Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
File:                     8TIZIhzAohMmzgBsQoJbrCvjHhc.mft (raw, json)
Hash identifier:          Lc4O4rgalVlkPX+hrMxCFXb9B+jScna4xgUXKDyStbI=
Subject key identifier:   47:EB:DD:F9:D8:D7:A9:54:1C:C8:47:01:20:5E:7A:B1:37:48:99:FA
Authority key identifier: F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17
Certificate issuer:       /CN=f13219221cc0a21326ce006c42825bac2be31e17
Certificate serial:       019848F782343DDEA3C0CBE45FC506346BFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
Manifest number:          1723
Signing time:             Sat 26 Jul 2025 23:00:36 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:36 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:36 +0000
Files and hashes:         1: 8TIZIhzAohMmzgBsQoJbrCvjHhc.crl (hash: FlE/KUXRG9vOWP5hSQ1sUkEdcDpecrJquEf/fSUyW5k=)
                          2: DZm648asdKh4VO670G65ZOWmsCA.roa (hash: Kj0VsQOFBIUc4DZBkvBZz70M2s0KYBzc/oRfnAmHqW4=)
                          3: ir7-RH8I6LOM7faVYPUvWtPtBkc.roa (hash: c3S12HvLqchLUsT4f7tqk56b2aJYvGDiRT3Sw4rhzw0=)
                          4: sioOqEQgSdt-Z2nuvjH-ipYeJ0U.roa (hash: e/yGVe5B1VqGg3IGxSr7CYJ11tiQj+M1xaKJk8xaUwo=)
                          5: wBll80eEVRcCiVNLyafIlwBJOvY.roa (hash: Vrtbp5BA+79ihdsDatt4sH3YRMZYNvpy4CEr3U+1Q18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:82:34:3d:de:a3:c0:cb:e4:5f:c5:06:34:6b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13219221cc0a21326ce006c42825bac2be31e17
        Validity
            Not Before: Jul 26 23:00:36 2025 GMT
            Not After : Jul 27 23:00:36 2025 GMT
        Subject: CN=47ebddf9d8d7a9541cc84701205e7ab1374899fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fe:70:d5:5b:6f:51:47:c7:9a:73:49:67:0e:
                    19:f3:ae:7e:9b:53:f6:8a:e0:84:a4:bd:65:21:7d:
                    e5:30:71:9e:cd:86:5c:a8:38:d7:8e:30:b7:62:90:
                    53:cf:82:b6:94:b7:42:35:92:fa:ef:d1:d2:64:58:
                    48:34:f3:fd:e8:ab:5d:d9:8e:06:ce:03:bc:21:53:
                    87:87:50:86:9d:ac:23:1c:48:bc:cd:23:dc:ff:ca:
                    c3:4a:ce:da:4b:0c:54:5c:b2:66:42:c0:17:0a:0b:
                    20:57:eb:4a:8d:15:e0:50:02:f9:d9:35:ac:e7:24:
                    72:56:f3:d5:77:ea:0b:f5:a6:e7:24:8c:12:b0:bb:
                    82:b2:04:3a:b1:dc:bc:ba:8a:d5:18:6c:71:ae:bc:
                    8c:7d:7c:1d:ee:af:72:a3:5f:13:0d:3d:94:e9:76:
                    8e:9c:6f:4d:b0:6a:75:0a:58:b3:02:b2:6f:6d:46:
                    bc:da:0c:c0:4e:7d:7b:a6:fe:8a:de:c5:b6:74:da:
                    ff:e8:91:2f:23:07:53:b5:fb:ca:06:a5:5c:dc:45:
                    6b:27:3f:65:4a:cf:fd:92:a8:73:02:3f:c2:5b:0a:
                    1a:91:69:af:e5:b5:d0:f2:a2:32:19:e8:5d:9b:ac:
                    fc:f6:2b:8e:f7:d0:dd:d9:ec:cb:9c:60:6e:99:f8:
                    ad:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:EB:DD:F9:D8:D7:A9:54:1C:C8:47:01:20:5E:7A:B1:37:48:99:FA
            X509v3 Authority Key Identifier:
                keyid:F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:00:7e:fa:65:3d:dd:f2:8a:e5:f0:59:12:0c:63:50:aa:96:
         5e:81:27:e6:2d:e6:f6:ee:6d:ac:2b:13:ba:47:57:45:fe:ab:
         9b:3f:de:fa:e6:04:b4:b9:8a:02:eb:8c:5a:0b:99:12:b9:13:
         6a:48:ce:c8:1c:61:c2:bd:22:61:95:da:2e:4f:6f:55:6b:24:
         c0:02:db:9c:10:63:2f:61:c5:fc:2a:fb:1c:3d:c9:e7:be:f8:
         16:a1:7e:51:a7:04:7e:03:c1:ff:63:97:e9:2e:dc:00:33:25:
         60:37:c4:1e:cb:8a:a6:63:83:7f:e9:9a:af:9a:59:d1:30:02:
         c8:e9:10:34:27:ab:88:03:f1:01:f4:ec:64:cd:f9:30:f7:26:
         81:4d:f2:8c:94:19:6f:01:6c:18:7d:fa:9f:da:e5:88:a4:61:
         61:cc:b1:78:a5:ca:bd:96:8e:10:d2:d1:f2:52:10:e8:40:34:
         08:e4:25:99:96:69:5c:5c:b6:ab:a4:86:da:4f:e2:9a:49:de:
         a5:24:0c:1e:bd:4b:6c:8b:55:d5:a5:27:39:71:73:a6:4a:d7:
         cf:14:97:84:75:ec:d1:43:1e:fe:92:cf:68:53:01:e5:21:1e:
         71:4a:c7:fa:d2:6a:09:7a:12:4b:ae:9c:87:07:fb:65:c5:98:
         a7:d7:02:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:45:36 2025 by rpki-client