Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
File:                     80fO2aDtf5RLn078OFd7OObRxnM.mft (raw, json)
Hash identifier:          py38GgZajH9Vjdi2VhdVbbjDLSK8PzS1hQGWamSEmlQ=
Subject key identifier:   12:A8:B4:74:E2:0C:A0:D6:6E:D8:5D:11:6B:60:60:92:C4:C4:11:36
Authority key identifier: F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73
Certificate issuer:       /CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673
Certificate serial:       019873745DAAB0358D08C6022C6661953E03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
Manifest number:          0BC8
Signing time:             Mon 04 Aug 2025 05:01:02 +0000
Manifest this update:     Mon 04 Aug 2025 05:01:02 +0000
Manifest next update:     Tue 05 Aug 2025 05:01:02 +0000
Files and hashes:         1: 80fO2aDtf5RLn078OFd7OObRxnM.crl (hash: bMyWAHMifr/563cifaA9fupcMfeOc4Y/7u4vQEdDUfk=)
                          2: ZyBaJPQxm3-XH0gFju5MJYC4JWg.roa (hash: ySj8+X0dnc9ap4EhtEfAJ9xZUfiKRhH4fcuhqGb+r4k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 05:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:74:5d:aa:b0:35:8d:08:c6:02:2c:66:61:95:3e:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673
        Validity
            Not Before: Aug  4 05:01:02 2025 GMT
            Not After : Aug  5 05:01:02 2025 GMT
        Subject: CN=12a8b474e20ca0d66ed85d116b606092c4c41136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7e:bc:5b:aa:6e:de:09:70:aa:61:9a:b0:46:
                    7c:97:c1:c2:d1:c5:13:48:63:cc:77:24:0b:f6:45:
                    51:da:ac:3a:02:be:e8:a0:00:45:78:07:6c:bd:76:
                    64:88:f9:20:aa:43:33:b5:b3:f7:4b:ef:c8:53:cb:
                    66:f7:25:59:7c:42:e0:38:39:6a:fb:19:3d:03:10:
                    e5:35:fe:06:ec:d9:b0:42:5e:0c:3f:ab:3c:ca:4d:
                    e6:0b:ef:6e:11:94:4a:d0:48:bf:fc:af:bb:f0:2f:
                    db:14:ad:f5:4a:30:6d:e5:c8:e0:b1:47:d8:6a:90:
                    de:4d:bc:fb:4a:4d:10:24:11:db:c1:ce:0b:e5:4e:
                    fc:d9:64:a3:5e:96:4d:d3:9c:bc:9f:f5:10:ce:b4:
                    d5:9a:bf:41:a5:69:ac:43:6a:17:7c:f4:8c:78:dc:
                    8d:c2:99:25:c4:60:13:76:ce:8b:43:e4:aa:92:7e:
                    fd:ef:2c:17:dc:4a:99:cd:3c:da:7b:90:37:78:1c:
                    a3:90:db:57:33:19:25:ae:4a:9f:07:a4:b1:bc:fa:
                    48:bd:6d:03:68:32:cd:6e:06:94:0b:cf:b6:f3:e0:
                    8d:ed:bd:05:7d:59:2b:5e:81:48:8c:76:b0:00:0b:
                    a6:8c:71:e4:f5:88:e0:8b:58:f4:05:af:05:ea:f6:
                    29:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A8:B4:74:E2:0C:A0:D6:6E:D8:5D:11:6B:60:60:92:C4:C4:11:36
            X509v3 Authority Key Identifier:
                keyid:F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:b0:8f:63:20:89:e3:d9:94:be:e1:9f:a5:c1:ed:5b:a3:ca:
         14:6d:03:4f:dc:c0:01:65:e5:7d:53:14:c2:ea:6c:0a:58:03:
         2e:83:e6:eb:69:38:10:2e:35:bd:18:db:69:c4:fd:4f:b8:91:
         ad:01:1e:c3:02:11:f7:14:4e:5b:ae:98:54:d0:2c:22:21:c7:
         31:57:ed:a1:30:aa:da:27:80:8f:29:f4:67:7b:5c:87:18:e6:
         af:06:1e:38:41:e5:87:c2:e5:ed:7b:ed:e7:05:92:fa:bc:a3:
         ca:a1:97:12:82:c9:67:ca:36:66:84:14:62:ea:27:d3:27:74:
         e3:d8:88:02:12:73:21:8b:47:74:b1:35:d8:82:b1:25:ea:8a:
         ec:1c:95:a3:fa:0a:ea:78:c4:31:e0:af:c6:5d:c0:20:26:81:
         31:7f:84:a8:1b:64:c0:8f:6e:94:fc:54:8a:48:f7:73:4a:9b:
         2f:46:60:7b:fa:f3:2a:68:33:83:c9:04:23:f2:2e:dd:eb:87:
         72:cc:f1:74:c4:7a:c9:30:f0:cc:f1:e9:86:0e:df:c1:a7:64:
         ea:8f:bb:cf:63:47:37:e9:2d:7a:ac:58:30:c7:31:1c:d4:40:
         7b:4d:1c:71:95:62:dc:d7:c9:94:8d:b5:5f:d3:fe:79:7e:ac:
         6d:8a:7f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:19:01 2025 by rpki-client