Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
File:                     8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft (raw, json)
Hash identifier:          a1BRs1/xnatuG60y8dHp8/qXB9PYWTjvY4HNX8I6/Rc=
Subject key identifier:   F4:AD:E0:B7:D4:B0:A4:31:AF:85:DE:53:E6:48:F4:7A:B7:56:79:61
Authority key identifier: F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
Certificate issuer:       /CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Certificate serial:       01988B45AFE34AE4B438D503FDEA314B3F85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
Manifest number:          0D1A
Signing time:             Fri 08 Aug 2025 20:00:56 +0000
Manifest this update:     Fri 08 Aug 2025 20:00:56 +0000
Manifest next update:     Sat 09 Aug 2025 20:00:56 +0000
Files and hashes:         1: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl (hash: 1o3IHoOhAXHevzifkMT3Nc1VfWwRcZjLXwpoeWyLdBg=)
                          2: oQ6iu5R4Fpm0Yjxuw1qLXncI4SY.roa (hash: H/akZoh4Ps4IHkjkrhcdXyi2oc0+hPspNWAd57bgzLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:45:af:e3:4a:e4:b4:38:d5:03:fd:ea:31:4b:3f:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f145d44a1ee05853cd5892654334b1f21ce826d4
        Validity
            Not Before: Aug  8 20:00:56 2025 GMT
            Not After : Aug  9 20:00:56 2025 GMT
        Subject: CN=f4ade0b7d4b0a431af85de53e648f47ab7567961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6f:c5:2e:2a:2f:05:3e:d0:fa:75:7c:d9:9f:
                    d3:a9:8c:b9:07:01:01:a5:02:c1:e9:48:db:18:7a:
                    ac:c6:f9:fb:bd:b5:70:db:e7:35:3a:22:83:63:a6:
                    84:9d:ee:d8:7f:53:7e:0c:90:1e:ca:7f:27:d7:d4:
                    eb:b0:0d:7b:80:ba:cb:c7:a0:4f:62:91:80:8b:1f:
                    45:67:15:cb:97:a3:2d:f4:e3:f3:c5:79:d0:38:8b:
                    1e:2d:dc:34:aa:3c:4f:54:7c:81:a5:27:93:cf:8d:
                    07:fd:59:19:49:3b:4a:24:2c:50:3e:21:0f:3b:6b:
                    44:09:f4:50:43:64:fe:ed:ea:cf:f4:2c:3f:cb:74:
                    e6:0d:b5:84:aa:b0:1a:bd:18:9f:46:2b:40:55:95:
                    54:21:6e:e2:0f:4f:33:09:d3:db:48:fc:e7:f1:2d:
                    b8:87:43:b2:52:f7:13:13:9c:de:e9:f9:31:4c:10:
                    d9:55:96:73:d6:0d:b1:39:a2:6d:ca:17:f2:e4:d8:
                    e6:07:cf:a3:eb:39:db:f5:03:ad:d2:b6:d0:29:29:
                    b9:1f:43:e5:68:13:ad:41:9d:fb:85:0a:fd:5d:88:
                    d1:0d:5a:99:85:92:e9:fe:59:40:72:9e:fa:62:24:
                    db:0d:37:09:5d:bd:99:0a:0a:14:9c:1d:ec:2a:3a:
                    f4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AD:E0:B7:D4:B0:A4:31:AF:85:DE:53:E6:48:F4:7A:B7:56:79:61
            X509v3 Authority Key Identifier:
                keyid:F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:71:db:f7:06:fd:35:4c:1a:89:a9:76:45:d4:39:a4:d1:a2:
         84:58:ac:63:0c:a2:24:42:22:9d:91:39:3d:16:fd:e7:37:7f:
         e2:d5:20:1d:5a:60:3c:f5:cd:1e:e4:bc:6a:74:aa:a8:25:b7:
         f7:4f:d6:30:11:bf:53:87:43:1d:08:b3:4b:fc:a5:e6:18:39:
         c5:22:e2:14:9f:7c:8b:2c:1c:4e:a5:02:65:5e:81:01:13:3e:
         a1:4b:f4:62:cc:1a:43:c4:51:94:5c:27:3e:82:fe:4d:6d:61:
         77:76:13:45:9f:61:7a:3e:cb:3d:52:16:00:e5:96:6a:95:cf:
         9a:ae:08:90:46:8d:27:29:70:ea:0a:19:86:20:c7:7a:09:55:
         cc:45:78:ff:e2:61:28:07:e8:35:b3:23:36:da:a6:cc:40:b4:
         1c:a7:0e:27:2e:67:c4:17:6b:82:f1:9a:7e:6c:12:57:7c:d8:
         8b:80:e8:cc:5f:cf:54:46:64:ea:3e:bf:0b:e6:43:a5:f7:90:
         42:1d:08:dc:b1:8a:9e:3e:86:ac:a1:4b:da:57:95:bb:3f:7f:
         df:0f:d1:6a:fc:eb:89:77:b1:40:5f:d7:b2:0e:dc:56:25:71:
         02:c4:05:eb:50:ed:80:6f:34:c8:26:85:c4:62:d7:8f:25:c0:
         4e:9c:20:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:44 2025 by rpki-client