Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
File:                     jCgv8-x8uBt45iinNRdkjWIpyrc.mft (raw, json)
Hash identifier:          HbfnrqxOBLZjg8Ao9G2nCfTi1L1qN8Z7anQWXcuJTIY=
Subject key identifier:   A2:FA:68:4F:4D:AD:42:92:A2:14:8E:A1:86:73:FC:E1:5F:F9:D0:59
Authority key identifier: 8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7
Certificate issuer:       /CN=8c282ff3ec7cb81b78e628a73517648d6229cab7
Certificate serial:       0198443EB35050B4566CC783417DF047C98E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
Manifest number:          0156
Signing time:             Sat 26 Jul 2025 01:00:16 +0000
Manifest this update:     Sat 26 Jul 2025 01:00:16 +0000
Manifest next update:     Sun 27 Jul 2025 01:00:16 +0000
Files and hashes:         1: 8uYJC_uUQib3K90k6tRQR4c4tec.roa (hash: UqH3qyVznQeucD/ZQnnEVXPDpOPJe9Ni19S/sMmHYVQ=)
                          2: jCgv8-x8uBt45iinNRdkjWIpyrc.crl (hash: fhVkzBCGGkCjvr8P3iUDxKFuhLhIkpTMZhU7cDAtoaY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 01:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:3e:b3:50:50:b4:56:6c:c7:83:41:7d:f0:47:c9:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c282ff3ec7cb81b78e628a73517648d6229cab7
        Validity
            Not Before: Jul 26 01:00:16 2025 GMT
            Not After : Jul 27 01:00:16 2025 GMT
        Subject: CN=a2fa684f4dad4292a2148ea18673fce15ff9d059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1a:82:be:bf:ee:18:44:33:62:b7:91:f9:f5:
                    75:8e:67:cb:b5:53:e4:d4:bb:28:95:1c:ef:1e:8b:
                    48:3a:34:dd:e7:37:a0:ef:70:9d:f6:c4:6a:8e:ca:
                    74:f1:89:a5:6e:79:e5:1b:60:8d:0e:4a:eb:2c:50:
                    bc:c0:77:65:8b:c5:64:32:49:55:8d:6b:15:c5:3e:
                    35:68:89:44:dc:52:a0:2c:01:57:87:4d:ef:70:8b:
                    2b:5a:7d:59:5b:08:99:88:9b:59:0c:1a:7a:2a:65:
                    9c:bc:40:bf:e5:73:dc:2e:4b:88:e2:96:5e:bf:91:
                    fb:0e:5e:d7:68:70:bc:8d:da:1d:1c:0a:a7:af:4e:
                    7c:07:d1:60:74:1b:07:fd:a3:56:ba:66:0f:b5:f6:
                    96:6a:8c:22:d4:c6:25:86:4f:1b:aa:a4:b4:b2:b1:
                    a4:f5:6f:f3:04:d7:c7:f3:b4:54:63:6e:85:a1:a3:
                    17:53:24:fa:ef:46:6f:66:e3:ad:1a:98:31:f3:ee:
                    53:23:ab:54:c3:3f:ef:db:62:88:d2:15:55:32:76:
                    5e:66:24:7a:83:d2:87:18:c1:88:85:b4:ff:fd:3c:
                    53:b3:6b:e9:a2:90:97:bc:3b:93:3c:50:df:f5:94:
                    26:ff:3f:fe:99:17:f5:2f:4d:22:29:7f:e1:19:fa:
                    f8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:FA:68:4F:4D:AD:42:92:A2:14:8E:A1:86:73:FC:E1:5F:F9:D0:59
            X509v3 Authority Key Identifier:
                keyid:8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:7a:61:8d:c9:5c:ad:f1:c9:9d:2e:bd:a7:d6:4f:40:51:1c:
         f4:07:47:1b:c4:e2:e9:32:8f:16:4b:ef:72:20:5b:a7:14:38:
         4b:9e:f8:2e:f8:58:01:17:0b:a5:d3:b0:b5:30:b6:1a:bd:1f:
         a3:ac:74:13:86:80:f8:e9:b7:a3:6a:ba:05:b1:c3:3e:0f:5c:
         bf:b4:62:92:be:b7:66:b0:a8:92:4c:5a:11:25:46:d2:03:cd:
         07:d5:95:33:bf:57:7e:3b:18:27:c8:c5:f3:05:15:34:44:fe:
         de:cf:cc:ec:e9:8c:6e:b2:d6:57:67:6d:ea:b5:85:97:38:53:
         32:50:4c:c6:79:9b:3a:ad:97:0c:49:b5:17:0d:7f:80:61:aa:
         50:10:92:7f:b9:fb:d6:e5:7f:42:3d:c8:ab:08:cd:d2:19:74:
         d7:fe:fd:97:73:ec:28:1d:2d:b4:c4:c4:33:be:16:60:68:d6:
         8c:ef:da:a8:af:08:9a:d2:e9:38:29:65:fb:11:36:32:6a:b8:
         5e:33:85:8e:ed:23:0d:a8:c9:a4:c4:00:17:31:f2:90:95:d3:
         39:90:16:83:08:4b:e0:49:66:dc:c4:84:0c:c1:30:37:40:0f:
         e5:6d:9d:89:01:d6:d4:58:dc:e7:ce:8b:8d:0a:9b:10:f0:b3:
         78:6b:f7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:38:36 2025 by rpki-client