Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
File:                     8q7r5B0FGChKujpPXl2gXPq9b3Y.mft (raw, json)
Hash identifier:          KwvKTZL5kbt+kY5Iz87JTZUGDaB1pVsKhsZLv9jH9Lo=
Subject key identifier:   FE:29:70:3E:6B:82:2B:AE:13:85:38:80:53:98:1D:41:BF:2C:EF:50
Authority key identifier: F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76
Certificate issuer:       /CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76
Certificate serial:       0199180A8FABC4E47295E0E0D9E0076CB26B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
Manifest number:          166D
Signing time:             Fri 05 Sep 2025 04:02:49 +0000
Manifest this update:     Fri 05 Sep 2025 04:02:49 +0000
Manifest next update:     Sat 06 Sep 2025 04:02:49 +0000
Files and hashes:         1: 8q7r5B0FGChKujpPXl2gXPq9b3Y.crl (hash: 0aBrpWa+FSWn9p7S+UjzQiKkdHV5+mo/4iOihseCnO8=)
                          2: M0x4P-eqDOpLCOY_5rdYfIPAYXc.roa (hash: Hz1NV4C1yE6vehHnBgkxV2TE2v53JgdybplNGjL2XYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:18:0a:8f:ab:c4:e4:72:95:e0:e0:d9:e0:07:6c:b2:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76
        Validity
            Not Before: Sep  5 04:02:49 2025 GMT
            Not After : Sep  6 04:02:49 2025 GMT
        Subject: CN=fe29703e6b822bae1385388053981d41bf2cef50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b6:b0:5c:b1:53:68:76:2e:6c:1a:e8:73:b2:
                    75:b4:71:22:23:01:2c:97:b2:25:80:c3:1c:73:f8:
                    da:21:54:af:c0:d1:af:21:df:fd:b3:45:0e:72:f7:
                    c7:cb:79:ec:07:79:5d:f8:25:d6:d0:02:ab:c0:81:
                    7c:e9:f4:51:77:e2:7e:f6:bb:29:42:6e:b2:0f:4f:
                    a9:0d:a9:fd:be:06:d2:80:62:03:a5:81:df:22:dd:
                    c3:91:c3:47:75:48:73:82:fb:f5:3f:d2:e1:10:fd:
                    de:0f:74:54:6f:88:33:c2:d7:7e:84:71:e7:d2:88:
                    d5:4b:3e:89:27:56:e5:e8:be:d0:f1:a6:7b:d8:bc:
                    a7:b7:81:00:08:7b:33:f1:9e:70:ce:a1:31:f2:62:
                    90:fc:40:22:d5:60:bd:78:9d:a5:e6:6d:33:3e:17:
                    de:02:c8:01:8e:c2:b7:1b:16:94:86:a1:55:59:27:
                    4f:cd:6a:cf:d6:74:35:87:bf:e5:e3:53:7f:a9:30:
                    59:75:1a:8b:1b:d9:f8:48:70:0d:12:89:6a:7a:28:
                    e9:43:b8:31:b2:57:9f:99:fa:5e:d9:e5:e6:73:67:
                    7c:ab:ee:1a:f5:ff:1e:93:97:87:85:22:67:4a:4c:
                    4d:46:c6:1d:d8:43:ce:89:07:b5:51:38:c7:35:35:
                    3e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:29:70:3E:6B:82:2B:AE:13:85:38:80:53:98:1D:41:BF:2C:EF:50
            X509v3 Authority Key Identifier:
                keyid:F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:a0:c8:e8:8e:3a:c4:de:cf:98:2a:55:7c:cb:40:d4:ec:c3:
         40:2f:05:a5:57:c0:f0:f3:d5:c8:92:95:e7:8d:eb:ca:6a:d0:
         44:80:86:3a:ed:81:74:2e:75:20:d8:24:b2:45:3b:76:29:fa:
         72:c5:fc:df:53:db:ca:35:23:8a:d9:1c:21:38:87:e3:fe:5f:
         05:31:e3:2d:f8:52:64:0e:22:cf:9b:8d:27:20:10:a6:86:e3:
         bd:a3:f9:e0:da:d0:c4:5c:83:7a:48:e8:03:38:a2:ef:95:ef:
         1e:dc:26:1c:31:77:05:59:0e:82:df:ac:fc:6f:19:8d:52:93:
         32:a5:df:47:5e:66:fb:d0:d5:60:8c:62:0f:3d:ed:45:d4:29:
         01:67:40:4e:24:01:40:a9:0a:0e:b1:b1:a1:70:59:ab:ae:09:
         85:9f:c4:19:34:fb:4a:2d:a4:e6:68:35:57:35:4d:cf:28:78:
         18:7f:cf:1b:52:18:5f:f6:b9:77:95:7d:05:df:2a:0f:67:8a:
         7c:2f:30:96:59:78:ca:dc:c5:3d:e0:d9:44:39:55:ee:9b:6c:
         8d:e1:a0:48:aa:1c:74:04:35:f6:72:ac:f4:a0:5f:b9:b1:32:
         60:d4:0f:19:9e:cb:21:2c:20:bc:7f:72:92:66:27:b4:01:40:
         fb:91:73:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:10:20 2025 by rpki-client