Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft
File:                     3BZzebWR6VcQz38x3i7HP_v7Wuc.mft (raw, json)
Hash identifier:          7OU1L6++/b40XX3QOIt+MCTvxwNnw25eMXsU1Xdn2gw=
Subject key identifier:   82:2D:81:B9:04:0C:6B:22:35:FF:78:F9:D6:AF:77:5E:97:6C:9C:53
Authority key identifier: DC:16:73:79:B5:91:E9:57:10:CF:7F:31:DE:2E:C7:3F:FB:FB:5A:E7
Certificate issuer:       /CN=dc167379b591e95710cf7f31de2ec73ffbfb5ae7
Certificate serial:       019A26679D8D78318E91127DAAA951C19B6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3BZzebWR6VcQz38x3i7HP_v7Wuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft
Manifest number:          0819
Signing time:             Mon 27 Oct 2025 16:01:56 +0000
Manifest this update:     Mon 27 Oct 2025 16:01:56 +0000
Manifest next update:     Tue 28 Oct 2025 16:01:56 +0000
Files and hashes:         1: 0Le1rXg7oJe8K6MPap3I2ZdiV4k.roa (hash: 4I6jD4OL89hrVHmrCQFbzYD7IPae2EdBGBhAfTKl1h4=)
                          2: 3BZzebWR6VcQz38x3i7HP_v7Wuc.crl (hash: OTYuivdKJ5Pf8upv2INZmub9eJhW//inyYzxX2XmEmo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3BZzebWR6VcQz38x3i7HP_v7Wuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 16:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:26:67:9d:8d:78:31:8e:91:12:7d:aa:a9:51:c1:9b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc167379b591e95710cf7f31de2ec73ffbfb5ae7
        Validity
            Not Before: Oct 27 16:01:56 2025 GMT
            Not After : Oct 28 16:01:56 2025 GMT
        Subject: CN=822d81b9040c6b2235ff78f9d6af775e976c9c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f1:56:f0:39:c0:71:9a:8f:32:ec:0e:53:3f:
                    de:67:ed:c7:6b:e5:34:c1:76:67:f2:c3:af:6b:65:
                    8a:ec:e3:72:37:9b:a5:01:93:ba:1a:c9:ae:21:3a:
                    13:ca:ee:e7:f5:e4:6c:43:ca:9c:08:15:e4:51:d4:
                    9d:09:9d:ee:67:9d:11:00:41:b8:c0:51:4c:60:7c:
                    54:68:df:d6:a2:80:e9:a2:3c:d1:90:2a:f5:65:13:
                    03:f3:bf:f8:ba:ff:ae:53:f3:80:9c:64:3c:97:07:
                    2b:d5:7f:c6:8e:13:33:c5:01:60:a4:ed:36:d1:30:
                    2c:8f:07:18:5a:02:e5:7f:85:9a:ef:9e:cb:f5:fb:
                    4a:8e:11:90:d4:3d:3d:fa:56:8e:cd:28:4e:a4:2b:
                    88:5c:e4:00:4e:18:1b:1c:02:80:6e:e0:73:59:03:
                    f3:8e:d4:d3:25:e8:41:38:d1:e9:09:d0:c9:7c:d1:
                    f3:28:d1:ef:94:62:64:af:8f:bb:e9:fa:2a:c3:5f:
                    3f:ce:af:fd:7a:7d:4e:dc:f6:63:db:e8:41:13:2a:
                    59:22:97:e8:be:f4:04:f4:e3:f3:9c:6d:3b:05:10:
                    03:b5:68:db:d6:da:cb:d0:9e:f2:d7:75:7c:3d:c2:
                    3a:8f:df:08:a1:0b:9b:61:a8:e7:22:7a:66:70:68:
                    74:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2D:81:B9:04:0C:6B:22:35:FF:78:F9:D6:AF:77:5E:97:6C:9C:53
            X509v3 Authority Key Identifier:
                keyid:DC:16:73:79:B5:91:E9:57:10:CF:7F:31:DE:2E:C7:3F:FB:FB:5A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BZzebWR6VcQz38x3i7HP_v7Wuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:28:94:0c:ec:d5:73:68:b0:1e:19:42:8e:6c:55:6e:77:c1:
         bd:f7:09:88:48:7b:e4:99:c2:af:17:ff:ea:bc:b0:03:1c:0c:
         16:44:87:62:6b:06:62:7c:a4:4c:d4:ff:eb:2b:53:5c:db:90:
         32:b2:ad:c6:62:fd:6b:3f:e3:60:64:55:4f:76:d7:89:90:9b:
         41:d8:83:14:2e:a0:fb:17:1a:a9:07:7f:43:1c:65:fb:b5:b6:
         59:d0:40:1c:9f:3e:19:9f:e5:98:7f:7a:f7:58:34:a1:b4:bb:
         37:e1:46:63:96:aa:36:e3:11:5d:da:36:2c:32:81:4e:6d:84:
         6b:70:71:7a:a2:b1:f8:74:34:eb:52:18:0b:95:49:b3:a1:2a:
         1f:e9:b5:ec:46:e4:04:0c:30:3e:45:09:c5:e0:13:29:3d:d1:
         80:76:b5:75:b5:d9:e2:7d:78:f8:e6:30:a5:2f:f6:bb:40:41:
         71:eb:0b:5a:b6:a6:d6:69:b9:9e:a7:eb:9a:29:71:ee:ad:ba:
         9d:a2:a8:b5:db:ac:c7:1a:97:92:ec:9b:38:28:c2:cb:6b:57:
         a8:4f:82:20:1a:57:c3:05:cc:74:9d:15:06:35:9a:68:14:99:
         71:1f:13:43:5a:11:66:55:55:35:f9:7f:22:b7:e9:be:b7:9b:
         1a:c0:bd:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 02:42:51 2025 by rpki-client