Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
File:                     O8y8cOGLbGnlPvUqXpJeX08M3ME.mft (raw, json)
Hash identifier:          VyE5w3WfwOirRjaFHVviNAgPmJJxj/q5wA/o/p9qVe4=
Subject key identifier:   68:82:35:6E:77:B6:B5:AA:73:5D:51:B8:F8:C7:13:21:D2:91:78:27
Authority key identifier: 3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
Certificate issuer:       /CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Certificate serial:       0198380402BD818C05866E82B035697B1188
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
Manifest number:          08E5
Signing time:             Wed 23 Jul 2025 16:00:43 +0000
Manifest this update:     Wed 23 Jul 2025 16:00:43 +0000
Manifest next update:     Thu 24 Jul 2025 16:00:43 +0000
Files and hashes:         1: HabUl_PN48YzZNEWtBkjKb82MF0.roa (hash: 0wbJ0AQU5TxqX4mMc5xSS1a+CKR/ct/c7MrrwJkkz0M=)
                          2: O8y8cOGLbGnlPvUqXpJeX08M3ME.crl (hash: MEzzkRZRqSngr6yF8J4cb1hzOVnUWPL6mJnV5FX8ZAg=)
                          3: Xi6D2TOsmKaKt73p2J8BVcS5X-U.roa (hash: bCMKnUY3Dzp0FpBoWOs1dTC9ELOluXfiQXdDZqb6JDc=)
                          4: kMR-QfeDtCXrH6KaC8fd3q46UD0.roa (hash: 3G94bGBmGhHgTXEu5GeWzI4ZUQXww57vFy+evvpPr2k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 14:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:38:04:02:bd:81:8c:05:86:6e:82:b0:35:69:7b:11:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
        Validity
            Not Before: Jul 23 16:00:43 2025 GMT
            Not After : Jul 24 16:00:43 2025 GMT
        Subject: CN=6882356e77b6b5aa735d51b8f8c71321d2917827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6f:6d:64:7a:72:b3:5e:9f:7b:50:b9:c8:fc:
                    3e:be:ca:38:83:55:b1:96:a7:2c:8d:91:be:c8:7d:
                    73:61:72:16:2b:b1:1e:2f:a2:e9:ff:6c:5b:21:a4:
                    fd:8f:e1:9a:3f:fe:b5:1f:2e:c6:ea:7b:6e:5d:0c:
                    83:b7:dc:c6:8a:74:39:52:3e:f5:d9:84:38:2a:27:
                    07:16:18:ef:db:63:a8:39:ed:ee:77:24:5d:fe:9b:
                    c5:8e:fa:e7:b7:45:b1:29:e9:cb:22:ed:63:e2:25:
                    20:fd:1e:6d:e4:00:c8:ee:f8:99:64:05:c4:6a:5a:
                    18:da:81:c6:68:89:89:91:93:d3:f9:8e:12:92:7e:
                    f3:bb:eb:b0:23:7b:64:4b:25:8c:5c:b2:26:10:b0:
                    42:1e:43:b9:b6:96:e6:37:11:20:4c:c4:2f:09:32:
                    5d:67:68:ff:4d:73:8c:00:e2:e1:7b:47:b8:c4:f8:
                    6c:16:44:44:1b:7e:33:e2:3e:0f:f6:43:8b:bf:0d:
                    07:64:37:95:8c:f7:2d:a6:40:cf:2c:8c:33:db:53:
                    a9:55:54:18:66:ef:28:a7:28:a0:4f:7e:4f:2a:fa:
                    6d:9b:eb:25:1d:ad:55:65:b3:cc:85:99:6a:7b:27:
                    c4:c4:27:01:47:eb:7c:70:7b:2b:5f:e8:d1:dd:06:
                    2d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:82:35:6E:77:B6:B5:AA:73:5D:51:B8:F8:C7:13:21:D2:91:78:27
            X509v3 Authority Key Identifier:
                keyid:3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:0f:c3:c5:24:f2:1b:2d:23:01:f8:40:9b:18:6b:fc:b8:16:
         50:c2:3d:f6:e7:82:73:2e:b3:80:29:dd:7e:15:9c:05:1c:e8:
         ae:4f:2d:cd:47:aa:fa:1c:b3:75:d1:b6:6f:37:c9:09:a3:aa:
         ac:76:94:30:8f:51:35:27:10:68:55:ef:f4:f2:96:e7:6b:45:
         ee:5d:9c:ba:d1:ec:b9:50:96:5e:09:14:64:d1:f0:55:0f:17:
         23:85:32:e5:d2:0c:a2:50:02:8f:0e:41:fc:e5:0d:a6:f3:74:
         26:70:ea:8b:d8:01:5b:c7:38:35:82:a2:59:84:7f:41:4a:c2:
         90:9e:4b:da:b3:2b:0e:5e:e0:8a:de:c9:75:4a:d0:ba:8c:64:
         16:1a:fe:4b:53:ef:a4:78:7e:18:97:2b:69:a3:57:55:73:4a:
         7f:3b:ed:21:4b:70:1a:d4:ba:16:7c:08:93:03:38:03:ae:41:
         74:fd:c1:02:d5:54:0b:2b:07:d5:64:f3:9a:84:32:ae:a8:4a:
         ca:03:47:b1:62:46:8e:71:dd:57:17:13:e2:63:8e:96:fb:84:
         8b:a8:b6:36:d9:a8:33:93:1e:c7:ce:80:5f:0d:a1:1d:6d:89:
         cb:89:4b:08:bd:c7:c5:c0:ca:a4:0a:a5:91:7b:b4:19:32:2f:
         21:c9:62:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:19:15 2025 by rpki-client