Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
File:                     Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft (raw, json)
Hash identifier:          ri6XdyGgHvTlf6gXglb9Wp9eP70cuVj9jGvBN2rBOxY=
Subject key identifier:   A8:F1:CA:62:54:20:FD:21:AC:FC:24:E6:66:47:1E:18:A1:D2:00:8B
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Certificate issuer:       /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial:       0198D5BB852A481E50BEE65E8469999FAE6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
Manifest number:          08B1
Signing time:             Sat 23 Aug 2025 07:01:32 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:32 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:32 +0000
Files and hashes:         1: Gm9NfecPR-RUq_slL2NKmzGqQ1c.roa (hash: tkU2/2KHzDAlfUyxsnryBif6WpEicFze6N39RJoBTkM=)
                          2: IdcqQLaLPNCQJzdTXpACnqYscnI.roa (hash: H+1S4n+OyXlFrQgh9A84gwVt0xMSOKKs5oiKIXtOgjU=)
                          3: OVQ5uPkYukiV8dv56D7X8vrwp8E.roa (hash: OWeiLtMHum8JXxqxvdWPi5crevEaVFFy1EtOqegV6tI=)
                          4: P8VDh_9fdYN8xXLvtJMOKaqZaBs.roa (hash: nMTrg+lyYaQ59OMP8FwWXirKWOtKtrNaOkuqtu/tSjc=)
                          5: Pq__l0a6HrBOcCXhEDnn7AV0g54.roa (hash: A1mBB7bcRpMOwkOKXDY7TtCFDZr1ayBKUG0wvvr/Zlw=)
                          6: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl (hash: s6T6QWoqqX3evmNaUX10JwNY+rvop7pbvbbWV0O7l3I=)
                          7: qqV4lt6FTPnmuHdRaoUeaEC2b8U.roa (hash: HtCD/Cd4hhljqddcvUw+6pkmRGrV8qPj/FjkfpsV+Jw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:85:2a:48:1e:50:be:e6:5e:84:69:99:9f:ae:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
        Validity
            Not Before: Aug 23 07:01:32 2025 GMT
            Not After : Aug 24 07:01:32 2025 GMT
        Subject: CN=a8f1ca625420fd21acfc24e666471e18a1d2008b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3c:a1:8c:60:5e:50:6c:e3:7e:64:13:27:e2:
                    73:c5:7b:ce:a3:a8:50:76:5e:9f:87:2d:b1:24:af:
                    34:95:d4:bc:e9:50:7a:d5:b0:06:c0:91:70:c8:71:
                    96:dd:a9:bb:c9:63:f3:54:29:8e:9c:55:16:78:63:
                    c5:8d:74:6a:d6:36:a6:47:e5:d5:63:b6:5d:37:6b:
                    ab:60:38:c8:78:51:5e:0f:6c:3d:10:e0:cf:56:8f:
                    2c:15:7e:ea:ef:48:38:9c:d4:bb:8a:a8:9e:a8:a0:
                    0e:29:98:e9:61:cb:41:e1:ca:72:04:46:5e:12:77:
                    c5:4c:a6:58:c8:8d:90:ac:9a:e4:3b:44:ad:31:75:
                    f8:92:62:43:7a:c9:b3:64:94:3e:bd:c9:98:c3:f9:
                    82:78:a6:32:b3:88:4d:b4:29:73:53:ce:e0:d4:fd:
                    ff:f9:19:d7:67:46:99:b1:3b:1d:6a:27:27:11:10:
                    57:43:cc:1b:8d:89:a3:e1:cd:79:dd:00:4a:ea:9a:
                    94:79:e0:0d:4a:a5:7a:25:4a:cd:7d:d9:9b:22:44:
                    52:bf:82:e1:84:83:14:bf:ac:74:09:2a:10:a7:9e:
                    93:f1:49:ec:aa:9c:1d:22:21:29:74:12:e3:ff:00:
                    14:45:1d:34:95:be:5b:fd:10:26:20:66:63:cf:6e:
                    69:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F1:CA:62:54:20:FD:21:AC:FC:24:E6:66:47:1E:18:A1:D2:00:8B
            X509v3 Authority Key Identifier:
                keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:a8:eb:4e:87:de:35:f4:3d:a9:59:e8:6c:e0:1f:15:dd:94:
         21:e1:1a:1b:bb:43:a8:c2:ff:a4:e5:ad:4e:db:fe:38:d2:92:
         db:fd:72:40:4e:94:d7:39:31:93:68:b8:a5:19:83:ee:41:ac:
         2d:3f:6e:10:5e:49:df:9e:bf:a6:3b:46:38:50:86:63:3a:d0:
         1b:84:99:97:14:ec:b6:ac:3c:05:ba:75:69:28:b9:64:4f:d4:
         7e:6a:ad:02:ca:5f:54:e3:f6:d9:c7:7f:8a:47:43:e9:ea:f0:
         5e:d3:b1:81:d8:a4:fa:4b:88:48:ea:58:78:1a:66:f0:42:a0:
         fa:cc:53:65:78:5b:10:b2:a9:ff:92:b2:e0:ab:91:76:25:3a:
         8f:e7:64:bc:90:59:27:fe:77:cd:b2:93:94:d7:19:bb:6f:74:
         e3:eb:e9:64:00:c0:40:0d:6d:29:c6:ba:cb:11:8a:8d:e4:31:
         5a:12:8f:59:2a:b4:b8:99:d1:e9:91:27:19:af:d6:e6:db:d4:
         76:15:ac:54:3a:1c:0b:2e:82:18:84:13:73:46:5b:9e:0f:3f:
         2e:40:ab:e6:4c:6a:14:e2:0b:b4:e6:72:80:8e:b6:5c:46:e4:
         34:2d:23:fb:2d:16:10:49:05:3f:c0:99:bd:51:3f:a5:ce:01:
         78:7c:0b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:55 2025 by rpki-client