Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.mft
File:                     8mag-YbyGUXIDYMVZ7ryliAQetw.mft (raw, json)
Hash identifier:          tHqLxcZW86lVTddBcMEGHD2InOT77SEHH0mOYerzvPs=
Subject key identifier:   61:CB:A7:FB:7E:60:F1:59:74:D8:1C:A5:9F:F7:A3:CE:42:5D:59:CD
Authority key identifier: F2:66:A0:F9:86:F2:19:45:C8:0D:83:15:67:BA:F2:96:20:10:7A:DC
Certificate issuer:       /CN=f266a0f986f21945c80d831567baf29620107adc
Certificate serial:       01988F5940E2EC2570662B3EDE319DD71CF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mag-YbyGUXIDYMVZ7ryliAQetw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.mft
Manifest number:          1625
Signing time:             Sat 09 Aug 2025 15:00:47 +0000
Manifest this update:     Sat 09 Aug 2025 15:00:47 +0000
Manifest next update:     Sun 10 Aug 2025 15:00:47 +0000
Files and hashes:         1: 8mag-YbyGUXIDYMVZ7ryliAQetw.crl (hash: TwBnEFaYUZbEt//9wYlGcyE/O+1j74tTOqq4DbLPHKo=)
                          2: M5jtoM41Y8zxhgX6892Azn7CbgI.roa (hash: SsoCa6KU5R2ocIrHDaK8+DXGCTEtvLA0sldxtO1jaaY=)
                          3: NhXAxr82j13CORIdeWDl9PifhbY.roa (hash: LWTp4X6BWg45hL0vGetxJ41kPYBDS+pDAAij0HwwDrY=)
                          4: xwKRlfuar5Ok0_Vuih0mv8ent54.roa (hash: ofzw4+EAI9dgA5ztmD8H8K5/VJLMCGrjBng1uGirlUw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8mag-YbyGUXIDYMVZ7ryliAQetw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:59:40:e2:ec:25:70:66:2b:3e:de:31:9d:d7:1c:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f266a0f986f21945c80d831567baf29620107adc
        Validity
            Not Before: Aug  9 15:00:47 2025 GMT
            Not After : Aug 10 15:00:47 2025 GMT
        Subject: CN=61cba7fb7e60f15974d81ca59ff7a3ce425d59cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:45:af:54:00:1b:54:3f:bb:45:5e:ab:09:ac:
                    b0:49:6b:d5:62:55:78:c2:cf:1e:32:d7:91:1a:22:
                    01:5b:74:92:ab:9b:20:10:2b:e4:51:c9:bf:13:bf:
                    57:89:65:29:fb:b1:98:7e:52:7f:a3:da:99:10:18:
                    b9:a7:4f:ba:fe:95:5b:a0:ae:d2:cb:64:5b:62:9f:
                    0b:ae:24:26:92:89:90:cc:2b:df:3e:06:ac:c8:37:
                    d0:9c:78:fd:20:98:5c:d9:5a:f7:72:b6:37:ad:ce:
                    7f:57:6a:bc:dd:05:e8:8a:1f:70:00:64:5a:60:07:
                    0b:b4:4b:a2:14:6b:a9:3f:e5:28:ad:4e:8b:ae:5d:
                    bd:5e:26:d2:9e:99:6c:61:be:20:12:8e:2a:bd:b6:
                    0e:b1:5d:bb:93:b9:4b:84:7f:7a:08:b4:17:68:17:
                    dc:81:f8:38:a0:d9:e8:bb:30:de:06:a5:ec:8e:dc:
                    ae:a8:79:e0:9d:9b:d6:7e:63:40:c3:53:c7:f3:04:
                    39:a2:11:a9:ed:56:51:07:26:1c:cc:ea:d9:a5:5d:
                    dc:d7:5c:dd:33:2a:05:0c:98:8c:b3:c7:bc:61:22:
                    b1:48:7f:f8:00:c5:d0:f0:2d:a8:41:ef:30:2c:99:
                    0c:9a:0f:13:6b:82:57:0a:9d:04:b9:fa:49:4f:4c:
                    95:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:CB:A7:FB:7E:60:F1:59:74:D8:1C:A5:9F:F7:A3:CE:42:5D:59:CD
            X509v3 Authority Key Identifier:
                keyid:F2:66:A0:F9:86:F2:19:45:C8:0D:83:15:67:BA:F2:96:20:10:7A:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mag-YbyGUXIDYMVZ7ryliAQetw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:02:ac:d1:bf:41:47:3d:35:22:0a:df:ef:1a:7e:e0:bb:8e:
         a0:01:44:b4:86:79:a9:b4:17:51:c4:b2:cf:9b:bc:fc:46:43:
         41:1e:c1:61:bb:c3:2d:bb:6f:00:9a:64:b0:8e:4b:0d:81:4a:
         1f:a9:43:45:57:1b:72:f2:7d:4e:f4:a4:c0:e5:64:56:67:9b:
         9a:76:80:42:d9:9c:eb:86:5e:36:4b:3d:92:ce:7d:e1:7f:b0:
         24:80:29:a6:c2:01:2b:b8:f7:41:98:43:0f:13:0c:90:75:48:
         1b:2d:d4:60:44:c0:b1:ff:27:c4:51:96:4c:2b:d4:7b:fe:b3:
         40:47:b2:f1:d6:72:0f:01:97:aa:ab:6f:86:96:fc:44:8c:64:
         78:df:19:18:2a:a5:56:0e:46:16:08:26:b5:0a:2d:96:25:be:
         50:8e:ba:04:3b:dc:02:de:92:31:1e:26:c0:3b:3c:43:97:f8:
         81:38:08:ed:46:70:2b:c5:74:09:d0:84:cb:06:bc:01:32:cd:
         36:50:43:fc:66:5b:96:34:e3:44:6d:f4:10:af:17:33:94:18:
         04:88:1e:94:61:ac:82:96:ef:77:9e:b0:8d:c7:b9:9a:6c:d8:
         c9:a2:fe:16:15:d7:eb:de:cb:6a:29:99:87:c9:07:f6:f1:a2:
         b2:57:a1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:49:23 2025 by rpki-client