Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
File:                     iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft (raw, json)
Hash identifier:          dIbWVI7FiGuS5hdYk2iaRrGDTS5mBwgHmdeknEjWl38=
Subject key identifier:   6C:2C:B7:13:35:0E:06:FB:17:4E:E1:49:41:08:53:31:F6:9F:4D:B1
Authority key identifier: 89:2F:3F:F3:C0:A1:FF:B3:AF:20:F5:B9:5E:8C:B6:4C:88:04:3F:39
Certificate issuer:       /CN=892f3ff3c0a1ffb3af20f5b95e8cb64c88043f39
Certificate serial:       019A563FED395DBA218A67A7165452DE65EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
Manifest number:          017B
Signing time:             Wed 05 Nov 2025 23:00:21 +0000
Manifest this update:     Wed 05 Nov 2025 23:00:21 +0000
Manifest next update:     Thu 06 Nov 2025 23:00:21 +0000
Files and hashes:         1: FN5Ke6qZ9WFTebO_qSnsGPrtdwA.roa (hash: znT88sYfk6NGdvoBku5OfzDNqhRT8YmCdSbEF1DvoG4=)
                          2: iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl (hash: OTKjc2T+Tu5wv9eimIqclgDK1EJfO9t+7AyJj1JQiOU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 21:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:56:3f:ed:39:5d:ba:21:8a:67:a7:16:54:52:de:65:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892f3ff3c0a1ffb3af20f5b95e8cb64c88043f39
        Validity
            Not Before: Nov  5 23:00:21 2025 GMT
            Not After : Nov  6 23:00:21 2025 GMT
        Subject: CN=6c2cb713350e06fb174ee14941085331f69f4db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9f:4f:9b:72:26:21:53:f3:21:e9:ac:1b:7b:
                    2b:2e:a4:17:fd:a5:84:a2:2c:56:cf:73:c5:a3:f2:
                    e9:fc:e3:0f:a7:12:ab:7e:8a:52:e9:9b:8e:51:a1:
                    3c:e1:21:36:eb:bc:05:c3:89:ee:77:77:d7:6b:40:
                    29:e7:5b:52:fc:1a:49:68:ed:6f:64:be:28:eb:b6:
                    f6:6b:e3:1f:05:8d:3d:23:8c:53:b2:39:ac:da:af:
                    49:f5:6a:14:e5:80:f3:8b:29:42:c2:32:ce:7e:7e:
                    86:f6:89:d9:df:fa:fc:01:87:63:bf:05:32:94:f4:
                    17:0c:88:6a:ee:d9:5a:da:13:ec:28:40:06:50:b3:
                    96:28:0f:01:cb:9b:e9:25:c9:78:3d:48:13:71:60:
                    7c:f6:c2:7b:26:dc:1f:db:2b:a0:54:f3:a3:69:ad:
                    1c:68:72:c9:57:e7:1a:7e:8b:d9:41:b9:23:d6:bf:
                    46:f5:8f:9d:aa:7f:48:6a:17:76:be:5d:b4:c2:51:
                    08:d0:48:9d:e7:ed:fc:3c:bf:3a:1e:56:65:3d:59:
                    07:3a:ad:28:2d:60:78:79:39:7d:73:8e:4b:18:53:
                    3b:1f:5a:97:67:65:46:b5:f7:13:ed:41:4c:77:07:
                    48:6e:73:16:e7:ab:f9:45:1c:4b:11:40:20:ec:6d:
                    55:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:2C:B7:13:35:0E:06:FB:17:4E:E1:49:41:08:53:31:F6:9F:4D:B1
            X509v3 Authority Key Identifier:
                keyid:89:2F:3F:F3:C0:A1:FF:B3:AF:20:F5:B9:5E:8C:B6:4C:88:04:3F:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:e4:2a:c5:99:22:12:10:03:33:d9:b5:42:ee:e9:4e:30:c6:
         0e:29:e2:6e:5a:a3:0c:c6:9e:1f:52:89:1d:9f:f3:32:bc:1d:
         e8:b7:40:19:91:9b:2d:cf:a8:97:2b:c0:07:a5:ea:8e:83:fa:
         5c:d6:9e:89:a3:f4:00:1a:51:f2:c3:13:b9:67:65:ff:98:01:
         42:b9:c0:ef:53:4a:91:e4:3c:c6:26:97:ca:d9:c9:b8:ee:91:
         0b:48:6e:c1:e0:72:90:56:63:86:2f:5c:8a:26:ba:e5:dc:9c:
         dd:af:b9:d7:6b:0d:65:6d:d0:e3:e7:2a:62:16:79:fc:25:90:
         6e:e1:ef:17:f0:da:6c:d7:aa:46:c1:eb:fd:52:15:25:1e:5c:
         70:cb:25:5e:fc:cf:2b:a8:d6:ad:52:01:e1:d4:d7:fd:af:0d:
         08:23:5b:3b:22:82:63:71:31:4c:0a:71:cd:61:b3:86:80:f0:
         63:ba:83:a1:54:98:25:01:a4:ee:f4:9f:ef:4f:d5:26:12:a4:
         9b:ce:01:bc:fa:43:b8:da:53:77:dd:3d:b1:31:3b:74:e2:5b:
         26:a2:71:27:63:80:68:e2:e5:b7:b8:cf:8f:de:f9:50:21:4d:
         8a:96:4e:3b:85:b1:85:1e:8d:ed:0d:bc:c2:9c:59:42:ea:e6:
         a0:16:8c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 03:43:11 2025 by rpki-client