Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
File:                     0L-t8pI57Yzz9saT2L23n0IACrw.mft (raw, json)
Hash identifier:          MktqnpJwChFMT45RA84f4coaCbAOxne/lJvOl0OVgeI=
Subject key identifier:   62:A8:69:2B:E3:8B:A5:C0:42:6C:53:B2:BE:FC:95:5D:9B:F2:F2:B1
Authority key identifier: D0:BF:AD:F2:92:39:ED:8C:F3:F6:C6:93:D8:BD:B7:9F:42:00:0A:BC
Certificate issuer:       /CN=d0bfadf29239ed8cf3f6c693d8bdb79f42000abc
Certificate serial:       0198D5BB7775B57EDE0501A8C13D14A1BDE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
Manifest number:          0DFB
Signing time:             Sat 23 Aug 2025 07:01:29 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:29 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:29 +0000
Files and hashes:         1: 0L-t8pI57Yzz9saT2L23n0IACrw.crl (hash: fzLbPf+5Vb0fTsspKejIDD3iZAAGgDI7SBm3V0F7UnI=)
                          2: ED7irA7lmwh5tHPGbkFIIeJv-bg.roa (hash: Ig5tcq1zw9JQCpzSA6FZ4ETNZF6mc/oaQxjv4KTG32g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:77:75:b5:7e:de:05:01:a8:c1:3d:14:a1:bd:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0bfadf29239ed8cf3f6c693d8bdb79f42000abc
        Validity
            Not Before: Aug 23 07:01:29 2025 GMT
            Not After : Aug 24 07:01:29 2025 GMT
        Subject: CN=62a8692be38ba5c0426c53b2befc955d9bf2f2b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:35:ba:5b:eb:ce:6f:9e:e9:b6:67:7c:16:fe:
                    cf:34:92:56:de:6a:49:d3:ca:5f:12:88:46:c6:43:
                    e7:c1:fe:76:bc:af:5e:c1:8c:4c:49:15:59:5b:87:
                    ba:d8:c4:c0:6a:22:4e:11:83:19:e7:4a:58:be:3e:
                    c4:f4:ee:ba:b4:77:51:ee:a6:ae:69:f3:67:fe:61:
                    f3:da:c0:f2:6c:62:6b:48:d1:53:37:56:f1:12:f0:
                    dc:af:b0:30:f1:d8:2e:bf:af:86:d8:63:2e:35:28:
                    a6:dd:0d:38:09:be:37:fa:4c:86:ae:1f:e1:92:c4:
                    3e:2b:45:4c:fe:a5:14:93:6e:77:ab:65:94:75:85:
                    e9:67:64:66:3b:ea:8b:4d:e7:fb:93:33:29:5c:76:
                    a5:c1:84:7b:2a:55:16:1d:a8:08:de:b3:0a:11:95:
                    f9:14:31:44:dc:f6:27:57:1a:9e:a7:dc:95:03:c3:
                    47:58:4c:e5:30:39:b7:47:86:69:c6:fa:66:f1:8e:
                    90:8f:d5:f3:85:b7:77:c2:ed:ea:12:09:81:de:ae:
                    a5:9f:25:70:36:e2:75:0d:c7:bf:19:da:96:67:9d:
                    8f:64:48:59:38:bf:6c:d3:6a:3e:96:9f:00:d4:0c:
                    b5:f9:3f:3a:81:08:82:74:75:69:3a:0b:1b:29:31:
                    51:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A8:69:2B:E3:8B:A5:C0:42:6C:53:B2:BE:FC:95:5D:9B:F2:F2:B1
            X509v3 Authority Key Identifier:
                keyid:D0:BF:AD:F2:92:39:ED:8C:F3:F6:C6:93:D8:BD:B7:9F:42:00:0A:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:9d:3e:22:73:60:c0:b0:eb:d7:a0:ef:d8:d1:35:3c:1e:f6:
         0f:d0:2c:52:e4:cd:ba:11:fe:26:ad:2c:bd:61:34:57:8b:8c:
         aa:2d:1c:6c:5a:33:bb:8e:dd:ba:9e:04:3d:b5:7c:a1:d1:83:
         37:32:65:88:d3:e1:ec:79:2b:b9:48:97:72:e8:4c:f1:b9:f6:
         6a:c0:bd:01:3e:a3:04:1e:9f:1d:50:23:9d:bc:da:35:2c:c1:
         56:a4:01:cc:2c:6d:c1:1e:59:64:04:8c:7a:ee:b8:62:13:64:
         a0:f1:43:55:bf:f3:1c:c7:c6:3f:cb:01:41:bf:d2:ba:d0:a3:
         d6:2e:fd:c7:41:93:b5:fc:b3:ff:5a:5d:4b:3e:fc:a4:82:66:
         c7:1f:72:84:06:3a:3e:21:50:38:6e:ff:93:6c:9a:66:fd:54:
         58:0b:87:7b:f7:c5:81:61:f7:5c:7a:a8:3a:3d:9a:a0:8b:e5:
         d9:dc:2a:d0:91:f3:19:8f:65:d6:6f:cc:a9:b9:38:43:45:85:
         96:5d:11:19:6f:69:2a:fa:ac:4a:b3:26:45:e2:2f:36:5b:15:
         d3:67:52:1e:09:bd:1e:00:f3:ee:23:de:e6:aa:c8:ed:db:3a:
         63:bf:0e:39:23:55:b1:ae:1e:f8:48:31:cf:0a:57:af:16:99:
         82:f7:8c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:29 2025 by rpki-client