Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft
File:                     8aBsbBCOlBmyzbIdSLSaa71sFt8.mft (raw, json)
Hash identifier:          0F2qMbpfWmm9AIgGQnBnjzo6dE1KrB9rpjFlvWcsSXI=
Subject key identifier:   DC:D3:B9:A9:8E:84:68:57:91:2B:0D:B1:26:1A:89:BA:46:37:6C:76
Authority key identifier: F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF
Certificate issuer:       /CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
Certificate serial:       019936EF91F198237149C0DCED144934C42E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft
Manifest number:          1633
Signing time:             Thu 11 Sep 2025 04:01:34 +0000
Manifest this update:     Thu 11 Sep 2025 04:01:34 +0000
Manifest next update:     Fri 12 Sep 2025 04:01:34 +0000
Files and hashes:         1: 8aBsbBCOlBmyzbIdSLSaa71sFt8.crl (hash: aC4mLAJ5MgincJoVjMZHxLpybCk6KiOi9YKFR2hQ3fI=)
                          2: LYYtWBIrqnMkBqXL_qoGSSiMC0A.roa (hash: GO+MMgl638g9Pe8U4lrnZd+WeVwSJjTIvRPV7rn/M2U=)
                          3: qUqbG1fI6WnBp5sF-Oa70_Lholo.roa (hash: Onc/iKE+MBUdx68cwO8V8LQmCLrY9+uNfRvlbv3SVUg=)
                          4: vNazpVnOuKKsE-A9nDrKkBqBqmw.roa (hash: 6yzwUeXrNsunwiRKny+F9bobTBkszKyU+zUViVo+zKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 04:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:36:ef:91:f1:98:23:71:49:c0:dc:ed:14:49:34:c4:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
        Validity
            Not Before: Sep 11 04:01:34 2025 GMT
            Not After : Sep 12 04:01:34 2025 GMT
        Subject: CN=dcd3b9a98e846857912b0db1261a89ba46376c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:25:05:49:ea:b0:ef:7c:c9:c7:f3:38:ee:20:
                    7e:cc:76:78:a8:fb:9b:c6:e3:96:d8:47:f7:2b:0b:
                    6f:57:a2:6e:c7:a7:ba:43:68:64:62:65:bb:f5:74:
                    93:b2:07:28:e7:ca:0e:08:e8:0a:e1:33:f3:b7:f3:
                    dc:a1:5a:69:db:35:59:14:a5:37:b8:85:eb:48:48:
                    05:8a:42:78:ac:3c:a6:9f:dc:ab:0e:0b:84:6a:67:
                    d8:12:c5:9a:88:5a:94:6d:12:78:b3:41:cd:52:c4:
                    96:c9:9f:81:a1:0a:30:ad:6d:1a:d2:dc:10:f8:32:
                    00:1a:b3:03:d0:3b:6e:c7:ff:f8:86:b6:5a:f0:3a:
                    cd:1f:ff:cb:83:17:6f:a6:26:d4:a2:c5:ee:08:35:
                    b7:dd:15:ae:66:48:af:ed:fc:02:4f:0e:af:7c:ec:
                    d6:1d:f6:c3:cc:9c:ea:be:b5:fc:d5:d0:ee:6e:f4:
                    04:55:36:3f:72:f5:ec:dd:25:e4:10:a5:20:6a:de:
                    23:b6:38:f4:55:e3:e3:b2:b4:07:38:8a:bc:cd:ff:
                    84:75:74:9a:2d:9c:69:74:58:c6:64:11:7d:f9:46:
                    ac:5b:f1:e5:ae:d2:05:81:e9:ad:73:c9:5c:06:ad:
                    89:45:1c:93:5f:ce:46:f2:70:42:72:68:95:66:b0:
                    6d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D3:B9:A9:8E:84:68:57:91:2B:0D:B1:26:1A:89:BA:46:37:6C:76
            X509v3 Authority Key Identifier:
                keyid:F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:c7:68:8b:72:dc:dd:c9:d0:f7:af:f3:b5:8c:82:78:43:bc:
         44:6f:24:9e:fc:e5:76:8d:18:fc:e4:97:ab:54:bc:50:6a:ff:
         b1:19:a4:ee:d3:08:f6:af:40:5e:04:f5:2f:eb:a3:1b:fa:a3:
         9b:13:b0:cd:6a:c8:2c:f5:9f:ec:76:74:5e:6a:be:e3:5e:93:
         45:52:e8:39:73:61:da:e6:83:d7:e0:b4:2b:9e:8f:f9:11:96:
         90:85:58:44:73:0e:92:ea:3a:35:5d:25:f6:90:45:00:d2:2b:
         9b:02:69:53:9e:34:76:89:aa:96:7c:18:44:51:1a:7b:3f:b4:
         86:59:ab:00:99:b0:e9:cf:fa:93:64:5c:b6:90:c8:08:5d:ff:
         da:17:f6:b0:09:37:82:6f:66:6e:c0:f5:90:46:db:dc:c8:b6:
         c8:ee:ca:0c:9e:d5:e1:17:2c:ff:71:1e:a2:ae:fc:2c:d9:6d:
         46:6d:ab:2f:9e:78:79:de:fa:66:03:ba:ca:bd:ee:ce:1d:93:
         c3:1c:4f:60:68:76:bf:f9:e5:4c:21:00:76:1d:2e:c9:d5:ba:
         19:1f:fa:ed:e3:d0:e0:b9:d3:00:4c:27:54:17:7d:da:d7:8b:
         31:55:a6:db:8e:d8:f5:e2:25:eb:42:fa:3a:51:98:43:4c:5a:
         32:75:b1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 08:53:34 2025 by rpki-client