Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
File:                     8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft (raw, json)
Hash identifier:          D3OOQF3iYEanTnt0iBS13PqS/WRO/kVwvZWJ6cSjxEo=
Subject key identifier:   95:FE:12:E3:5A:9D:A5:DE:37:26:99:96:BD:96:60:7C:52:40:26:FE
Authority key identifier: F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8
Certificate issuer:       /CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
Certificate serial:       01993CBAFB065E2A00CF80F2AF2CDE8E39BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
Manifest number:          107C
Signing time:             Fri 12 Sep 2025 07:01:50 +0000
Manifest this update:     Fri 12 Sep 2025 07:01:50 +0000
Manifest next update:     Sat 13 Sep 2025 07:01:50 +0000
Files and hashes:         1: 79lt-80txKIWQWCp9jNMLc2IHAs.roa (hash: 8V+u82sHy+GzDpyon/8u7WM8JnJcqgS9AiUeL6z8Iug=)
                          2: 8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl (hash: tcdBx24vpNfNDhxFiUCMRk83350EQNEiJPokKwSXiaM=)
                          3: AQ7FmuvDz62F8uKHQpuKMEYydQQ.roa (hash: M9DqKPgllLnW8MX9RGkl/xHC2u96Nyjw3cSwX+kD68U=)
                          4: Vf1RDh-x6BtkmqUI8kQeJAmyoeQ.roa (hash: 1PUOdlU3yqRdUd5Mz1TUUvBo/uRT6+wW9qnbLMW13lU=)
                          5: lXo95w5iGY2qlCwar4Vb6ngfmUQ.roa (hash: K7cw6ymMs8oJcHolnWrjFvAyiZlrz4VloYZ/Ck1llmM=)
                          6: nUxTi5H5Wi_nGNCH8VXylwgxdJ0.roa (hash: xSWU06TWSLqiugEcuWmt4LzGgEiH/rhkdBHL5vVX0+0=)
                          7: omuf2rqv4Sp9P-8ZJZ916fSowyA.roa (hash: UlQgwX4zh3WqyryliD1lENPsPKINDm9DlFR8/vawBBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 23:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:3c:ba:fb:06:5e:2a:00:cf:80:f2:af:2c:de:8e:39:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
        Validity
            Not Before: Sep 12 07:01:50 2025 GMT
            Not After : Sep 13 07:01:50 2025 GMT
        Subject: CN=95fe12e35a9da5de37269996bd96607c524026fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:19:3f:d8:82:0b:4a:38:d9:c5:d7:49:fa:8b:
                    53:80:e5:15:cc:e9:a4:63:3c:88:05:16:e9:b0:bb:
                    43:ff:dc:f4:3c:a0:93:b4:4d:44:7e:ea:01:d6:b4:
                    d2:ca:82:58:5e:9f:7e:be:bb:67:d5:32:68:62:5b:
                    56:9a:36:1f:10:de:ed:2d:e1:4e:ed:f8:14:74:dd:
                    98:f7:ef:82:75:c7:0b:c8:24:ea:2f:d3:9e:ce:2f:
                    2f:3e:02:ab:d3:57:59:04:34:e5:76:28:1f:65:27:
                    e4:d1:9e:ab:16:a0:b8:85:6d:83:6d:bb:4e:dc:19:
                    58:57:6c:d8:f8:d4:6e:1b:24:94:b7:5a:d0:94:c7:
                    97:f2:fb:9a:1f:f6:b2:0a:92:cd:28:fe:76:8e:8e:
                    0b:69:0c:43:03:58:07:76:f2:81:9e:8b:8b:d3:f0:
                    8c:85:e0:5c:16:6e:d0:82:93:dd:45:bf:5b:ee:f7:
                    64:f9:99:ce:6f:d0:8f:28:4e:13:96:3d:a5:50:92:
                    c0:bd:8a:8f:08:54:3b:e8:e3:fe:7c:f6:d8:a7:24:
                    1c:11:a5:28:50:dd:55:b9:a7:e1:d2:fd:42:fe:46:
                    c6:31:0a:10:7c:b3:e2:9d:89:63:4a:3d:87:e6:2a:
                    ea:5d:09:9d:29:80:bc:5b:f4:da:06:9f:11:8b:2b:
                    fc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:FE:12:E3:5A:9D:A5:DE:37:26:99:96:BD:96:60:7C:52:40:26:FE
            X509v3 Authority Key Identifier:
                keyid:F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:d8:ad:a5:29:aa:3d:a7:ed:79:e2:45:43:c1:0b:7d:b1:0b:
         16:9f:7a:92:6d:09:69:8b:0d:92:2a:a6:93:bd:c3:b5:a4:1f:
         8b:6b:db:ce:f9:77:9b:12:dc:c8:d0:66:b3:51:45:a6:86:74:
         2d:ee:66:f6:6d:d5:d5:56:90:0f:9c:81:cc:34:70:bd:e8:83:
         2a:05:4a:43:68:05:c7:77:65:de:2c:6f:a7:6a:f0:a0:e9:90:
         f5:9f:68:56:13:a1:c3:84:22:c6:9d:f5:0e:92:16:71:a4:53:
         03:dd:d8:53:80:58:e0:ad:57:77:05:54:eb:a2:ee:eb:02:04:
         73:5a:b4:fa:f0:d5:01:ba:84:c2:f1:d7:ff:6d:34:33:1b:2f:
         ae:c1:82:17:3e:9e:1c:ae:28:1a:2e:f7:73:85:66:5c:76:22:
         a6:d9:86:ed:22:0b:87:b6:f8:13:00:d6:ee:af:51:80:f3:b4:
         63:7f:6d:b7:52:fc:1d:0d:cf:6b:7f:63:45:a0:41:0b:d8:84:
         25:f0:d2:86:ca:50:d4:0d:2b:e0:09:c0:b3:81:40:1a:02:f5:
         3c:61:9e:e4:3f:05:38:07:af:e5:6e:08:cc:a6:ea:4c:3c:2d:
         05:a6:85:f1:c6:16:08:62:18:62:fd:bd:c3:56:9c:ca:d5:98:
         56:fd:3e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 08:23:45 2025 by rpki-client