Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft
File:                     v8pT8KWH822Jqcq4K_WlA2xhQKI.mft (raw, json)
Hash identifier:          rQRLIkY9MeUfmi9uh1XlsBg7Y32DJ7kd8yhA1T+KJSE=
Subject key identifier:   48:38:4C:A6:43:7E:CD:CF:A8:4C:5B:23:77:96:F5:AE:72:03:0E:9C
Authority key identifier: BF:CA:53:F0:A5:87:F3:6D:89:A9:CA:B8:2B:F5:A5:03:6C:61:40:A2
Certificate issuer:       /CN=bfca53f0a587f36d89a9cab82bf5a5036c6140a2
Certificate serial:       019848F747E7D435800AA48F136D5E2C3852
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v8pT8KWH822Jqcq4K_WlA2xhQKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft
Manifest number:          1602
Signing time:             Sat 26 Jul 2025 23:00:21 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:21 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:21 +0000
Files and hashes:         1: QDWmx_ik_mzSmaKaFjMrEYPMK6E.roa (hash: JZeZqTP/kJM8f2vw7vOLQj4DQbxRzuI8jkZc142sebw=)
                          2: v8pT8KWH822Jqcq4K_WlA2xhQKI.crl (hash: IHYQ9HNrbpMJpqub+LTEdUWtV3sjoyxh1PjdIvZOjD4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v8pT8KWH822Jqcq4K_WlA2xhQKI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:47:e7:d4:35:80:0a:a4:8f:13:6d:5e:2c:38:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfca53f0a587f36d89a9cab82bf5a5036c6140a2
        Validity
            Not Before: Jul 26 23:00:21 2025 GMT
            Not After : Jul 27 23:00:21 2025 GMT
        Subject: CN=48384ca6437ecdcfa84c5b237796f5ae72030e9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8a:74:c3:ef:b2:95:78:01:7e:3c:7e:f9:8e:
                    21:7e:45:8f:f2:04:0d:a0:90:9e:4e:b5:14:a5:62:
                    27:05:23:cc:fd:f0:c2:6d:96:6e:4d:65:6f:c6:97:
                    c9:30:c0:f5:4f:2f:1f:a4:6f:85:17:7f:43:5d:52:
                    52:51:6e:44:3a:db:6c:01:07:44:bf:36:be:e3:27:
                    44:48:15:84:9d:b1:f7:61:95:54:d2:0a:52:d1:54:
                    47:e9:c8:5f:b9:1a:9b:55:b4:6c:82:71:91:7e:22:
                    8c:41:ec:fc:47:5e:95:06:54:7e:5b:5a:6b:9e:77:
                    eb:a3:30:94:89:93:e5:04:a7:18:57:bb:0d:af:ed:
                    da:83:87:81:fd:36:74:3f:8c:1e:46:bf:41:59:e9:
                    cc:bd:2d:f9:fc:c7:a0:f0:77:4a:b3:77:f4:7e:54:
                    c2:d1:88:ca:09:de:74:db:ce:06:43:ff:da:a1:91:
                    66:60:e4:0b:c0:3b:4c:c3:c0:1b:6c:fa:60:2c:fd:
                    ab:ab:c3:62:fa:91:21:57:92:76:88:45:26:fa:09:
                    75:25:6f:15:02:46:41:9c:75:a3:c2:97:dd:32:9f:
                    86:e5:c2:5e:13:30:26:f9:05:fa:c5:7c:83:35:f4:
                    38:b9:64:6f:83:2c:24:17:c7:23:d6:44:d6:91:d2:
                    87:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:38:4C:A6:43:7E:CD:CF:A8:4C:5B:23:77:96:F5:AE:72:03:0E:9C
            X509v3 Authority Key Identifier:
                keyid:BF:CA:53:F0:A5:87:F3:6D:89:A9:CA:B8:2B:F5:A5:03:6C:61:40:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8pT8KWH822Jqcq4K_WlA2xhQKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:52:7a:84:04:45:04:01:e2:fc:ec:9e:67:de:69:26:52:df:
         af:59:9a:08:14:ba:f5:52:dd:ed:8a:97:75:d9:b7:9d:f9:53:
         92:4b:70:c1:0e:ce:50:19:8b:32:84:09:d8:cf:ad:4d:e6:1b:
         9c:f7:13:6b:1b:6a:e4:7e:4b:63:39:40:fc:10:f2:4b:97:31:
         6f:5b:75:d3:45:dd:ef:81:82:2b:46:32:66:d7:b0:07:d5:75:
         3f:2e:fa:a2:8e:ca:38:cb:c7:b6:5b:87:61:c6:6b:cb:96:ce:
         7e:33:b8:28:d5:61:01:8f:7c:e8:d1:60:8a:88:a7:0a:29:2c:
         7c:9a:6f:f6:82:1e:97:c1:cb:2e:44:fb:b2:ba:68:e7:71:d1:
         0c:b2:48:94:ad:b5:17:9b:5f:ab:65:69:60:78:25:1f:d4:c7:
         6d:49:56:ae:95:81:9e:a9:37:89:eb:08:d0:52:85:83:9c:ab:
         8b:5b:c2:08:72:0b:74:32:8b:07:77:25:78:c3:2d:42:4f:05:
         7e:a1:96:80:e4:49:37:ab:ac:da:57:a9:fa:7d:da:da:68:e5:
         a2:8d:10:6c:19:1f:f4:3c:d8:4f:02:de:4a:dd:09:08:9b:87:
         00:b1:07:88:22:23:78:2e:18:5f:c9:af:f2:88:ae:fa:71:f4:
         2b:cb:cb:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:40:24 2025 by rpki-client