Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
File:                     8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft (raw, json)
Hash identifier:          8wlxCTNa4frhBr/aWeLnc5zepon/qGS/L8BV0GOhiZQ=
Subject key identifier:   F0:CC:E0:F3:06:DA:77:41:8C:72:B4:D2:DC:3B:F0:0B:1A:3F:1E:FC
Authority key identifier: F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
Certificate issuer:       /CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Certificate serial:       01987FAF89E1AD687B24A9C3FDC1ED518D87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
Manifest number:          05C8
Signing time:             Wed 06 Aug 2025 14:01:07 +0000
Manifest this update:     Wed 06 Aug 2025 14:01:07 +0000
Manifest next update:     Thu 07 Aug 2025 14:01:07 +0000
Files and hashes:         1: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl (hash: KQpUDtUJg1TTi1eCJMtVmrk/lBKRKWGN+987o4TRKaA=)
                          2: Tm2nsqR26Dl9LeV6Cyt_JHr-v8Y.roa (hash: uihaqn4cl1EUm9BC8+JYEwJFvxEP94e45YDqvyFRac4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 14:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:af:89:e1:ad:68:7b:24:a9:c3:fd:c1:ed:51:8d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
        Validity
            Not Before: Aug  6 14:01:07 2025 GMT
            Not After : Aug  7 14:01:07 2025 GMT
        Subject: CN=f0cce0f306da77418c72b4d2dc3bf00b1a3f1efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a1:a6:25:78:3d:f3:f5:2d:b7:fa:c6:3b:da:
                    3d:a7:47:4a:18:f8:09:9a:a5:85:20:e5:c7:d0:2c:
                    a2:4c:77:5e:a8:ac:91:95:12:72:b6:d5:a1:e9:f4:
                    05:bb:51:10:8c:fc:1d:a4:41:d3:ef:3e:fb:c7:86:
                    b5:57:74:3e:d7:ca:8a:c0:af:87:cb:3f:04:dc:e5:
                    85:32:2c:7f:27:0f:9b:0c:fc:2e:37:74:3d:8f:79:
                    4d:9e:dd:fb:52:67:91:9c:4e:22:79:76:1a:96:69:
                    fc:0c:5a:27:3a:71:32:81:7e:c0:ed:7e:37:f7:31:
                    e7:12:24:d2:11:74:62:94:74:e2:10:41:d8:d2:b1:
                    29:08:9d:09:3b:87:d2:fc:61:00:30:e9:7f:9a:ec:
                    a5:59:af:a8:a5:2b:ec:97:73:b7:45:c9:a6:6a:e5:
                    e6:9f:68:3a:5d:f0:e0:68:9e:5a:29:fa:03:05:eb:
                    10:bd:90:d9:70:ca:ba:cb:e8:06:b8:0c:91:fa:1e:
                    10:9c:f8:26:b6:b0:be:2e:6f:57:11:cf:fa:7b:70:
                    a2:0d:ed:a1:e8:30:49:b2:4f:c1:f8:18:80:86:4b:
                    df:67:0f:97:83:ee:3e:e3:33:ee:91:1b:13:2e:d0:
                    e8:fd:0c:b8:ba:e9:1e:e1:5e:28:6a:5c:3e:99:66:
                    09:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CC:E0:F3:06:DA:77:41:8C:72:B4:D2:DC:3B:F0:0B:1A:3F:1E:FC
            X509v3 Authority Key Identifier:
                keyid:F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:a7:93:f6:b7:f1:75:a0:e2:3b:34:a4:8e:ae:7d:d1:70:46:
         57:25:e2:dd:b5:e6:9f:37:93:31:0e:81:25:61:97:a2:57:80:
         88:70:b7:d4:3e:7f:8d:d5:68:23:b6:84:3c:fc:2c:3d:f4:8f:
         d0:32:4a:ec:8c:93:94:0b:7f:7b:15:f2:8d:b0:41:73:1a:ff:
         71:67:d3:3a:ca:01:3c:48:9a:cc:ea:2c:ec:40:92:6b:50:20:
         79:a4:c8:3e:5f:55:3b:2a:f0:0d:65:b3:a9:11:6d:c5:7b:4f:
         53:44:03:71:9e:87:91:79:37:70:8a:3e:f0:b4:48:0e:0b:80:
         85:66:1e:a4:69:18:da:0f:e1:7d:87:99:df:28:83:e6:76:8d:
         a1:45:82:3e:92:8d:db:54:61:36:a8:3f:da:9d:a8:ac:14:0a:
         45:e4:e0:ec:79:dc:cb:cf:31:75:ed:f0:7d:8f:7d:d2:e4:dd:
         67:7e:c5:e5:e1:28:1f:14:d9:29:36:64:cf:7c:d1:16:d1:29:
         5d:61:e0:1a:e4:01:0d:aa:72:97:66:56:6c:b8:0d:19:d2:e2:
         b9:43:2e:49:81:41:11:16:b6:12:17:39:1b:e7:0b:b6:ec:fd:
         fe:da:2b:b2:4e:42:cb:82:dd:d6:c3:0b:65:b4:18:20:70:7c:
         08:44:8c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:20:24 2025 by rpki-client