Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
File:                     8dK6iiqWoHtbZMr4cykOIHjZZKY.mft (raw, json)
Hash identifier:          ZVvp1tUWAOqwGmAN5irR3+/7YVvLFUqjqHyN9TXW8U8=
Subject key identifier:   55:3F:FC:46:12:37:C4:5F:5E:86:0D:7E:49:7C:07:DF:39:8C:45:92
Authority key identifier: F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
Certificate issuer:       /CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Certificate serial:       019847092868219D812281AA9C5F60D3F6B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
Manifest number:          0580
Signing time:             Sat 26 Jul 2025 14:00:39 +0000
Manifest this update:     Sat 26 Jul 2025 14:00:39 +0000
Manifest next update:     Sun 27 Jul 2025 14:00:39 +0000
Files and hashes:         1: 1-a6iBHASMUxMW7asjxbfE0QEd5w.roa (hash: m3RXlatEBF9cA7N2EEjPPwV4+LMKEGb0hrpMsfXqqsk=)
                          2: 8dK6iiqWoHtbZMr4cykOIHjZZKY.crl (hash: 7TDZ2KSsti7RfmkdebGYuu/CbMKhqt7a+3rsHGXk6/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:09:28:68:21:9d:81:22:81:aa:9c:5f:60:d3:f6:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
        Validity
            Not Before: Jul 26 14:00:39 2025 GMT
            Not After : Jul 27 14:00:39 2025 GMT
        Subject: CN=553ffc461237c45f5e860d7e497c07df398c4592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:79:da:bb:0b:5f:a7:9f:35:42:8e:aa:72:00:
                    d9:65:2c:bd:1b:9c:dc:54:a2:e8:07:67:15:fe:23:
                    84:92:21:d2:7c:4c:e2:33:24:4e:aa:b6:75:86:38:
                    b1:0d:f9:7d:97:05:f5:c6:fe:48:5d:4a:9c:7e:f3:
                    b5:ca:ea:47:92:cc:fa:ae:9b:06:4a:e6:98:05:a3:
                    15:ec:2b:c2:0a:99:19:05:25:5f:8d:11:8e:4f:cc:
                    05:92:57:5d:61:89:40:80:28:2c:df:c9:9f:e3:d4:
                    d9:b6:2b:6b:04:eb:2b:30:76:ab:f3:e6:08:73:54:
                    eb:6d:65:0b:4d:36:e0:72:4e:45:2f:82:df:45:43:
                    f6:86:7a:d4:63:a5:65:56:d1:98:c8:bd:fb:cd:9e:
                    d8:41:06:40:25:65:12:ab:84:86:17:a2:e4:e0:34:
                    1e:a4:04:30:c1:f3:ff:74:0f:f6:14:5e:11:fc:a4:
                    73:24:cc:eb:8a:7d:b2:4c:d0:5d:15:00:1d:1f:c2:
                    73:ad:76:d5:68:13:c8:d1:e5:2b:f4:4c:c0:0a:b9:
                    5a:d0:96:24:49:79:58:2a:eb:0d:a1:31:b9:25:de:
                    0b:1b:a7:1e:fa:3b:a9:be:ff:26:6f:1a:d7:82:67:
                    b6:07:f6:f7:1e:47:f7:8a:7f:cd:fe:b7:7e:0e:27:
                    f4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:3F:FC:46:12:37:C4:5F:5E:86:0D:7E:49:7C:07:DF:39:8C:45:92
            X509v3 Authority Key Identifier:
                keyid:F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:23:50:e1:3d:b5:96:bb:bb:0a:e6:41:85:e6:7d:db:37:b1:
         00:1a:7f:59:ed:ab:3b:66:bb:35:e5:8c:0f:f4:b7:72:fc:81:
         3f:6b:ac:07:4c:20:8b:a8:a7:8f:16:a4:e1:ee:6d:cf:d7:58:
         f4:3f:79:fb:29:99:ea:cd:98:33:70:af:f0:8f:c5:04:af:ea:
         fd:39:cc:57:4f:6e:f6:33:2d:fb:f1:af:bc:18:05:4f:33:18:
         dc:d4:f2:89:d2:fb:96:db:db:c3:a8:67:94:9e:0a:a7:36:af:
         4b:f6:96:2d:4e:92:48:c8:8d:a1:04:19:3d:b5:61:2b:7e:cc:
         c9:bb:9c:4e:dc:09:d1:59:af:cd:29:14:41:23:32:0a:d9:5c:
         89:b0:58:1b:8a:f4:8d:f0:63:d6:2c:d7:6f:fe:4c:2e:51:aa:
         c4:68:4b:07:57:60:3d:cf:d7:21:d1:8a:64:6c:3b:6d:7e:2b:
         1f:c5:cd:4f:71:a5:fd:d0:69:70:ff:56:62:0f:4b:cc:ed:dc:
         10:6d:fb:7f:7a:f0:5a:d5:a0:e5:b0:86:aa:3c:bc:5d:49:fc:
         27:3f:a0:28:86:f4:ad:7c:b4:86:9b:52:36:2f:2c:39:6a:93:
         0c:34:f1:cc:6a:ba:93:e9:a5:c1:2f:5c:c6:f0:74:0b:76:41:
         85:ea:9b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:07:41 2025 by rpki-client