Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
File:                     8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft (raw, json)
Hash identifier:          L/TvQXfaeCxw46HuOphbyaR6VBgUwmr8025z75xXWeo=
Subject key identifier:   0F:3B:C8:0F:80:11:4F:1E:4B:70:71:54:F9:29:8A:08:4A:F6:D7:05
Authority key identifier: F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24
Certificate issuer:       /CN=f1af8bb98e405539ea983384fafa82b2b4b71724
Certificate serial:       0198733CF047E69C3F6458EC549A70C0D4E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
Manifest number:          1618
Signing time:             Mon 04 Aug 2025 04:00:29 +0000
Manifest this update:     Mon 04 Aug 2025 04:00:29 +0000
Manifest next update:     Tue 05 Aug 2025 04:00:29 +0000
Files and hashes:         1: 8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl (hash: 9kvUhPFg7+n5OXQQe3M+JpzJv5MYNf0bFgvHDYIdP2g=)
                          2: eGF4PY_wgfKdtXUANezmT92NTGM.roa (hash: 05Pk1BDJWHJV0SJRPVmkmFIh7w5FFlCRro3lX7bPWNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3c:f0:47:e6:9c:3f:64:58:ec:54:9a:70:c0:d4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1af8bb98e405539ea983384fafa82b2b4b71724
        Validity
            Not Before: Aug  4 04:00:29 2025 GMT
            Not After : Aug  5 04:00:29 2025 GMT
        Subject: CN=0f3bc80f80114f1e4b707154f9298a084af6d705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:05:5c:51:ce:11:2b:7a:63:9c:98:a5:d4:72:
                    0c:18:98:cd:72:1a:57:96:7e:2a:e4:4b:e2:fd:fe:
                    6e:e1:49:4a:5a:c8:ef:b6:ea:63:2f:47:cd:03:b1:
                    57:92:e2:18:db:c4:6d:8b:26:2d:3f:f3:5d:ce:37:
                    f6:4d:53:5e:61:70:1d:a5:ce:5f:8b:9a:fb:78:b5:
                    e3:e5:9b:14:7b:6e:d2:e2:d8:fd:c2:af:2c:3a:58:
                    5b:8f:bb:7d:9b:db:17:72:67:da:ab:33:7b:91:8e:
                    df:73:5c:38:6c:6e:bd:6b:2b:63:60:44:ed:52:4b:
                    34:33:93:cb:4f:4f:70:43:7d:e0:48:b4:44:61:fd:
                    e7:ae:cc:1c:fb:e8:59:1e:67:25:19:fb:83:c8:22:
                    7a:21:11:4b:9d:af:19:74:a0:1d:76:37:5b:36:40:
                    37:b7:40:6c:38:ed:04:76:31:00:f2:ae:64:50:00:
                    9e:2c:8a:1c:4e:e9:cf:2e:91:a8:e6:4c:ca:04:f3:
                    7f:0a:e3:bd:1e:d6:e8:31:30:61:c1:b7:1c:d4:64:
                    78:51:39:2c:3e:fe:8d:ee:1b:39:e9:70:ac:99:ec:
                    73:c5:5c:d8:68:9d:f8:9d:37:3a:dc:f7:43:7a:df:
                    27:52:97:00:1b:6d:c2:e6:b5:5f:df:6a:f9:d3:49:
                    28:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:3B:C8:0F:80:11:4F:1E:4B:70:71:54:F9:29:8A:08:4A:F6:D7:05
            X509v3 Authority Key Identifier:
                keyid:F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:5c:29:71:e6:2e:cd:9c:95:21:27:71:b1:4d:3e:e5:b4:b5:
         7b:66:1f:c2:10:6a:ec:09:71:92:23:87:09:4c:f3:8e:7d:71:
         2c:9c:1f:b2:19:d3:a0:51:a0:64:db:e7:9a:16:84:a5:eb:e0:
         36:2e:d6:d5:ff:5b:38:1d:b3:87:74:ed:0a:06:9c:d6:f6:9d:
         5b:fe:b1:6a:cb:51:18:46:0d:02:3b:7c:bd:ee:fa:ae:7d:7a:
         8e:bb:45:ae:df:03:93:ac:87:32:83:a7:fa:a4:18:e7:d2:36:
         34:0d:73:f4:5b:35:7c:2f:23:87:71:0e:f7:11:9a:29:22:72:
         b3:df:17:a1:1a:be:38:06:44:f9:79:85:52:6b:ef:d6:08:de:
         33:e3:a8:85:48:87:4f:8c:0a:74:40:56:f3:ab:73:e1:e8:d1:
         44:75:52:06:57:62:49:23:7a:78:94:5c:0c:1d:ea:08:5d:ee:
         ca:eb:f0:b5:3f:19:82:4b:30:4e:e3:01:b9:ea:23:3c:5a:69:
         07:3c:88:53:77:89:0d:4f:d9:66:e7:74:f4:5b:08:55:d2:27:
         0d:76:ca:ab:dd:22:d5:d4:90:4e:c0:aa:dc:dd:54:a9:a0:e8:
         1b:f3:96:d1:29:d3:db:d6:36:f7:6f:34:48:66:39:8a:21:e5:
         b9:89:3b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:31 2025 by rpki-client