Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
File:                     8ppplYAYXWUQAV4dLKGe_0NkHtw.mft (raw, json)
Hash identifier:          vuAwf2yVEPezl5457pWjnuLuYY/eVDp6NeMTxFyBuPo=
Subject key identifier:   99:96:04:79:05:01:79:8C:D2:17:AF:93:A2:E7:F0:9D:CA:93:CD:73
Authority key identifier: F2:9A:69:95:80:18:5D:65:10:01:5E:1D:2C:A1:9E:FF:43:64:1E:DC
Certificate issuer:       /CN=f29a699580185d6510015e1d2ca19eff43641edc
Certificate serial:       0198D474053FA04A7CD094A2752908DF326C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
Manifest number:          0885
Signing time:             Sat 23 Aug 2025 01:03:49 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:49 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:49 +0000
Files and hashes:         1: 8ppplYAYXWUQAV4dLKGe_0NkHtw.crl (hash: drFHaBnhQbYnkGtEzKVXCa53uhQXbLjsrS9lQcIpxdg=)
                          2: nTEco9mT1eULi7_9dIxqABgskB8.roa (hash: yHq4DLSIuBnBv74/JgQY/5bfqTpB6DfkqhhtGE6kqjE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:74:05:3f:a0:4a:7c:d0:94:a2:75:29:08:df:32:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f29a699580185d6510015e1d2ca19eff43641edc
        Validity
            Not Before: Aug 23 01:03:49 2025 GMT
            Not After : Aug 24 01:03:49 2025 GMT
        Subject: CN=999604790501798cd217af93a2e7f09dca93cd73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2c:66:94:23:09:b4:c3:1f:4a:81:a8:42:96:
                    d7:30:57:14:f6:04:1c:16:23:98:80:ab:91:00:65:
                    fb:5f:90:fe:23:fe:d2:60:8f:e3:aa:d6:c1:59:1b:
                    ee:35:eb:1a:4b:22:5e:21:c2:e4:d1:6e:92:79:ff:
                    be:2a:bf:bd:07:8c:db:28:dc:e7:65:d6:5d:0e:7c:
                    f5:51:ed:0c:ed:be:84:13:2c:03:64:7b:b5:79:d7:
                    4a:04:48:a6:07:85:17:ae:c6:71:54:df:8b:ce:ed:
                    32:6d:82:a2:c6:6a:34:e2:71:cf:5a:6f:97:e3:8f:
                    c7:ae:b9:7c:c6:05:72:0b:d6:7f:ca:33:f5:30:ea:
                    da:da:c8:20:d0:7d:22:28:b4:bc:1d:4e:ba:f4:5a:
                    f4:44:04:c2:23:07:90:04:5c:5f:06:5f:8b:74:de:
                    72:0d:2b:4a:0b:aa:c0:9d:28:ff:81:48:2f:28:1a:
                    f8:65:8b:22:39:75:38:a3:23:f9:fa:c6:02:3a:12:
                    28:5c:96:8f:fc:6f:7b:ab:02:b2:52:06:3b:fd:e9:
                    5c:16:f6:bf:aa:83:d7:83:a8:8e:c1:44:fd:16:6b:
                    f0:8b:55:3b:90:ee:7e:dd:a7:a5:dd:57:55:2e:c7:
                    8a:00:7f:23:56:32:4d:2b:d7:b2:b2:6b:77:73:60:
                    c0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:96:04:79:05:01:79:8C:D2:17:AF:93:A2:E7:F0:9D:CA:93:CD:73
            X509v3 Authority Key Identifier:
                keyid:F2:9A:69:95:80:18:5D:65:10:01:5E:1D:2C:A1:9E:FF:43:64:1E:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:70:b3:70:44:d5:15:76:d3:30:f6:48:d4:6d:57:51:ec:76:
         a2:54:56:4b:45:fb:29:24:ed:54:06:e6:77:4b:cf:2b:d7:9d:
         6c:1c:89:43:00:fe:4a:cf:d8:01:14:ca:93:06:5c:6c:8b:9b:
         38:1f:21:49:5e:5b:f6:b2:00:2f:f3:4d:81:4a:46:f4:e4:ab:
         2e:70:8a:40:1d:16:2a:ea:a6:60:d2:e3:ed:17:71:16:77:89:
         60:73:2c:6d:09:b2:b3:43:01:ea:7b:e0:83:4b:84:89:db:44:
         4a:92:cf:d4:a6:8d:9c:0e:86:dc:51:6e:3f:77:32:6f:1b:e7:
         b6:74:48:cf:ce:52:bb:39:cd:f2:84:ee:3e:0e:a6:71:96:6a:
         26:f2:dd:4d:ab:19:41:27:55:5c:f4:4d:f2:89:6e:ca:eb:7c:
         9a:84:34:b9:37:24:52:fa:10:50:07:bf:bb:76:7d:c5:1b:6d:
         59:f8:c9:98:15:40:09:ad:6f:a2:19:d2:74:5e:eb:73:77:bf:
         80:f9:34:f0:ca:a8:d1:29:e8:1e:4d:a2:a7:83:72:ca:79:84:
         5c:ab:91:a7:e3:fd:c0:cd:b1:9e:02:13:fd:55:9f:d1:a0:e3:
         61:bd:cd:4e:fc:d7:83:7a:90:e3:85:2b:a1:31:b0:a5:b2:8b:
         9f:7f:3e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:46:59 2025 by rpki-client