Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
File:                     K8J94IFvfguHpzPdMZkInlN_Jhw.mft (raw, json)
Hash identifier:          Jr3qyWh/KWOElvEdCNUJ2W0I40BZ98YVF+VXpqzflos=
Subject key identifier:   69:92:89:58:B0:F9:97:0C:BC:76:FD:71:59:45:36:AF:EA:EF:8C:C4
Authority key identifier: 2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C
Certificate issuer:       /CN=2bc27de0816f7e0b87a733dd3199089e537f261c
Certificate serial:       0198D54E4C6B034C2F7B4194E8682F456724
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
Manifest number:          0C3A
Signing time:             Sat 23 Aug 2025 05:02:14 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:14 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:14 +0000
Files and hashes:         1: 37DCbHhm2sTXZoKnRAO3SOggtQQ.roa (hash: +uLJpv1JAEXe6w9bK9Js8rFmAHbw+aILnxdKvgw5Rzc=)
                          2: K8J94IFvfguHpzPdMZkInlN_Jhw.crl (hash: WbiKDVsvk3OUPOHZNGdQ1yQfR3SmGceeuLFs6GJ0Nw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:4c:6b:03:4c:2f:7b:41:94:e8:68:2f:45:67:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc27de0816f7e0b87a733dd3199089e537f261c
        Validity
            Not Before: Aug 23 05:02:14 2025 GMT
            Not After : Aug 24 05:02:14 2025 GMT
        Subject: CN=69928958b0f9970cbc76fd71594536afeaef8cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:1e:a9:46:20:bc:e1:b3:97:cb:42:86:e1:40:
                    44:f4:44:19:34:48:7a:54:13:a7:7c:22:5e:2d:50:
                    08:77:92:80:99:cf:35:ea:2e:48:d0:ac:5c:20:32:
                    e3:a2:b3:b9:58:1c:55:8d:46:3c:70:4d:23:e6:96:
                    71:6f:be:41:d8:97:73:8d:ee:60:eb:e3:63:59:cb:
                    be:9e:83:4a:dd:95:64:cf:13:90:ad:9a:37:fa:e3:
                    25:70:47:70:ab:16:26:e1:4f:2f:15:69:4e:26:cc:
                    e9:c5:6a:50:1a:a2:5f:7f:73:63:b2:36:54:e2:80:
                    eb:6a:d4:69:c9:e2:fb:91:46:43:02:61:c0:dd:3b:
                    84:19:68:5c:f0:4a:5f:08:0f:6a:3d:3f:ba:29:04:
                    78:67:af:ff:c2:05:51:e1:6e:ec:0f:da:07:53:60:
                    bf:f4:c3:3f:e8:8f:a6:36:e2:43:13:56:45:a4:a1:
                    49:d9:03:9c:49:dd:47:7b:d9:cb:60:13:86:c7:c0:
                    df:83:19:8a:d4:8e:be:04:1e:ac:6c:9e:e4:14:23:
                    d6:92:04:8f:c3:d1:a8:aa:c7:dd:b1:4d:54:25:ad:
                    e0:53:e7:32:84:3f:b3:03:33:de:5f:4d:93:f8:8f:
                    92:43:7c:96:c2:70:e8:89:df:95:8d:a4:6e:d9:b0:
                    04:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:92:89:58:B0:F9:97:0C:BC:76:FD:71:59:45:36:AF:EA:EF:8C:C4
            X509v3 Authority Key Identifier:
                keyid:2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:b3:b7:8d:29:e6:76:a0:54:c6:f3:80:8a:9b:8e:b5:28:39:
         da:58:c6:16:b0:15:2a:e7:0b:29:a2:c4:43:0e:e7:53:ba:a4:
         44:f7:6a:31:e1:01:34:04:1a:a7:d0:6b:2e:20:25:ad:24:df:
         b8:b0:3d:2b:98:50:9e:3e:54:ed:fd:cf:5b:3f:f1:04:5d:4e:
         d4:18:e8:4d:c9:ef:d7:1f:e1:29:81:d0:ea:1a:10:0a:b5:2d:
         c6:6d:9c:d1:40:8b:02:da:e4:c3:6e:37:f6:32:f1:5f:00:b1:
         d7:f4:25:28:25:2f:93:ad:1e:93:0d:ce:29:0f:9d:8f:e5:1f:
         da:7b:48:f2:c5:3c:18:ff:0a:e8:19:37:4c:e9:50:b8:42:d9:
         4c:4a:91:cb:94:4b:6e:27:0b:5e:54:db:a2:bc:22:09:ad:7b:
         52:1a:9e:a9:1e:16:fa:72:52:7f:6d:4d:f0:13:97:b9:15:94:
         31:6c:a2:46:81:be:40:32:04:40:69:96:24:3a:92:fa:39:c6:
         8d:69:f3:87:73:82:bd:a0:cb:bb:df:69:85:07:53:77:90:60:
         f0:e9:60:55:16:c1:51:5c:d8:ff:55:55:cb:3e:a4:a0:37:be:
         f5:50:43:31:27:f5:1c:03:3c:ec:f1:08:78:10:30:34:fa:56:
         09:ad:b5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:02 2025 by rpki-client