key identifier:   DF:9D:28:78:08:C5:CB:2C:EA:78:F0:67:A9:B8:7C:83:D2:5F:F3:B5
Authority key identifier: 42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
Certificate issuer:       /CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Certificate serial:       01987FE724974E91C5AAA61708DAFA7840DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
Manifest number:          08E8
Signing time:             Wed 06 Aug 2025 15:01:51 +0000
Manifest this update:     Wed 06 Aug 2025 15:01:51 +0000
Manifest next update:     Thu 07 Aug 2025 15:01:51 +0000
Files and hashes:         1: 7k7oD7LKN8vmFjmpoHJyZ78ZDsM.roa (hash: 3i6TmeuMJzO7qcqrnXXMfF/eObFiTQ7d5LzNvTE3yPI=)
                          2: Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl (hash: 2s7OUS66DnMIA6nNVecvxptwEkemS3WLOCGm2JBaJLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:e7:24:97:4e:91:c5:aa:a6:17:08:da:fa:78:40:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
        Validity
            Not Before: Aug  6 15:01:51 2025 GMT
            Not After : Aug  7 15:01:51 2025 GMT
        Subject: CN=df9d287808c5cb2cea78f067a9b87c83d25ff3b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c6:db:31:1b:66:0f:b4:c9:2d:31:62:5f:ff:
                    a9:fb:1d:38:24:33:35:e8:62:79:bb:6c:bc:7a:2a:
                    e8:cc:35:ba:a4:05:df:cb:26:0d:fd:59:50:f5:b0:
                    fa:c6:30:8a:0b:ea:ce:71:00:df:2c:e9:ec:3c:80:
                    6a:30:17:e3:4a:e2:7b:00:80:f6:79:fb:68:51:40:
                    1f:ff:d7:f5:d6:5a:c2:0f:73:35:6a:ba:fe:4f:0d:
                    84:71:09:8e:fd:c9:47:44:69:ce:2d:af:14:95:09:
                    4e:07:d1:9d:12:0f:15:63:02:24:3d:57:cb:53:c8:
                    3b:c0:4c:dd:e9:b7:73:19:9d:c4:56:3a:70:b2:00:
                    d9:0b:b0:55:1c:1c:c2:37:cd:b3:8a:87:de:d4:1f:
                    92:e0:0e:fd:26:11:01:2c:17:72:99:8b:c9:d5:24:
                    5f:d1:8c:43:a6:7a:a6:d9:63:70:3e:7f:c9:d5:d9:
                    ff:3e:e3:95:60:02:24:39:73:94:17:3a:f0:ed:9d:
                    73:9a:06:66:2c:ef:11:51:e9:20:30:95:39:2d:0c:
                    6d:da:36:30:d6:1c:78:93:ad:8c:1f:6e:a0:ce:51:
                    2b:6b:08:25:f8:a2:6e:52:d9:f4:f3:57:80:14:3d:
                    30:71:69:c1:dd:ad:e4:54:09:89:0f:1b:46:7b:c4:
                    95:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:9D:28:78:08:C5:CB:2C:EA:78:F0:67:A9:B8:7C:83:D2:5F:F3:B5
            X509v3 Authority Key Identifier:
                keyid:42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:5f:aa:14:c2:b2:bb:68:0c:01:d9:83:e7:d8:61:f6:16:07:
         46:30:56:86:8c:0c:92:d6:7b:ae:55:1e:d9:98:41:7d:9d:8d:
         66:ae:2a:e8:c3:b5:d5:3a:3d:53:a6:15:94:fd:e7:04:12:ea:
         88:bf:79:22:71:21:68:5c:83:db:8f:e3:6a:f8:4b:24:27:ab:
         64:fa:8b:bc:b9:85:e3:55:28:03:39:77:94:a8:75:5f:dc:6f:
         7f:cb:9a:b5:22:ee:93:82:ee:80:56:bc:51:f0:c8:60:12:6d:
         38:a7:c2:16:19:5d:cf:22:68:b9:83:a0:c5:ed:19:13:14:e1:
         f7:84:e3:fe:31:37:b6:20:28:d8:c6:7c:76:b9:6c:3b:72:cf:
         18:7c:f4:dd:8c:24:96:cb:b2:7c:91:b5:fb:1e:32:45:c4:0a:
         c4:e6:eb:e0:51:c3:4d:d9:70:68:87:ae:0d:bf:7a:59:f5:b2:
         44:e5:37:28:43:f7:da:c4:f0:15:d1:e2:61:0c:93:a2:70:87:
         15:4a:41:0a:f4:92:4d:be:68:5a:12:52:fc:e1:87:e8:11:86:
         de:1a:a5:e2:c9:e6:67:24:25:f5:09:9e:29:e4:7b:b3:49:17:
         80:3f:35:7f:65:c9:5f:0d:5f:18:83:76:30:0a:d6:34:d9:c3:
         33:ce:96:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:32:30 2025 by rpki-client