Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
File:                     8W6j8DMLITLQ33UvUfDgv-89G64.mft (raw, json)
Hash identifier:          qyEdBX0EX0aCkO2MsiGWTd/4ZTM/K52suTaiazva540=
Subject key identifier:   C2:7C:1C:9F:41:97:24:17:3F:20:A2:11:E2:92:31:94:1C:79:A6:35
Authority key identifier: F1:6E:A3:F0:33:0B:21:32:D0:DF:75:2F:51:F0:E0:BF:EF:3D:1B:AE
Certificate issuer:       /CN=f16ea3f0330b2132d0df752f51f0e0bfef3d1bae
Certificate serial:       019922560133271E5D3C262E994049C1BE2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
Manifest number:          1673
Signing time:             Sun 07 Sep 2025 04:01:25 +0000
Manifest this update:     Sun 07 Sep 2025 04:01:25 +0000
Manifest next update:     Mon 08 Sep 2025 04:01:25 +0000
Files and hashes:         1: 8W6j8DMLITLQ33UvUfDgv-89G64.crl (hash: tROMRHN6xvdEYoLBVaBWuAzXB5fCQVWYHYoRScRgYAc=)
                          2: Im2JQRLROW71vKm8r2oO6Xo1LEY.roa (hash: MahGrn/8hOcGcxLx7I6GfG5YqTkwO2eBFakKNoAC1GA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:56:01:33:27:1e:5d:3c:26:2e:99:40:49:c1:be:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f16ea3f0330b2132d0df752f51f0e0bfef3d1bae
        Validity
            Not Before: Sep  7 04:01:25 2025 GMT
            Not After : Sep  8 04:01:25 2025 GMT
        Subject: CN=c27c1c9f419724173f20a211e29231941c79a635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ab:a0:b6:1c:59:f3:1d:49:1b:c8:3e:0d:ae:
                    2a:ba:75:1b:d3:e5:65:87:34:12:68:43:85:f2:de:
                    25:18:c3:01:24:f1:46:d9:27:ed:30:61:3f:70:cf:
                    a2:82:4b:cf:c2:f8:cd:04:c3:65:88:72:b9:70:52:
                    34:1f:4f:87:fb:28:5d:5c:e8:e6:96:94:34:7a:48:
                    cf:56:b5:54:9c:ef:06:fa:85:55:35:4a:ac:98:1c:
                    ff:89:35:7c:fd:bc:bc:3b:78:9f:44:f6:42:fa:3b:
                    9d:d3:70:7b:31:49:60:e1:76:0b:9a:6f:d8:8f:c2:
                    2c:4f:2e:fd:13:83:31:b5:0a:3e:d6:c3:d0:26:29:
                    4c:3e:37:9a:9d:90:c9:f7:80:b9:e6:fe:f3:a7:da:
                    0a:cf:20:9e:69:6b:0f:3a:9b:8f:17:4d:28:b9:39:
                    6d:c1:29:bf:05:7d:c7:55:7c:1b:f9:dd:1e:c8:86:
                    87:78:56:aa:19:89:7c:a0:09:5c:1c:7e:e9:89:61:
                    42:24:7b:77:38:9f:4e:86:bc:98:fb:2a:49:c7:b0:
                    16:2d:76:5b:73:0e:38:cf:0d:a8:dd:ab:8a:ee:e8:
                    67:f0:c7:a8:64:15:70:ae:d1:dc:ae:9e:d7:1b:10:
                    5c:d1:99:e8:6a:c5:6b:d9:ed:83:fe:26:e8:0a:b5:
                    b6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7C:1C:9F:41:97:24:17:3F:20:A2:11:E2:92:31:94:1C:79:A6:35
            X509v3 Authority Key Identifier:
                keyid:F1:6E:A3:F0:33:0B:21:32:D0:DF:75:2F:51:F0:E0:BF:EF:3D:1B:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:1d:47:9f:bf:77:de:33:1d:bd:59:42:e7:8e:7d:73:5d:b2:
         a8:d4:0f:79:94:ca:30:91:6c:cc:14:e7:07:f9:ea:ba:81:cc:
         0d:5e:52:09:82:f7:32:d4:bb:d6:44:6f:7e:07:22:b0:69:97:
         82:15:55:b5:b2:a2:25:33:eb:96:c7:43:db:ee:30:3b:83:2b:
         e3:74:61:3c:4a:71:c5:d5:c0:4c:22:72:79:43:21:75:77:51:
         de:45:57:64:29:ae:f0:5e:9c:c7:ac:28:c3:f4:de:02:f3:32:
         f3:bd:1e:06:c7:70:a1:90:49:d5:ec:9a:0f:2b:04:ed:cd:60:
         ed:06:e9:23:ca:47:98:f7:76:47:0c:62:9a:12:30:db:f6:29:
         d5:4d:07:0b:cd:9a:e4:b2:69:41:08:67:f1:d2:04:02:d4:e1:
         b5:ba:8b:69:56:9a:74:b4:b2:40:43:da:dd:4d:2e:77:fa:48:
         2a:09:dc:30:19:5c:88:63:63:11:07:36:77:8e:0d:4f:43:e6:
         3c:3a:a2:ba:3d:1e:e2:dc:5b:18:18:3a:fd:ff:05:ff:92:9c:
         de:9d:f6:26:19:03:62:5c:27:ba:68:f3:d5:a5:72:1b:1a:80:
         61:4c:66:74:7b:49:a8:ae:a0:77:fb:02:83:c0:ad:88:bd:33:
         65:cb:53:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:48 2025 by rpki-client