Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
File:                     s8k12EMWos9WpllXttebevgRpwc.mft (raw, json)
Hash identifier:          CDp+S68BB4EbNQhzZuI5X3P9//dQ9Nq2LlIMIm2xv/Q=
Subject key identifier:   5A:59:7B:69:C9:09:9A:53:B6:09:AA:4E:00:B8:E9:5A:9E:2D:F8:E5
Authority key identifier: B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07
Certificate issuer:       /CN=b3c935d84316a2cf56a65957b6d79b7af811a707
Certificate serial:       01987B9BC593E863F8E9B1494992EA330AE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
Manifest number:          090D
Signing time:             Tue 05 Aug 2025 19:01:02 +0000
Manifest this update:     Tue 05 Aug 2025 19:01:02 +0000
Manifest next update:     Wed 06 Aug 2025 19:01:02 +0000
Files and hashes:         1: s8k12EMWos9WpllXttebevgRpwc.crl (hash: kODlEupXbZmRxdy8BcvIQsHDpZtIctH9Co2lHfF932M=)
                          2: udh3xGDNJXhOcF-5H4cWJu3ktiY.roa (hash: ocPGT+ldVCPhS+IwJUZcLKrDX+p6H2fIq+UgAUlkPrU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 19:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:9b:c5:93:e8:63:f8:e9:b1:49:49:92:ea:33:0a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3c935d84316a2cf56a65957b6d79b7af811a707
        Validity
            Not Before: Aug  5 19:01:02 2025 GMT
            Not After : Aug  6 19:01:02 2025 GMT
        Subject: CN=5a597b69c9099a53b609aa4e00b8e95a9e2df8e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:01:cc:48:cb:53:70:fd:60:a6:72:f8:e4:10:
                    70:a0:3c:c9:a7:ea:10:b9:7a:35:d7:c4:b2:72:98:
                    ff:e2:fd:ea:f1:21:c7:dc:99:bd:7e:cd:a5:09:3d:
                    ef:78:a6:33:1f:a2:5f:8e:5a:90:75:ae:df:77:ba:
                    14:1c:d0:2f:d6:cb:e3:f4:9a:0d:0c:a2:fa:41:64:
                    a9:8c:1a:53:c1:28:ea:4d:0f:96:fd:75:94:a9:5a:
                    6c:aa:03:8d:79:3e:42:52:7b:44:4e:3f:75:55:e7:
                    bd:93:96:99:df:9c:af:c2:e7:27:98:2d:86:2c:5a:
                    55:04:cf:ab:89:40:33:2a:1c:11:20:bf:aa:98:3d:
                    b5:f2:f3:04:2e:81:c5:fe:17:5f:37:e8:59:bf:fd:
                    c5:3c:49:df:7d:e7:12:8d:68:0e:be:10:ad:3a:46:
                    b2:16:ed:19:a8:0b:f0:7f:28:84:f3:ac:6a:7c:6c:
                    bf:75:53:b4:dc:ae:b4:d8:04:b6:21:37:2d:73:0d:
                    6c:7b:94:1f:be:e8:ac:cb:20:83:69:76:25:ad:a4:
                    2f:2b:e7:17:ce:dc:92:34:23:db:0e:3f:60:6f:2d:
                    42:20:63:1c:80:c0:e1:ec:1f:b3:85:08:43:0b:f5:
                    c4:2a:b6:24:ff:41:c0:3a:5c:3a:71:c2:e4:4e:a5:
                    9b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:59:7B:69:C9:09:9A:53:B6:09:AA:4E:00:B8:E9:5A:9E:2D:F8:E5
            X509v3 Authority Key Identifier:
                keyid:B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:49:52:81:8d:06:89:64:1b:d1:dd:a8:d2:a1:52:62:c1:2a:
         f8:aa:a1:4f:ee:f5:8d:31:1e:72:a8:60:63:90:29:d2:ef:84:
         8e:82:24:6d:6f:57:bf:2c:17:7b:2e:53:6a:64:3f:f3:06:f5:
         91:a0:67:59:0c:d6:7b:eb:81:b1:ad:d1:07:05:40:f8:b9:d6:
         9e:ad:27:3b:4f:85:b0:35:2c:ed:4e:9d:b7:5c:83:91:ce:f3:
         e6:19:2f:ef:b9:18:1d:31:7c:bc:1e:93:92:36:e8:50:c5:6c:
         bd:b1:6b:93:c7:9f:91:90:a2:b6:a3:eb:2e:2a:9d:98:78:c2:
         a3:50:10:03:b2:4e:0a:19:dc:7f:d2:7b:40:29:2a:b7:b9:8f:
         65:8d:46:00:39:9b:ee:8d:53:d1:8b:c6:4d:5c:b5:de:ab:6a:
         0f:b7:83:dd:5f:3e:9a:0e:1a:46:ce:08:0f:79:10:0e:f7:a5:
         ff:15:da:1e:17:96:54:63:35:0c:0d:44:56:27:52:72:97:0e:
         10:fe:e1:ad:d2:c4:21:04:30:e6:84:dd:13:1d:fd:c5:f0:fc:
         6f:3c:4e:6d:ad:f1:74:2a:84:7a:bd:07:e0:98:ad:1d:df:59:
         a0:c1:a1:12:7c:aa:0e:02:88:6b:f2:3f:f3:45:60:96:7e:36:
         41:d3:6e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:05:17 2025 by rpki-client