Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft
File:                     Mss8BdaixRwv9S3Z3LnitVxASPk.mft (raw, json)
Hash identifier:          31YoZjeUyhuwpezFEqsTl/iacgePP1u9z9QjBQbKwbg=
Subject key identifier:   8E:85:8B:4A:6F:90:A6:46:E0:DA:9F:88:41:FF:55:A6:75:B7:01:57
Authority key identifier: 32:CB:3C:05:D6:A2:C5:1C:2F:F5:2D:D9:DC:B9:E2:B5:5C:40:48:F9
Certificate issuer:       /CN=32cb3c05d6a2c51c2ff52dd9dcb9e2b55c4048f9
Certificate serial:       0198D4E06082F8FA15E7D9A64E5CEDD02F57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mss8BdaixRwv9S3Z3LnitVxASPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft
Manifest number:          1647
Signing time:             Sat 23 Aug 2025 03:02:11 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:11 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:11 +0000
Files and hashes:         1: Mss8BdaixRwv9S3Z3LnitVxASPk.crl (hash: GWg4n/GJdBG3A6ttnUFzC5+0MKJ9PiYvhoNE5DLei08=)
                          2: pkl1dG1Tn-y8sIzafCzQdaxLGO0.roa (hash: +t+HSalevZKgrBOwo+A1WYwHvxUsDh9dx8CrhAZYnCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mss8BdaixRwv9S3Z3LnitVxASPk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:60:82:f8:fa:15:e7:d9:a6:4e:5c:ed:d0:2f:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32cb3c05d6a2c51c2ff52dd9dcb9e2b55c4048f9
        Validity
            Not Before: Aug 23 03:02:11 2025 GMT
            Not After : Aug 24 03:02:11 2025 GMT
        Subject: CN=8e858b4a6f90a646e0da9f8841ff55a675b70157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:50:45:06:e3:f1:a0:e2:29:7e:e9:a7:8a:8f:
                    d4:1a:25:fe:ab:0b:59:cc:50:a8:5b:87:01:8d:d5:
                    a9:f8:fd:a2:fb:20:71:0b:d4:1f:7d:f2:25:79:57:
                    eb:64:c2:cf:4f:62:c1:34:73:10:ef:d9:c6:f5:15:
                    65:72:e9:ea:14:d7:33:06:f7:2e:c8:50:01:02:27:
                    f6:da:c5:67:b2:1e:d0:f2:6f:30:eb:65:bc:2c:65:
                    a9:8f:5f:cc:b7:44:e7:68:18:2e:d2:ff:bb:89:be:
                    54:74:1e:1a:15:b3:57:3c:14:ca:dd:4b:ad:f4:b1:
                    07:24:1d:ea:9d:ff:8b:ab:2d:e5:47:ca:8c:7e:e7:
                    3b:68:4a:e7:62:18:07:43:8a:9a:5a:e9:f2:6f:48:
                    ac:fe:68:0f:a1:51:b6:a3:33:6f:20:16:0a:f5:d2:
                    ef:66:b2:81:8d:52:75:fe:f9:13:dd:2b:0e:84:4a:
                    ca:36:cb:05:eb:60:56:bc:09:8b:32:54:40:7a:fc:
                    61:ad:1d:70:33:90:b1:64:21:f5:1d:fd:67:e8:cc:
                    1d:ad:7c:6f:07:d5:36:80:71:b3:46:5f:14:ab:04:
                    77:ec:70:0f:dd:67:a0:d9:4a:3e:45:c5:d2:18:db:
                    02:c9:9d:c3:2d:2b:32:2b:27:f6:67:57:7a:5d:c8:
                    a4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:85:8B:4A:6F:90:A6:46:E0:DA:9F:88:41:FF:55:A6:75:B7:01:57
            X509v3 Authority Key Identifier:
                keyid:32:CB:3C:05:D6:A2:C5:1C:2F:F5:2D:D9:DC:B9:E2:B5:5C:40:48:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mss8BdaixRwv9S3Z3LnitVxASPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:4d:b0:d9:0b:3e:6a:ee:24:ce:f7:fc:6b:82:20:85:52:db:
         a3:db:2b:ff:c6:3a:8f:b8:28:a5:1e:cb:7e:45:d0:19:5b:d7:
         52:a8:10:90:a8:60:52:a2:7d:95:8d:6d:ed:ef:e0:99:61:63:
         7f:1a:34:85:29:92:a5:b5:30:85:eb:4a:39:09:61:55:63:45:
         0c:18:0f:39:0c:5d:a6:6f:c4:0a:ea:dc:12:b7:67:89:2b:cd:
         ed:a4:8a:3d:95:ff:3c:14:12:53:cf:20:97:ac:a3:aa:e0:10:
         9c:44:ad:33:16:08:1f:5b:74:f4:72:82:ca:f8:19:c9:89:d2:
         4f:e4:10:8f:c7:84:eb:6a:9b:bb:4c:86:5f:28:da:d7:cd:f2:
         68:c6:27:d9:44:4c:22:48:0e:eb:d1:dd:fe:fc:e3:f7:8f:6f:
         cd:51:e1:aa:ae:b2:e8:59:9f:3c:c6:f4:02:2b:bb:5c:41:ea:
         55:1f:a0:a2:a6:02:69:d3:33:d4:fc:cc:2b:d5:77:ba:3f:fb:
         52:46:9c:7c:3b:e1:ff:b3:07:80:43:d3:54:d2:7b:de:23:13:
         6a:12:da:77:48:27:61:af:7c:ee:04:2c:9b:0d:28:b1:4f:a5:
         6c:11:c3:15:08:9c:2b:17:6a:93:59:82:b1:1a:e7:53:4b:cf:
         0e:48:3e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:53:01 2025 by rpki-client