Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft
File:                     P_WH5OB6zfs4niWRYdoYazhrT2M.mft (raw, json)
Hash identifier:          JxFhqbOOQvIaUBd1DwHzpt8oufdTo9O0CVEjEwB5bQ4=
Subject key identifier:   E7:D9:AE:93:AA:E1:18:60:6E:83:32:38:62:98:9D:22:AF:CA:E8:A7
Authority key identifier: 3F:F5:87:E4:E0:7A:CD:FB:38:9E:25:91:61:DA:18:6B:38:6B:4F:63
Certificate issuer:       /CN=3ff587e4e07acdfb389e259161da186b386b4f63
Certificate serial:       0198D65F15E2B6B5893000C65BE710FD08B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P_WH5OB6zfs4niWRYdoYazhrT2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft
Manifest number:          F8
Signing time:             Sat 23 Aug 2025 10:00:12 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:12 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:12 +0000
Files and hashes:         1: P_WH5OB6zfs4niWRYdoYazhrT2M.crl (hash: D+XkfIFqgocP5ikHQbANzXGejMpOUCexn8DdyMP/UmI=)
                          2: SOJJoBTyyJua9tdu4tZ2B31g56k.roa (hash: YMViz3GkzFQZUT08/Yf5mLb5Z5Bzg+msMTH8wr8BZ0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P_WH5OB6zfs4niWRYdoYazhrT2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:15:e2:b6:b5:89:30:00:c6:5b:e7:10:fd:08:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ff587e4e07acdfb389e259161da186b386b4f63
        Validity
            Not Before: Aug 23 10:00:12 2025 GMT
            Not After : Aug 24 10:00:12 2025 GMT
        Subject: CN=e7d9ae93aae118606e83323862989d22afcae8a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:46:ea:3b:2a:8d:b6:42:ec:63:f8:49:3f:91:
                    d2:3e:b3:42:07:a8:25:37:d0:61:1d:aa:0e:e4:b9:
                    48:53:b0:f8:0b:10:d6:a7:0f:e4:a3:f0:73:2b:54:
                    46:1b:72:24:7c:04:1f:b6:92:18:8d:b4:b8:db:0b:
                    aa:a6:b4:ba:59:69:d0:24:c8:69:da:ff:5f:cc:ec:
                    e4:0a:47:0c:18:36:52:74:a8:75:1e:a7:af:7f:84:
                    24:e5:21:1d:19:e1:94:23:3e:69:00:6b:3c:4f:79:
                    04:62:e4:60:f4:8f:3d:f3:76:0c:0d:a8:52:d1:73:
                    84:88:fd:38:fc:1d:4a:6b:0e:2f:f7:51:ed:d7:5d:
                    14:0b:74:62:97:ed:be:d3:30:e0:ca:1e:19:8c:29:
                    5c:75:48:60:0b:d8:8a:c5:44:28:42:2a:ca:a3:7c:
                    8a:41:1a:10:31:23:b7:93:82:34:03:58:b8:8d:06:
                    d6:78:68:be:55:a5:13:e0:74:f1:37:b8:4f:6a:e1:
                    14:4d:70:dc:5e:75:c3:87:f2:f5:c5:c9:eb:5e:66:
                    3d:2d:28:6e:10:4d:70:50:f5:49:77:70:4d:70:d9:
                    14:b0:4d:f0:05:6e:4a:d1:9b:d5:89:17:20:27:81:
                    1f:3f:53:a4:9d:a7:d3:89:fa:ba:69:76:7c:ec:8f:
                    64:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D9:AE:93:AA:E1:18:60:6E:83:32:38:62:98:9D:22:AF:CA:E8:A7
            X509v3 Authority Key Identifier:
                keyid:3F:F5:87:E4:E0:7A:CD:FB:38:9E:25:91:61:DA:18:6B:38:6B:4F:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_WH5OB6zfs4niWRYdoYazhrT2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:99:98:87:a8:08:81:2d:12:6f:67:30:42:43:4d:2b:b2:6b:
         43:87:32:12:02:d3:a1:02:11:8e:68:52:c8:f2:a3:95:2d:c9:
         ec:76:ac:ec:8d:42:31:61:f3:23:c2:96:f8:35:cc:c1:57:9c:
         9b:4a:78:60:42:fe:33:0f:60:56:a4:3d:93:16:29:00:a5:98:
         2a:da:92:b1:16:07:90:00:75:c5:ea:05:68:85:62:89:e9:9b:
         b2:58:76:6f:a2:b7:eb:6a:27:23:ad:81:4e:ab:96:77:e1:b5:
         07:43:bc:86:49:c2:05:74:99:b1:d6:34:e1:fd:6e:91:a6:ea:
         73:3b:f7:05:ff:c1:a3:48:88:98:a2:17:2b:f5:0a:cb:2f:00:
         9c:f6:2b:20:0a:39:93:00:83:83:b0:e4:00:cf:42:35:ad:b0:
         9c:30:5e:36:54:ff:f0:25:4e:25:32:b3:0b:cd:ac:ca:e6:be:
         26:5e:81:da:91:8c:2f:03:bd:98:b6:79:23:12:87:22:a2:0c:
         58:be:a5:31:6e:54:00:f7:90:2d:18:b8:ea:5b:1a:ac:9d:1e:
         e7:2e:01:47:8e:0b:57:40:c1:e6:87:30:44:0e:2b:0a:0d:e4:
         d6:c5:70:3b:ab:0e:c6:23:62:57:c6:3f:e2:59:9a:f1:48:6f:
         54:db:93:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:31:50 2025 by rpki-client