Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
File:                     8J3iYg0i-mnFTL68by9IUFbOL-U.mft (raw, json)
Hash identifier:          NbZsRJ7m1eb4jdtXg8toGBVDbPHQ1IyvqSAmQGqCr0c=
Subject key identifier:   17:8D:71:90:7C:24:74:B6:F9:17:CF:4A:BA:50:E9:BF:FC:33:82:D2
Authority key identifier: F0:9D:E2:62:0D:22:FA:69:C5:4C:BE:BC:6F:2F:48:50:56:CE:2F:E5
Certificate issuer:       /CN=f09de2620d22fa69c54cbebc6f2f485056ce2fe5
Certificate serial:       0199239FDEC4E4685DB97015B10D6BD5BD8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
Manifest number:          0330
Signing time:             Sun 07 Sep 2025 10:01:43 +0000
Manifest this update:     Sun 07 Sep 2025 10:01:43 +0000
Manifest next update:     Mon 08 Sep 2025 10:01:43 +0000
Files and hashes:         1: 8J3iYg0i-mnFTL68by9IUFbOL-U.crl (hash: 1xOw2RNeJlY/AeBjzufKTWGUqDvAfBrtSGsn8uOJoG8=)
                          2: vlbjkguhua3sXNAb4WL9C-kH7NI.roa (hash: W2Tg0b912XPXpVMo5wmJMbF6s29yN1E6dtpyPDGr82E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9f:de:c4:e4:68:5d:b9:70:15:b1:0d:6b:d5:bd:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f09de2620d22fa69c54cbebc6f2f485056ce2fe5
        Validity
            Not Before: Sep  7 10:01:43 2025 GMT
            Not After : Sep  8 10:01:43 2025 GMT
        Subject: CN=178d71907c2474b6f917cf4aba50e9bffc3382d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:72:4c:42:9d:fa:44:60:35:47:20:f3:29:c9:
                    25:86:d2:8f:af:93:b0:aa:2c:af:9c:92:36:93:b1:
                    82:1b:fe:f9:66:28:8f:00:6d:fc:21:fb:d3:11:3c:
                    46:06:9b:50:8e:98:b0:73:2d:d9:f5:bb:8c:ca:63:
                    75:83:b6:c0:6d:6c:3b:52:33:8b:62:a6:ef:76:27:
                    c8:fa:97:a4:e6:c2:e1:ee:24:bd:21:f9:7d:df:85:
                    cd:8b:8c:6c:37:f7:63:e4:29:69:93:98:e3:15:5b:
                    3b:39:dc:1b:a0:17:63:71:8c:78:8b:61:36:7d:9d:
                    0e:1a:7c:63:2e:e2:3f:ce:93:39:0d:76:95:6c:c6:
                    9a:dd:4b:eb:38:64:a1:8c:e7:33:da:41:15:5c:9f:
                    27:26:f6:92:de:7b:a0:7c:6c:d8:1b:f2:09:0e:cc:
                    3d:7c:cb:11:e4:ff:1a:d5:da:13:bd:22:2e:f2:0d:
                    7a:c5:d8:b5:5a:31:ff:83:ff:33:dd:ff:50:f1:52:
                    99:35:03:fb:b0:98:da:12:4f:97:6f:ee:a5:3e:cb:
                    ea:6a:39:ea:61:66:8d:f3:a1:44:c3:f8:be:f6:bf:
                    a6:20:ac:3c:c2:d6:0b:fb:85:6f:7c:62:21:2a:ed:
                    d3:8b:e9:7c:0e:8e:a1:50:66:62:30:5d:63:b2:2b:
                    5a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:8D:71:90:7C:24:74:B6:F9:17:CF:4A:BA:50:E9:BF:FC:33:82:D2
            X509v3 Authority Key Identifier:
                keyid:F0:9D:E2:62:0D:22:FA:69:C5:4C:BE:BC:6F:2F:48:50:56:CE:2F:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:8c:3a:64:f3:7e:bf:38:af:03:7f:54:d6:63:f0:06:80:7e:
         21:1e:60:17:d3:25:d7:26:df:e3:d3:e9:6f:0c:7e:b3:f6:cb:
         2c:c7:91:15:85:c2:85:03:af:e1:c9:20:a9:30:25:4a:a5:32:
         61:be:3c:01:40:20:7a:aa:2b:8d:0b:6f:51:1e:7e:87:54:9a:
         c6:d4:ff:11:bc:36:06:c1:4c:2e:1d:13:14:3d:60:5c:15:00:
         69:5c:89:5d:eb:6b:a1:f6:c4:ee:a8:53:02:2f:36:7e:99:73:
         50:dd:a0:e4:9c:1e:70:d8:2a:b7:2a:48:1e:d7:e7:89:d7:3c:
         31:c6:4b:97:a2:a5:54:1d:63:af:56:62:a5:4e:7f:6e:af:2b:
         0f:7c:45:89:f9:ae:00:23:b5:64:c6:54:b7:c2:da:af:24:12:
         fc:4c:80:b1:72:2c:b6:2d:4b:06:27:96:2e:82:76:fe:37:4b:
         4b:7f:df:14:c2:a2:d0:5a:07:53:24:c6:cb:bf:0d:d3:9c:73:
         ee:69:4f:1a:97:2d:38:99:30:1c:2b:56:ec:09:30:38:d3:50:
         20:70:50:c8:f5:3b:34:75:75:d9:4c:5e:7d:91:1e:53:3f:f9:
         24:5c:d0:f4:cb:22:13:7a:96:22:8b:92:d9:b5:11:a7:fa:0c:
         f3:10:e8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:05 2025 by rpki-client