Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft
File:                     i29IgAONVauY18tm38-ol7e6Eeg.mft (raw, json)
Hash identifier:          OViiP4qDHiFYsl9BE+eiFRjDviyNwxfuDqxd9aJvXGU=
Subject key identifier:   8E:CD:3C:73:17:40:68:1D:2F:B0:6B:4A:F1:31:B4:9C:B4:FE:75:4A
Authority key identifier: 8B:6F:48:80:03:8D:55:AB:98:D7:CB:66:DF:CF:A8:97:B7:BA:11:E8
Certificate issuer:       /CN=8b6f4880038d55ab98d7cb66dfcfa897b7ba11e8
Certificate serial:       019880C2A7461882F1EBA34C89BC41195593
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i29IgAONVauY18tm38-ol7e6Eeg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft
Manifest number:          0496
Signing time:             Wed 06 Aug 2025 19:01:37 +0000
Manifest this update:     Wed 06 Aug 2025 19:01:37 +0000
Manifest next update:     Thu 07 Aug 2025 19:01:37 +0000
Files and hashes:         1: i29IgAONVauY18tm38-ol7e6Eeg.crl (hash: XAnaKHAMjEzqfEBsEzdTR/HfMwTR1u1r90rhRlIfhMw=)
                          2: uJrupPlV0TuAxsM7Yezc0lvFtvQ.roa (hash: zjqfplB2jtSi/5nKhDu31J1mMkLaG/4MZV1txaGrR6E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i29IgAONVauY18tm38-ol7e6Eeg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:c2:a7:46:18:82:f1:eb:a3:4c:89:bc:41:19:55:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f4880038d55ab98d7cb66dfcfa897b7ba11e8
        Validity
            Not Before: Aug  6 19:01:37 2025 GMT
            Not After : Aug  7 19:01:37 2025 GMT
        Subject: CN=8ecd3c731740681d2fb06b4af131b49cb4fe754a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1f:7d:58:07:16:ed:8d:1e:8f:c5:7e:66:d3:
                    98:a3:0c:e2:72:22:37:60:66:8b:e6:64:0c:67:d2:
                    30:4d:1e:f7:e8:ff:77:57:bc:89:8c:30:f3:65:d7:
                    27:0d:ee:f3:7b:b2:dd:ce:19:c7:32:79:66:11:5f:
                    b3:86:a9:a7:a5:e7:a0:2d:c7:a6:01:54:88:e2:64:
                    8d:ac:6d:4a:2f:24:2e:09:2b:12:38:23:f1:ac:67:
                    c4:27:56:fb:a7:ae:41:d3:ef:86:97:3b:e5:5e:d7:
                    0e:cb:5a:b6:cc:58:93:1f:d5:58:fa:41:78:9f:30:
                    7b:e4:f2:bf:5e:69:71:70:14:66:9d:07:dc:68:d6:
                    3c:54:b3:64:d4:48:75:16:58:89:14:0b:40:32:af:
                    a5:01:cc:e1:93:c0:5a:b9:d8:9f:fe:6b:17:b1:95:
                    c5:4c:40:75:d8:59:91:be:eb:3a:cd:8f:28:29:45:
                    96:37:fe:b9:94:82:76:5c:99:17:e9:29:05:e1:57:
                    47:ae:dc:d3:d5:9d:0b:bf:92:4e:a5:8f:de:9a:cc:
                    18:9b:76:dd:7a:d9:f7:b1:2e:b1:ff:94:cc:74:38:
                    6e:57:5a:6f:f1:ec:16:10:75:81:5e:2c:a4:2e:39:
                    03:a6:48:24:3e:b4:4d:dd:f4:66:27:b3:90:87:9e:
                    75:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:CD:3C:73:17:40:68:1D:2F:B0:6B:4A:F1:31:B4:9C:B4:FE:75:4A
            X509v3 Authority Key Identifier:
                keyid:8B:6F:48:80:03:8D:55:AB:98:D7:CB:66:DF:CF:A8:97:B7:BA:11:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i29IgAONVauY18tm38-ol7e6Eeg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:0d:12:cf:40:8a:9a:e4:f4:46:61:ce:f9:66:02:20:2d:f4:
         61:43:fd:a6:f1:a3:dd:55:81:95:0f:2f:85:53:c0:94:15:b3:
         7c:d1:11:9a:9f:b6:91:de:1c:93:ec:8d:71:2c:46:ee:f9:54:
         47:5d:f2:a0:ca:34:35:e8:77:04:cc:64:27:2a:a6:3c:f9:4d:
         bc:5c:cc:31:a7:e0:bf:77:c3:d5:e9:c6:91:6b:76:dc:14:e0:
         8e:db:67:ec:15:8c:66:06:8e:45:53:f6:50:24:33:ca:c4:2e:
         e2:4f:37:97:e0:ac:ec:b5:3b:6f:79:d1:eb:69:2b:e3:e3:e0:
         ae:33:22:5e:2c:95:45:47:68:f2:a4:f6:4e:69:75:d1:44:b9:
         c3:69:e1:2e:35:fd:f5:96:b4:10:b2:39:58:39:4c:fb:55:6b:
         d8:ab:5f:02:ea:fb:08:e3:a0:d7:28:59:55:f2:89:17:69:1b:
         0b:b6:0b:17:6f:60:8b:1e:44:d1:7b:6b:ea:fd:41:e3:92:fd:
         c5:47:80:b2:01:40:89:22:00:c3:5b:b4:01:8a:b6:36:a6:83:
         8b:cc:a7:86:f9:d8:88:eb:e6:27:86:20:e8:4a:2f:44:ac:48:
         4b:4a:16:cd:cf:c2:77:6c:39:48:b5:98:49:00:2e:98:33:f6:
         57:aa:bc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:03:55 2025 by rpki-client