Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/cbe997-1c8b-4242-a701-309864b4d491/1/8vSmwLPCsMAy3t3NI9Qh_7liAPw.mft
File:                     8vSmwLPCsMAy3t3NI9Qh_7liAPw.mft (raw, json)
Hash identifier:          J4vldzO4mk7jYXBqyPq6+JiWToH4CqTyX+E4Ose3njk=
Subject key identifier:   4B:3F:BC:09:A1:6B:AD:76:E6:E4:2E:77:CE:F0:F6:5C:26:17:2B:95
Authority key identifier: F2:F4:A6:C0:B3:C2:B0:C0:32:DE:DD:CD:23:D4:21:FF:B9:62:00:FC
Certificate issuer:       /CN=f2f4a6c0b3c2b0c032deddcd23d421ffb96200fc
Certificate serial:       01984A4144EA8277E8B802869865E6D4D631
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8vSmwLPCsMAy3t3NI9Qh_7liAPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/cbe997-1c8b-4242-a701-309864b4d491/1/8vSmwLPCsMAy3t3NI9Qh_7liAPw.mft
Manifest number:          0628
Signing time:             Sun 27 Jul 2025 05:00:48 +0000
Manifest this update:     Sun 27 Jul 2025 05:00:48 +0000
Manifest next update:     Mon 28 Jul 2025 05:00:48 +0000
Files and hashes:         1: 8vSmwLPCsMAy3t3NI9Qh_7liAPw.crl (hash: RsHyy8oVINQvg+XUNpLjQFJPO9lIMvwFvXowPCmj0LQ=)
                          2: TJhuA5qI7EN9HDyV96WXGF2JSfo.roa (hash: 5D865Bd9WMBm3Lfxl+Be0ercoZWZG3ocPw41PojFMmo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/cbe997-1c8b-4242-a701-309864b4d491/1/8vSmwLPCsMAy3t3NI9Qh_7liAPw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/cbe997-1c8b-4242-a701-309864b4d491/1/8vSmwLPCsMAy3t3NI9Qh_7liAPw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8vSmwLPCsMAy3t3NI9Qh_7liAPw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:41:44:ea:82:77:e8:b8:02:86:98:65:e6:d4:d6:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2f4a6c0b3c2b0c032deddcd23d421ffb96200fc
        Validity
            Not Before: Jul 27 05:00:48 2025 GMT
            Not After : Jul 28 05:00:48 2025 GMT
        Subject: CN=4b3fbc09a16bad76e6e42e77cef0f65c26172b95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:be:33:ad:b1:0b:19:f3:c9:fb:9f:5e:bc:bd:
                    6e:36:8e:11:a2:29:42:6b:7a:87:b5:12:51:7b:63:
                    50:fc:3d:2b:c3:4e:6e:3b:31:20:23:f8:48:69:93:
                    17:d9:29:25:94:df:b4:9b:68:20:1a:a7:eb:79:e3:
                    7a:e0:9a:37:2f:40:34:c4:e3:3d:2d:3a:71:06:1e:
                    cc:d0:86:d8:8a:c1:11:46:88:f8:a2:ce:f5:01:81:
                    eb:44:07:3f:ae:b3:85:3d:17:de:80:b4:c8:a8:9a:
                    20:ac:1e:ac:83:8d:12:03:f8:1a:b3:d1:2e:af:1a:
                    72:77:e8:05:ea:c6:4b:f3:4e:3a:9f:ab:63:9d:ee:
                    ae:1c:8d:e3:31:75:ee:7d:51:6e:f4:26:ae:83:d3:
                    d8:24:91:fb:23:61:93:e3:82:10:0f:d9:24:40:2a:
                    89:be:bd:e3:4b:6b:95:1b:39:8f:90:a7:6d:5d:c6:
                    03:67:c4:7e:cc:fd:dd:f6:6d:8a:c7:2e:80:07:de:
                    2d:c9:7f:86:37:b7:b6:b4:ce:2a:ac:74:27:77:dd:
                    f1:a8:94:80:4f:71:68:4f:37:eb:15:c8:a9:5e:ce:
                    bc:60:82:87:27:b5:8e:f7:88:b5:41:7c:ee:be:7b:
                    38:2d:77:be:52:9a:6f:62:e6:e7:54:22:3a:35:3d:
                    61:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:3F:BC:09:A1:6B:AD:76:E6:E4:2E:77:CE:F0:F6:5C:26:17:2B:95
            X509v3 Authority Key Identifier:
                keyid:F2:F4:A6:C0:B3:C2:B0:C0:32:DE:DD:CD:23:D4:21:FF:B9:62:00:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vSmwLPCsMAy3t3NI9Qh_7liAPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/cbe997-1c8b-4242-a701-309864b4d491/1/8vSmwLPCsMAy3t3NI9Qh_7liAPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/cbe997-1c8b-4242-a701-309864b4d491/1/8vSmwLPCsMAy3t3NI9Qh_7liAPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:dd:6a:c8:71:ea:e2:19:17:00:24:5f:49:03:cb:20:7c:de:
         77:f2:4d:7d:21:73:ce:55:41:6a:2d:fa:52:5b:3d:91:aa:d5:
         fd:e3:d1:bc:c0:81:30:72:87:1a:ca:22:f8:47:a1:9d:cd:b3:
         a6:e2:f3:9d:b8:b5:9f:25:d0:46:85:67:4e:c1:53:d0:81:ac:
         ba:f1:e6:dd:df:ba:20:0d:97:3c:f2:24:94:45:ef:c5:20:72:
         3d:d5:29:92:d2:a4:a7:8f:bc:f0:c5:02:2d:ab:80:d0:07:7c:
         9b:54:d0:8e:4e:43:ab:9c:e4:8b:a9:f9:1f:48:d9:f2:f7:92:
         d2:03:f2:0b:19:90:b7:74:a5:32:b8:20:03:9d:54:a5:d1:c7:
         54:ff:1c:93:9d:7f:3e:c7:b1:39:6d:7d:e7:a2:13:2a:63:ed:
         58:0f:58:d3:eb:fb:26:c4:71:8f:3e:d6:fc:c6:92:19:83:15:
         77:32:6c:78:9e:ad:ef:57:c2:f5:ce:36:24:ce:12:41:e6:8a:
         6e:2f:2e:f8:b2:b1:1a:40:1a:3e:0e:2f:1e:b5:80:a4:fc:c1:
         6f:45:9f:a6:78:73:c3:57:e6:d3:7d:23:0d:cf:8f:80:e5:8e:
         e7:46:a7:bb:28:c8:6d:37:29:15:9e:c4:c1:ed:54:c8:e9:a6:
         6f:44:7f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:36:02 2025 by rpki-client