Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
File:                     8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft (raw, json)
Hash identifier:          69Cye+52MyOj3kbpFjpDsW5o2Clm5iYF4ir3joqWT0E=
Subject key identifier:   E3:F2:B6:13:C0:A8:DB:89:CD:AB:02:CE:9C:0D:C8:34:D0:EF:B1:DD
Authority key identifier: F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC
Certificate issuer:       /CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc
Certificate serial:       019921B11679CAA71181FBB1B426633A4635
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
Manifest number:          02E1
Signing time:             Sun 07 Sep 2025 01:01:17 +0000
Manifest this update:     Sun 07 Sep 2025 01:01:17 +0000
Manifest next update:     Mon 08 Sep 2025 01:01:17 +0000
Files and hashes:         1: 5706RB7xeG9S4d5Ob5hAT-sWDQM.roa (hash: 3YUiY2PHwBycE1YPX5AAcbWdNPxFb9hnL/xR1TAUp9s=)
                          2: 8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl (hash: k9HLjJ1GDZG05b+ql8//oVzYCykFkbg2t8xTcXfezeM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b1:16:79:ca:a7:11:81:fb:b1:b4:26:63:3a:46:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc
        Validity
            Not Before: Sep  7 01:01:17 2025 GMT
            Not After : Sep  8 01:01:17 2025 GMT
        Subject: CN=e3f2b613c0a8db89cdab02ce9c0dc834d0efb1dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d9:46:80:3d:bd:56:06:2b:da:d1:60:00:cb:
                    62:d2:35:fb:ae:0f:e3:99:c9:32:61:cf:60:6c:e9:
                    b5:0d:47:de:25:c5:64:6a:28:3a:77:2a:cb:46:3e:
                    11:d7:0b:28:99:20:ca:c1:3e:a3:a7:d1:2c:d4:cd:
                    15:da:69:82:e9:1e:6f:da:72:88:44:8d:24:ea:3a:
                    e5:ad:50:f6:be:61:bd:7c:2a:a3:12:d2:2e:e2:ba:
                    10:66:54:98:cc:1b:ca:95:2a:7d:5e:fc:64:8d:a6:
                    94:7d:35:ee:d6:68:23:f6:f3:fc:92:dc:32:e3:9d:
                    f8:5f:25:da:aa:0b:35:f1:0a:8b:d7:3d:c0:d2:91:
                    3d:63:38:42:ad:7c:5f:58:34:5e:96:64:bd:c4:03:
                    32:d6:e2:92:4a:0b:ec:db:82:34:d4:91:1d:47:f8:
                    af:27:16:04:26:5a:ac:d4:74:d6:62:88:d0:d0:0b:
                    4e:40:89:75:90:4c:0e:f6:ec:60:32:5a:e7:94:b7:
                    73:28:de:33:1c:b1:10:31:9c:c2:de:8f:ce:d9:ba:
                    b9:19:68:72:61:8c:31:21:c8:68:b2:57:73:38:2a:
                    38:8a:87:23:83:3f:59:68:96:cc:bb:cb:3a:59:a7:
                    51:f9:f9:85:06:b7:71:00:ae:62:c2:e9:9f:c2:9a:
                    d7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F2:B6:13:C0:A8:DB:89:CD:AB:02:CE:9C:0D:C8:34:D0:EF:B1:DD
            X509v3 Authority Key Identifier:
                keyid:F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:13:1d:68:5a:67:da:c6:e8:a7:a0:ca:15:e6:2b:d8:c7:86:
         7f:fa:d0:07:20:0f:ec:bb:b4:b6:fe:9f:3b:d2:bd:51:f4:b5:
         2a:cc:63:e4:84:14:87:17:25:47:d3:0f:d9:00:8d:3a:d6:0d:
         de:63:1c:14:77:08:bb:0d:5b:85:c7:cd:fb:a4:5a:e1:18:04:
         d9:19:6e:54:89:6b:c4:fc:ed:19:03:06:c0:b6:27:ad:2d:f3:
         6b:00:9b:11:43:c5:b7:33:94:ac:a2:30:5a:aa:11:77:87:da:
         19:bc:bf:9a:fd:f0:5a:5a:63:12:38:1f:3f:6c:ab:91:4c:b9:
         de:02:43:f4:48:a6:a0:6d:46:da:74:5e:b2:9b:8c:8a:2e:e3:
         74:9d:28:d3:4e:e3:50:de:48:1c:95:84:64:aa:47:eb:fb:cc:
         85:83:58:f3:57:73:9f:0b:e9:c7:13:dc:30:23:d4:4c:b6:b9:
         ea:e8:4c:73:9e:a2:cb:86:a8:35:6e:61:de:ff:84:c9:f6:7a:
         d9:04:b1:34:7f:c7:fe:11:94:06:51:ff:af:4b:fa:17:2b:99:
         f9:b3:90:28:c0:b5:7d:41:6d:c4:5a:74:ce:82:09:63:01:ca:
         45:6a:16:65:b2:31:b8:94:bf:01:4b:dc:81:2d:09:91:aa:8b:
         e6:ee:73:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:03 2025 by rpki-client