Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
File:                     i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft (raw, json)
Hash identifier:          dd9e1I2IOVhfvZJdNoIkbSwoKaF20zYbfwv9YVS4fm4=
Subject key identifier:   B3:F3:7A:C3:8F:56:A0:07:DC:30:B7:E3:31:5D:AA:43:47:47:4D:FE
Authority key identifier: 8B:8A:F6:AF:57:DD:FC:5C:7A:A8:28:CF:22:5F:98:DC:E9:59:04:A0
Certificate issuer:       /CN=8b8af6af57ddfc5c7aa828cf225f98dce95904a0
Certificate serial:       0198499BE84B4250FE6F30BF16788D51ECA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
Manifest number:          0909
Signing time:             Sun 27 Jul 2025 02:00:10 +0000
Manifest this update:     Sun 27 Jul 2025 02:00:10 +0000
Manifest next update:     Mon 28 Jul 2025 02:00:10 +0000
Files and hashes:         1: i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl (hash: 9C/oMtJiyj0pYsWmzTTj2wJA0RWpqvLpfNO7RbD8c7k=)
                          2: stIrfyQj0_eTZw5LKQkMNxuFxgI.roa (hash: eqwBV8CXGai5haR4OF0T1dC++87tM0y7pi8XDxr8OrQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:9b:e8:4b:42:50:fe:6f:30:bf:16:78:8d:51:ec:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b8af6af57ddfc5c7aa828cf225f98dce95904a0
        Validity
            Not Before: Jul 27 02:00:10 2025 GMT
            Not After : Jul 28 02:00:10 2025 GMT
        Subject: CN=b3f37ac38f56a007dc30b7e3315daa4347474dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f0:7e:6e:f3:4a:24:d7:28:fb:27:9c:cc:96:
                    6e:89:43:e8:66:89:f8:94:9b:4a:a5:30:cc:ae:f4:
                    49:f5:51:d1:db:f4:e5:dd:ba:54:3b:9c:08:68:7f:
                    45:d3:01:de:84:d4:48:bf:fc:37:bf:92:96:51:6e:
                    1f:fe:a4:e3:39:2e:41:c8:5d:f3:c4:f2:d8:89:e8:
                    3c:8f:19:f2:29:0d:05:25:49:a4:06:2c:fe:0b:a6:
                    cb:fd:1e:53:90:81:0d:76:61:06:6c:c0:7c:26:35:
                    cb:96:7f:a0:fd:d1:6d:7f:cd:8a:30:eb:b8:b1:9c:
                    be:6a:6c:78:45:e5:a9:18:58:2e:82:f7:b7:cf:33:
                    5c:c2:bd:28:b1:be:a6:16:c1:0e:3a:9c:20:78:50:
                    5c:6e:a3:a3:a7:e5:95:b1:ce:2f:ab:6c:4a:21:77:
                    cd:5e:5b:9d:fb:d1:a8:bd:cf:ec:76:bb:a2:ba:da:
                    d4:52:a8:a6:20:54:a2:39:7a:7f:75:6b:e7:84:c4:
                    de:d8:70:d9:7a:ce:e7:6c:7b:98:9c:78:24:f3:bf:
                    fc:78:b1:14:88:12:56:8c:6f:2f:90:75:95:77:1c:
                    38:4b:07:dc:f3:f4:86:1a:83:fc:a1:37:c1:a7:c2:
                    75:41:54:07:63:01:e8:c0:ea:ed:71:d5:9f:8e:d6:
                    fd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F3:7A:C3:8F:56:A0:07:DC:30:B7:E3:31:5D:AA:43:47:47:4D:FE
            X509v3 Authority Key Identifier:
                keyid:8B:8A:F6:AF:57:DD:FC:5C:7A:A8:28:CF:22:5F:98:DC:E9:59:04:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:76:09:40:41:a4:f1:7f:f4:17:b7:26:5a:57:fa:6f:b6:9a:
         48:94:78:c5:9f:82:b8:4c:74:8e:f7:1d:b6:90:20:28:ed:51:
         14:b2:e0:68:35:11:56:cb:5f:1a:bf:ce:d6:cb:6e:5c:3b:29:
         36:99:1a:a9:85:e3:f7:47:91:da:9a:a5:62:18:37:04:f1:ae:
         b8:94:f0:53:61:1b:91:09:e2:ea:fe:0a:3e:2f:b2:f2:3e:0f:
         d7:df:d4:6e:4a:c3:14:dc:af:91:26:a5:c3:4f:ec:bb:3a:d8:
         a3:83:93:18:b7:63:30:38:7a:78:57:fd:f6:fb:5f:ce:ff:36:
         fb:43:79:93:10:8e:cb:c9:61:fb:55:95:f3:ce:ab:f5:b0:d7:
         70:e0:e0:84:bf:d8:a8:c1:72:28:dc:86:30:95:75:a2:31:5c:
         ea:0d:e1:1c:a5:96:80:e8:12:74:30:55:d8:84:91:8c:fc:1d:
         46:3a:09:85:09:a4:2a:8a:11:57:47:25:1c:64:80:73:92:bd:
         b3:91:5b:52:d2:42:96:2b:26:3d:da:be:9c:b6:49:34:56:a4:
         24:80:8d:9c:96:34:50:9b:33:4b:02:f0:f0:6d:bd:46:53:1f:
         7f:e2:a7:92:e8:6d:4b:6c:cb:fb:35:cd:08:c6:1c:49:4d:97:
         20:f2:17:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:10:43 2025 by rpki-client