Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
File:                     8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft (raw, json)
Hash identifier:          TzNTdQjOQ3hGFww2H4sVoOAHmn3zTG8rPjITZxpxu9k=
Subject key identifier:   02:85:4E:6A:27:6A:07:F0:A1:51:D7:39:48:35:5E:42:B4:B2:B6:B6
Authority key identifier: F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8
Certificate issuer:       /CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
Certificate serial:       0199FBEBB0B681122E418402CCD5AE4F2A9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
Manifest number:          10DF
Signing time:             Sun 19 Oct 2025 10:02:31 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:31 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:31 +0000
Files and hashes:         1: 79lt-80txKIWQWCp9jNMLc2IHAs.roa (hash: 8V+u82sHy+GzDpyon/8u7WM8JnJcqgS9AiUeL6z8Iug=)
                          2: 8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl (hash: JTf3O3gXCTg9mnyP1abfkk7+Jb/E6EoPHGvG/Y8s1YI=)
                          3: AQ7FmuvDz62F8uKHQpuKMEYydQQ.roa (hash: M9DqKPgllLnW8MX9RGkl/xHC2u96Nyjw3cSwX+kD68U=)
                          4: Vf1RDh-x6BtkmqUI8kQeJAmyoeQ.roa (hash: 1PUOdlU3yqRdUd5Mz1TUUvBo/uRT6+wW9qnbLMW13lU=)
                          5: lXo95w5iGY2qlCwar4Vb6ngfmUQ.roa (hash: K7cw6ymMs8oJcHolnWrjFvAyiZlrz4VloYZ/Ck1llmM=)
                          6: nUxTi5H5Wi_nGNCH8VXylwgxdJ0.roa (hash: xSWU06TWSLqiugEcuWmt4LzGgEiH/rhkdBHL5vVX0+0=)
                          7: omuf2rqv4Sp9P-8ZJZ916fSowyA.roa (hash: UlQgwX4zh3WqyryliD1lENPsPKINDm9DlFR8/vawBBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:b0:b6:81:12:2e:41:84:02:cc:d5:ae:4f:2a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
        Validity
            Not Before: Oct 19 10:02:31 2025 GMT
            Not After : Oct 20 10:02:31 2025 GMT
        Subject: CN=02854e6a276a07f0a151d73948355e42b4b2b6b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3d:b7:d4:5d:f3:4e:6d:18:a1:88:90:c3:7e:
                    77:0b:51:94:62:27:14:1f:c4:ca:4b:b2:57:61:8c:
                    67:89:24:b2:3f:01:d6:56:d8:ef:07:df:1d:9f:b6:
                    d9:d5:a1:e9:d3:18:ad:25:45:d4:91:f2:6a:66:39:
                    fb:73:8d:4c:e8:b2:16:f8:96:2b:7d:c5:0f:63:6a:
                    eb:0e:64:73:88:d2:ae:f6:4a:ab:b5:19:c3:c4:dc:
                    85:81:95:46:07:a4:33:90:e4:f2:41:4e:89:27:5b:
                    6f:3d:d7:76:5b:3f:31:01:90:a6:ca:44:a2:8b:4b:
                    14:e5:67:67:5c:13:1b:2a:65:3e:89:9a:74:28:82:
                    fd:e4:d2:5b:58:24:36:57:d3:00:4d:f1:7d:80:16:
                    f1:24:11:70:fa:60:07:2f:5d:27:22:f4:a4:32:07:
                    e6:7d:2e:aa:63:38:df:2a:95:b7:83:45:3c:da:c7:
                    e5:0f:6c:cb:9d:a7:26:c7:88:82:20:83:65:35:89:
                    6b:51:5a:52:f4:bf:5c:9c:48:33:ea:06:0d:b3:2d:
                    f0:9c:9a:74:90:a8:46:bf:d5:84:aa:ef:f3:56:1a:
                    5d:8f:7f:d1:98:f8:cc:ac:f9:74:f8:6a:cf:f0:e4:
                    ad:a7:88:b3:d5:0b:c4:3d:9d:ac:70:5d:dd:1f:e1:
                    3d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:85:4E:6A:27:6A:07:F0:A1:51:D7:39:48:35:5E:42:B4:B2:B6:B6
            X509v3 Authority Key Identifier:
                keyid:F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:e8:e2:3a:2c:15:63:b7:9c:70:80:fc:a7:30:4c:71:f9:f0:
         69:36:99:92:21:40:ae:79:04:6a:e4:ee:28:3a:b8:0c:79:16:
         c6:2b:b4:61:d4:e0:90:2d:9a:96:f8:0f:a4:21:d2:27:c6:3a:
         2f:c7:6f:e7:cf:ce:41:8c:f1:bb:60:92:b5:21:45:d4:6b:62:
         6d:63:8c:d5:7b:35:cf:9e:57:5d:88:19:3b:dc:13:0b:18:85:
         65:b0:16:e8:82:b3:6a:ec:66:7d:29:f8:b3:20:44:ec:74:ee:
         61:03:e0:fa:26:fc:c5:77:ee:c5:e3:c6:68:51:60:db:a6:e5:
         c4:e0:96:a9:8b:e2:06:09:8c:33:fb:25:e3:06:26:18:9e:c5:
         a1:72:b3:b1:1e:bc:a1:ad:bc:36:5e:cb:fa:9f:50:3d:ff:aa:
         5f:92:a1:3d:9c:3d:8b:c0:e6:4b:ae:91:38:e3:0f:93:34:0a:
         8d:14:0e:bf:23:56:ca:d3:0e:37:cb:42:b1:f1:1a:25:58:67:
         00:cb:e0:ea:ea:f8:46:2b:ac:66:1b:26:b3:c7:cd:88:ff:c3:
         d7:58:26:ab:26:97:0c:c4:52:ce:33:f2:68:16:cf:a1:e8:e7:
         da:2a:5c:17:62:d7:54:81:19:17:ef:a0:30:6e:14:cc:0a:54:
         20:37:30:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:26:49 2025 by rpki-client