Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft
File:                     8gwo0Z4N-1NIJqojqlBq9oowW3o.mft (raw, json)
Hash identifier:          +9t7wcogGeKX6Up6zvT6iju2Ecgn3NfDR6CcAJh0/KE=
Subject key identifier:   95:BA:E8:6B:21:3A:F3:D8:96:2A:D0:11:2D:1B:3F:E5:D4:C4:9A:26
Authority key identifier: F2:0C:28:D1:9E:0D:FB:53:48:26:AA:23:AA:50:6A:F6:8A:30:5B:7A
Certificate issuer:       /CN=f20c28d19e0dfb534826aa23aa506af68a305b7a
Certificate serial:       019847769A3EFFBB52BF122C4CA846539BA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft
Manifest number:          1592
Signing time:             Sat 26 Jul 2025 16:00:11 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:11 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:11 +0000
Files and hashes:         1: 8gwo0Z4N-1NIJqojqlBq9oowW3o.crl (hash: 5tzQtR9RgniRT5XAyBdpSwav4YwXHi1HASzyqqqDqUI=)
                          2: eCt_o7wQa4uTOlJ8RZzlmDoTQs4.roa (hash: PGIcRqsMSnRyuLEgYQdmyq8FNdFdg9Cwl+Xi/IOiL8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 16:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:76:9a:3e:ff:bb:52:bf:12:2c:4c:a8:46:53:9b:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f20c28d19e0dfb534826aa23aa506af68a305b7a
        Validity
            Not Before: Jul 26 16:00:11 2025 GMT
            Not After : Jul 27 16:00:11 2025 GMT
        Subject: CN=95bae86b213af3d8962ad0112d1b3fe5d4c49a26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:81:dc:98:f0:d1:8e:bb:be:c7:29:8e:44:ad:
                    5e:bd:0a:b8:60:3d:2e:24:64:75:74:ed:07:8e:93:
                    c6:c1:1f:21:6e:58:d6:6c:29:48:8d:79:07:0a:aa:
                    0b:b0:1f:99:56:77:39:5a:f7:36:b3:bc:86:1d:2a:
                    f2:86:d7:20:2d:45:fa:29:09:9e:0e:a4:99:b3:59:
                    a4:68:a5:77:68:89:e2:84:f8:bd:0c:44:4c:d9:8f:
                    04:d0:5f:9e:d4:28:28:a2:55:66:a7:11:6e:b8:f4:
                    16:7b:10:b6:f6:d9:20:f9:b1:79:63:03:36:8d:4a:
                    53:21:f7:8f:3b:5b:9a:d8:49:47:5b:3d:95:53:b3:
                    91:2e:a2:6d:9e:ed:bd:79:0d:0b:a3:af:a5:0d:58:
                    49:e1:1c:3d:fb:0e:3d:3d:48:12:a9:94:4d:09:55:
                    aa:45:0d:f2:46:cd:cd:7b:ab:09:c5:da:22:0d:8e:
                    2d:2d:73:f6:80:f2:8f:80:cd:0e:32:90:97:04:3f:
                    17:33:e9:cd:6f:ac:66:96:40:14:ff:5c:c9:ab:3c:
                    80:b5:37:bf:df:e9:58:ce:54:e0:7a:34:d1:88:b6:
                    c5:2e:af:73:92:4b:f0:2c:99:e1:47:5d:32:2e:6c:
                    64:b6:4e:6a:bf:27:0a:27:d4:cb:33:2e:d2:74:aa:
                    d1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:BA:E8:6B:21:3A:F3:D8:96:2A:D0:11:2D:1B:3F:E5:D4:C4:9A:26
            X509v3 Authority Key Identifier:
                keyid:F2:0C:28:D1:9E:0D:FB:53:48:26:AA:23:AA:50:6A:F6:8A:30:5B:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:20:79:80:3b:04:69:4d:9c:24:9e:b8:30:65:14:4f:07:8a:
         2c:11:72:40:fe:1b:f1:16:07:45:f9:c1:17:ba:ba:e5:5a:5c:
         92:98:6f:96:50:07:46:bf:a8:22:c1:4d:52:5c:8c:1a:85:36:
         65:ad:65:ed:0f:f6:2a:ce:e6:31:c1:4a:28:11:de:81:c9:b9:
         cd:3d:49:61:18:a7:3d:f7:95:6b:90:d1:8b:88:a0:a0:d4:d7:
         d1:38:5d:a5:7c:84:1f:e4:1c:64:dc:fa:4a:f9:21:f3:29:10:
         f5:97:a2:7c:b2:9f:58:02:4c:2c:56:6b:dc:5f:94:ee:df:ad:
         62:ed:0d:fa:e4:02:d8:8d:eb:94:03:18:eb:43:df:4e:8a:c7:
         b6:85:2a:da:5e:33:00:62:9b:de:90:fa:4d:1a:85:6c:41:23:
         1d:ad:69:cd:b8:a0:c0:9a:a0:ef:cb:b1:27:b1:65:22:17:39:
         62:a2:f8:7d:9e:88:3f:0f:96:1d:66:0b:3e:d3:71:d8:3c:2c:
         f1:36:e8:11:74:b2:a7:bc:4c:2c:4a:26:a2:8b:5e:f4:4d:50:
         1a:33:b7:17:3b:7b:4b:46:30:06:07:62:ba:0f:24:19:4f:f5:
         fc:df:f9:5a:75:db:53:5d:f1:1c:f1:f5:ea:c1:65:f6:43:92:
         76:e7:17:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:39:36 2025 by rpki-client