Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
File:                     8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft (raw, json)
Hash identifier:          FSBBs61Ffof8UaunsyDT/QDQ5746GV8oP6NTM74sMsE=
Subject key identifier:   7E:87:15:7F:E7:00:EB:9A:4B:3C:3E:A9:51:39:A4:48:FC:C1:DC:4A
Authority key identifier: F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58
Certificate issuer:       /CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58
Certificate serial:       019847E4D8A29EF7B124469F8298A3932644
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
Manifest number:          0D0E
Signing time:             Sat 26 Jul 2025 18:00:36 +0000
Manifest this update:     Sat 26 Jul 2025 18:00:36 +0000
Manifest next update:     Sun 27 Jul 2025 18:00:36 +0000
Files and hashes:         1: 8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl (hash: w86zAfZOOFsfrbczGucXoDbQg8iHiGhHLzKvx+AVPgs=)
                          2: otWydKJIblYoFDAZjlf3bz3XaMM.roa (hash: xwlrdUyrXAa6g8e84xQqVsN9ku3EVyiSX1A/Nu5VNrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 18:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:e4:d8:a2:9e:f7:b1:24:46:9f:82:98:a3:93:26:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58
        Validity
            Not Before: Jul 26 18:00:36 2025 GMT
            Not After : Jul 27 18:00:36 2025 GMT
        Subject: CN=7e87157fe700eb9a4b3c3ea95139a448fcc1dc4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fb:6c:f1:19:3d:7f:80:f7:43:82:ef:ba:e8:
                    a6:dd:37:38:c9:e0:f2:0e:fb:ff:83:3f:f7:e1:09:
                    a3:26:e4:29:29:90:2f:e0:66:e1:7f:d0:17:ef:71:
                    e2:c7:9d:1e:4b:91:c0:68:9f:a5:4e:ed:b4:90:f2:
                    95:27:09:37:26:c2:a0:63:71:df:8f:a9:36:18:a5:
                    a1:16:a4:3b:28:12:a2:72:c8:49:03:ea:af:28:66:
                    df:2b:79:ea:02:d8:84:a3:33:56:4d:d6:e5:76:92:
                    e6:17:9c:47:f4:1d:41:8b:52:92:74:ba:3f:ac:f6:
                    43:72:c6:de:3e:46:db:3f:b6:be:5c:55:d0:f7:3d:
                    87:3b:64:23:21:c9:df:c4:06:67:b9:af:16:23:55:
                    79:41:c1:4f:a2:cc:22:9c:50:8f:71:68:d1:47:04:
                    d8:86:fd:ad:2e:eb:14:94:63:8c:68:64:4a:5d:c7:
                    97:2f:f3:64:40:81:76:a7:d6:b1:ae:0d:c1:ad:dc:
                    44:25:62:89:c0:56:b8:c2:bf:c6:03:9c:fe:5c:29:
                    df:3f:df:9a:13:ec:79:82:a0:b4:be:84:93:22:7a:
                    3f:e0:50:8f:f3:7d:3c:d5:0f:a3:4d:de:87:5b:eb:
                    c7:05:c4:6e:2f:ce:ea:96:e5:1c:0b:6a:a9:db:f9:
                    44:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:87:15:7F:E7:00:EB:9A:4B:3C:3E:A9:51:39:A4:48:FC:C1:DC:4A
            X509v3 Authority Key Identifier:
                keyid:F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:85:60:03:b6:88:b6:ff:22:07:04:1a:97:14:b7:26:f0:54:
         f0:9d:c2:e0:42:6a:8f:04:26:a3:81:94:9d:8b:29:cb:b1:40:
         c4:a0:74:2a:21:c2:1e:96:28:89:44:a3:00:c7:1f:e1:dd:ef:
         f4:6a:65:21:8e:e2:82:e3:3f:66:33:bc:2c:b7:98:cb:26:54:
         ad:49:92:b4:9b:c6:ae:7c:11:da:40:02:97:e8:f1:ac:1f:e8:
         7a:2a:0c:e3:d2:47:6f:cf:03:24:d8:b4:50:49:9a:f0:65:df:
         56:e1:1e:48:52:96:e9:40:65:06:f0:e4:40:b9:60:4e:a0:6c:
         ff:75:15:6a:d2:3c:23:ec:ab:29:79:f4:4b:ce:d4:3c:58:2a:
         1e:10:66:c8:89:a4:be:2e:a5:09:5a:6c:b8:7b:fd:72:5b:ea:
         05:b6:43:e6:53:b2:fa:a4:3b:a5:6f:e0:9d:1d:24:13:d5:ad:
         83:0c:8e:5d:7b:25:70:cf:94:c9:96:b3:f3:2b:1d:97:a3:6b:
         7e:03:bf:54:25:c4:a2:4e:61:f6:b8:2c:97:21:c0:2f:30:e1:
         98:30:fd:bb:ed:92:77:fa:a9:8c:f6:8f:e0:3c:ab:4a:c5:e9:
         be:bd:14:41:ad:f2:ab:52:6b:7b:fa:89:d7:ba:98:47:1b:1f:
         77:3a:61:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:01:22 2025 by rpki-client