Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
File:                     8jgjdZZpSOIWiOi6E4OkowngVi8.mft (raw, json)
Hash identifier:          +v4m0+zrORoEBkFwiEBlchOgbccXQLoBOVxfBdXCaF4=
Subject key identifier:   FC:FC:A3:E0:7B:CE:E7:26:D7:EE:F8:19:67:DA:F0:52:63:8D:09:CF
Authority key identifier: F2:38:23:75:96:69:48:E2:16:88:E8:BA:13:83:A4:A3:09:E0:56:2F
Certificate issuer:       /CN=f2382375966948e21688e8ba1383a4a309e0562f
Certificate serial:       019890D980185D365F8C4E161FD0DA28928B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
Manifest number:          1626
Signing time:             Sat 09 Aug 2025 22:00:29 +0000
Manifest this update:     Sat 09 Aug 2025 22:00:29 +0000
Manifest next update:     Sun 10 Aug 2025 22:00:29 +0000
Files and hashes:         1: 8jgjdZZpSOIWiOi6E4OkowngVi8.crl (hash: /3QbSm4g8Dy3AhZk4xflia8kbvMTdIGV66So6tLNaks=)
                          2: K1nEMmqR-bv_HJOMVOAQTlZLbDU.roa (hash: W5Jwdvi7etvP6GxGLNbBoK0ap2sodrYQoCXcswND0as=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:90:d9:80:18:5d:36:5f:8c:4e:16:1f:d0:da:28:92:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2382375966948e21688e8ba1383a4a309e0562f
        Validity
            Not Before: Aug  9 22:00:29 2025 GMT
            Not After : Aug 10 22:00:29 2025 GMT
        Subject: CN=fcfca3e07bcee726d7eef81967daf052638d09cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:91:70:f8:b9:85:a5:08:86:1b:21:a8:8a:8e:
                    63:9a:61:1a:26:43:b1:f6:8b:30:a1:4c:c1:70:66:
                    21:d7:7f:3b:b1:28:64:19:9f:d7:3b:0a:12:e2:eb:
                    ab:5f:57:75:a7:14:6a:f0:29:b2:32:1e:f2:e7:03:
                    f0:cb:69:34:36:39:c9:9d:dc:64:9d:ba:e6:c3:61:
                    77:0c:cc:3f:96:23:54:1f:8c:33:c8:fe:81:04:5b:
                    97:b2:dd:29:d1:8e:bf:53:5b:e8:5a:39:e7:64:3b:
                    b2:e6:b0:4d:77:66:82:9b:45:c5:8b:68:ee:47:2a:
                    41:5e:55:18:55:6f:57:18:9e:87:75:1e:e8:7a:b7:
                    c1:a5:9a:5b:c0:1c:16:5b:9c:3d:11:c4:6c:2e:0a:
                    dc:16:93:39:ac:8c:c5:08:96:5c:8e:45:be:01:b0:
                    9e:21:f1:49:4f:ed:27:5b:06:df:b5:0f:f6:04:04:
                    a4:af:3f:15:62:ca:db:d3:43:b0:c4:52:89:a3:b1:
                    52:b7:fa:0d:96:87:83:94:56:9c:82:c4:f7:61:52:
                    ba:c2:3a:36:f1:d2:09:77:be:44:7b:ae:0c:51:07:
                    45:4b:89:c2:d9:51:48:0c:f9:9f:8f:8b:ba:77:f0:
                    32:1a:fb:66:7c:dd:ff:ce:53:35:2e:1b:31:bc:71:
                    2f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FC:A3:E0:7B:CE:E7:26:D7:EE:F8:19:67:DA:F0:52:63:8D:09:CF
            X509v3 Authority Key Identifier:
                keyid:F2:38:23:75:96:69:48:E2:16:88:E8:BA:13:83:A4:A3:09:E0:56:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:25:52:8e:cf:e7:70:39:45:85:70:63:5e:1c:aa:6f:c4:da:
         11:0f:d2:78:9b:5e:c9:52:44:b4:95:87:2d:3d:83:63:55:3f:
         53:1b:48:5e:ab:30:bf:fa:dd:41:52:04:e5:83:97:6e:bf:7a:
         0a:74:d2:1c:b1:40:39:f5:fd:0f:22:88:7e:5f:e5:19:ac:50:
         3c:7e:53:df:df:5e:49:b5:63:ff:cc:1e:61:41:38:e6:f0:23:
         b3:57:ee:65:5f:eb:5f:91:8b:b2:ad:02:3c:59:e5:95:9a:79:
         af:76:52:4b:b8:b7:93:e7:5c:0f:fe:a8:c9:8d:b2:2e:bb:16:
         e4:1d:93:05:02:0e:54:ec:e6:34:9c:16:c5:e6:5d:33:97:26:
         1c:2e:47:2d:1d:d6:30:f3:b1:2f:5c:a0:f1:b3:54:9f:1c:d0:
         7b:d1:c2:29:60:b1:d2:15:66:44:58:05:30:09:4e:ce:ea:ce:
         60:47:6d:e1:75:09:51:c2:f1:3c:5e:61:2f:df:74:18:e9:17:
         6e:09:60:ce:dc:61:33:53:5c:59:45:08:28:fc:05:f9:33:50:
         5e:89:63:d8:31:b0:03:5a:19:0d:e3:07:fd:4c:df:74:f6:9a:
         4c:ff:b6:97:ba:ca:43:57:5a:56:cf:4b:c6:61:19:d7:76:2e:
         c8:b0:c1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:47:10 2025 by rpki-client