Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
File:                     8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft (raw, json)
Hash identifier:          kJK4GaKpf7WEs3d3BN/inUVPXK6TUZIO6oEi0hjCkR0=
Subject key identifier:   10:84:74:9E:CB:94:E3:40:EF:EE:DB:20:28:3B:A9:FB:96:62:4B:CC
Authority key identifier: F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94
Certificate issuer:       /CN=f0d03098b8356fffc5a597e9c45b84edf87cf994
Certificate serial:       0198D7732BEC793CDEFFAD7A96305EFB367D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
Manifest number:          13FE
Signing time:             Sat 23 Aug 2025 15:01:45 +0000
Manifest this update:     Sat 23 Aug 2025 15:01:45 +0000
Manifest next update:     Sun 24 Aug 2025 15:01:45 +0000
Files and hashes:         1: 8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl (hash: UUVZEIOmBChrq7u1rCokmXXEbEUthh2ZdOL6xt3JAQc=)
                          2: OkXBNJnUgokPx0Xxs8AUPN40aT4.roa (hash: E/UomHj5ST+3/lio4VV13yWumaIvNp+hYEYFZLaJR7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:73:2b:ec:79:3c:de:ff:ad:7a:96:30:5e:fb:36:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0d03098b8356fffc5a597e9c45b84edf87cf994
        Validity
            Not Before: Aug 23 15:01:45 2025 GMT
            Not After : Aug 24 15:01:45 2025 GMT
        Subject: CN=1084749ecb94e340efeedb20283ba9fb96624bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:73:8a:af:13:02:54:c0:32:62:d9:3c:ef:ca:
                    6a:ef:67:99:1c:5a:72:0b:82:6c:42:95:a3:49:98:
                    6b:6a:d2:1d:a8:0c:a4:53:57:49:b1:af:3e:4c:2c:
                    4c:37:59:1a:0e:96:4a:24:88:5a:41:33:33:89:e8:
                    60:f2:e3:69:a9:2c:f7:69:43:e5:40:56:c6:9b:77:
                    ba:61:37:5e:1f:cf:62:08:1e:39:7a:b4:80:7d:e8:
                    3f:22:92:92:96:a5:f1:52:6f:5e:0d:af:a6:3e:b5:
                    c1:5d:c3:fe:98:79:07:53:cc:92:ae:a3:f5:55:69:
                    bd:6a:20:e2:4c:12:84:d0:2d:d5:a5:89:6d:ea:f6:
                    d4:7f:e1:5b:53:d0:7e:e3:89:5b:05:8d:03:cc:b1:
                    2e:35:bd:95:cd:c1:89:00:37:81:47:2c:e7:c2:fa:
                    d3:f1:29:cd:98:d6:fc:12:be:29:2e:50:72:c4:52:
                    d3:16:4a:54:38:c1:33:35:2c:b5:a1:d8:2f:98:6f:
                    e8:b4:5d:5f:29:3b:a7:58:fc:47:4c:ae:c9:fa:9b:
                    13:7c:e9:b0:61:e5:66:25:6f:ab:23:81:49:8a:60:
                    e3:32:f3:d8:fd:f2:f9:ee:6c:83:2c:4e:aa:9e:16:
                    1d:54:0a:49:d3:cb:7c:07:6c:79:f3:ee:55:7c:69:
                    73:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:84:74:9E:CB:94:E3:40:EF:EE:DB:20:28:3B:A9:FB:96:62:4B:CC
            X509v3 Authority Key Identifier:
                keyid:F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:a4:c3:06:67:29:73:6d:a6:0b:ef:ec:ab:3b:66:cd:3f:e1:
         ee:c0:f8:56:08:0f:de:3d:3f:07:dc:70:b3:67:25:9d:77:d6:
         45:8e:42:a8:4d:9e:f9:f1:15:f7:a3:4f:9a:ea:f0:51:94:23:
         00:07:67:f0:43:0f:47:36:b0:cb:ca:f7:dc:12:29:9d:56:59:
         c7:19:e4:6f:31:1f:f7:69:e0:a6:ed:47:f6:62:09:ee:f2:1c:
         28:76:d2:d6:58:d4:31:e9:ba:0b:4f:43:a9:7f:b9:5a:3c:90:
         e9:3d:ce:96:e4:43:32:04:75:17:55:f6:b2:d2:f6:3d:54:d5:
         6a:66:41:c8:e2:e6:f6:a9:e7:9f:0e:2f:3d:96:7f:42:45:af:
         49:71:b1:e4:5e:65:ca:38:db:e5:92:46:96:aa:95:8b:93:2d:
         61:06:0a:ac:d7:ec:66:cb:2e:dc:bd:56:3d:51:19:f1:8f:41:
         1b:40:14:0a:b2:17:b0:d6:9c:24:5e:69:5c:51:3a:2e:80:c7:
         05:ae:89:c7:75:76:f5:74:d5:de:59:22:26:d2:4d:d6:ef:a4:
         fb:d8:5d:50:e4:fc:13:8b:e5:d4:9a:a2:64:af:e3:c4:84:19:
         ad:0b:7f:66:3d:ff:f3:7d:76:7b:ca:b7:42:84:03:6b:08:44:
         eb:4e:17:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:22:52 2025 by rpki-client