Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft
File:                     8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft (raw, json)
Hash identifier:          xDA2XzI0nRyRVKw+8mzg821GzJosGWgUEZgx2+M28EI=
Subject key identifier:   ED:CA:8F:4C:1A:98:42:B3:DC:2C:CD:92:08:47:71:E8:F4:78:41:29
Authority key identifier: F3:EF:6A:6C:FC:E3:43:F9:14:C9:AD:94:C3:41:0D:A0:0A:7C:D1:CC
Certificate issuer:       /CN=f3ef6a6cfce343f914c9ad94c3410da00a7cd1cc
Certificate serial:       019923A048F4DDCE1F3126A9284764DE61FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft
Manifest number:          15CB
Signing time:             Sun 07 Sep 2025 10:02:10 +0000
Manifest this update:     Sun 07 Sep 2025 10:02:10 +0000
Manifest next update:     Mon 08 Sep 2025 10:02:10 +0000
Files and hashes:         1: 8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl (hash: 4SJN45yaT8hko6onNs9dYMEj8oHog1b1kbQo3zPP1Fc=)
                          2: C3nJIzqXqtfT9J07ejsBxjCr7Es.roa (hash: 0iPZreySqxS1TmgmvlfhSgIdLiwkUUv4lfeOkL5knpY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:a0:48:f4:dd:ce:1f:31:26:a9:28:47:64:de:61:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3ef6a6cfce343f914c9ad94c3410da00a7cd1cc
        Validity
            Not Before: Sep  7 10:02:10 2025 GMT
            Not After : Sep  8 10:02:10 2025 GMT
        Subject: CN=edca8f4c1a9842b3dc2ccd92084771e8f4784129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e5:87:82:d0:60:c8:55:23:ba:86:e9:4c:cd:
                    86:5b:da:c9:ad:49:ec:77:9e:3c:c6:d9:0d:c2:0c:
                    16:4b:06:18:c5:db:b3:9b:a7:1d:89:4b:d4:14:63:
                    5f:aa:dd:49:2f:db:d6:4f:df:34:19:30:f5:a9:a2:
                    87:2e:a3:83:27:89:ec:ae:e4:38:f6:42:15:59:60:
                    df:c0:49:66:7f:53:4b:ed:ee:44:dd:54:91:e0:d9:
                    ee:83:37:26:21:19:8d:26:e1:1b:a6:98:f0:88:50:
                    72:50:b6:67:03:af:d3:cb:ca:9b:d5:06:a6:ce:86:
                    21:70:c5:8a:15:47:f9:33:70:3e:6a:a1:ea:39:7d:
                    e9:82:c3:73:6c:18:0f:02:fe:74:5c:4d:7c:d7:a4:
                    27:97:ac:b2:c1:2a:ac:66:9f:18:4d:45:d8:34:05:
                    e2:dd:ce:31:1d:06:fb:b0:f0:5f:77:12:41:88:19:
                    d4:6d:1c:1a:fd:10:95:8e:79:c0:45:da:a8:b1:47:
                    ae:35:8a:d6:7a:35:8c:b2:aa:cd:dd:a0:c2:06:d1:
                    35:fd:92:91:a7:81:b5:d9:5a:67:2a:52:05:aa:9a:
                    fd:06:02:da:44:8e:d7:96:6d:d8:61:02:50:d9:2f:
                    ab:6c:ad:87:30:00:6d:d8:d3:0f:7a:e7:3d:c4:44:
                    9d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CA:8F:4C:1A:98:42:B3:DC:2C:CD:92:08:47:71:E8:F4:78:41:29
            X509v3 Authority Key Identifier:
                keyid:F3:EF:6A:6C:FC:E3:43:F9:14:C9:AD:94:C3:41:0D:A0:0A:7C:D1:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:6a:d6:7c:45:b7:39:4e:29:54:9f:ea:d5:ac:c9:97:e1:97:
         4f:ca:b0:57:4b:6a:03:89:34:0f:29:29:60:d0:9a:a0:33:a5:
         e6:57:0c:34:8d:aa:01:eb:1a:d3:d0:1c:f6:ba:ad:54:d9:d4:
         7d:ff:c6:0c:07:64:18:f0:f4:08:59:1f:db:f9:8d:41:ba:75:
         0d:29:83:2e:22:c5:40:4e:5e:d1:e6:86:c3:54:d2:44:0e:d5:
         57:b6:db:bf:23:67:18:69:48:10:16:6c:77:49:e0:95:d1:8c:
         e6:a6:9c:11:3a:8d:f5:da:74:3e:7d:44:8d:3b:0c:e1:47:5a:
         38:39:e9:47:08:fe:91:7d:1b:89:5d:9e:cd:69:52:4a:5f:6f:
         38:e2:0c:6c:ae:1e:50:1c:f2:4b:15:ca:45:7a:d4:2f:e0:83:
         50:9a:7b:5f:1f:de:d0:3e:7d:1a:36:83:e0:fc:3f:04:13:1b:
         7c:34:9f:0b:c2:7d:fd:46:47:ae:c8:a0:79:43:f4:28:60:d4:
         48:f7:68:19:b5:79:85:be:a7:70:c8:29:0b:95:95:aa:e6:38:
         fe:08:bf:d4:f9:2f:3f:5a:90:c8:c4:41:b2:83:4a:a3:b8:66:
         77:c9:7c:b7:4d:86:d4:e3:59:99:71:2d:84:86:04:f7:60:1d:
         5b:42:c8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:35 2025 by rpki-client