Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
File:                     8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft (raw, json)
Hash identifier:          YTu5AErcaEjTyl6Q2TGMu9kCY4XlqWO5YquhG8pCq4s=
Subject key identifier:   55:1D:30:13:F5:4B:2C:9A:42:89:8C:44:A0:BA:4A:3D:7D:71:8A:34
Authority key identifier: F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26
Certificate issuer:       /CN=f031c2da6bb9a56c28efeec4e4df0758cc24eb26
Certificate serial:       0198D5BC1DE721665125E6505B31AC21701E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
Manifest number:          05C9
Signing time:             Sat 23 Aug 2025 07:02:11 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:11 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:11 +0000
Files and hashes:         1: 8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl (hash: PKkiQ5AcaWPsmv5Fg0HZCEj4yZavUSa2h9BJvukQ+Do=)
                          2: 9LD-hrLWBwUSPOko1WfMuzpukWE.roa (hash: IlW9fI4rY7r7GVZoUndhpUDRIk8UJ5M6N9Zdn/noO1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:1d:e7:21:66:51:25:e6:50:5b:31:ac:21:70:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f031c2da6bb9a56c28efeec4e4df0758cc24eb26
        Validity
            Not Before: Aug 23 07:02:11 2025 GMT
            Not After : Aug 24 07:02:11 2025 GMT
        Subject: CN=551d3013f54b2c9a42898c44a0ba4a3d7d718a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:4e:36:5f:c6:da:d0:5f:e4:d7:a0:f5:df:88:
                    8a:32:fc:e0:64:e3:d3:b3:55:80:fa:e3:ce:89:d0:
                    78:52:ac:4c:39:a3:e1:0f:83:2a:2e:3f:10:7b:75:
                    2f:c0:2c:92:7e:24:56:eb:aa:76:c2:16:cc:4a:1a:
                    8e:cc:3a:d6:a7:f7:57:c5:5b:23:4d:03:9e:7d:b7:
                    a8:08:14:7c:d9:93:e4:fe:db:8e:84:0b:4a:58:9d:
                    c9:53:15:a4:1b:8a:69:fa:9d:8a:19:6d:c0:2c:08:
                    79:d3:16:ed:90:16:f6:3f:8a:cc:2f:32:6b:60:9e:
                    49:6d:b6:33:ad:5d:a6:79:81:09:f5:a6:0a:a9:40:
                    b1:75:0c:d3:6b:0f:60:a1:ce:17:47:6b:f9:7c:52:
                    70:8f:23:47:77:5e:08:cc:58:f7:15:97:c9:5e:ab:
                    dd:99:c2:80:75:6f:20:27:75:20:e5:d6:78:e0:10:
                    5b:41:bf:f6:c5:11:84:dc:c4:9b:be:90:c1:59:d1:
                    70:05:e2:32:47:1c:9a:46:9c:02:42:00:5e:e4:13:
                    8d:88:80:43:3a:58:3f:b4:dd:1d:89:9f:c3:64:86:
                    a4:eb:18:de:1e:96:66:a1:0b:10:43:b6:22:62:41:
                    5c:aa:be:d3:7b:58:42:e6:44:8a:8c:a5:42:9c:28:
                    a1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1D:30:13:F5:4B:2C:9A:42:89:8C:44:A0:BA:4A:3D:7D:71:8A:34
            X509v3 Authority Key Identifier:
                keyid:F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:84:9f:85:7c:8c:89:e8:a4:f1:5f:12:f0:69:aa:cb:c6:92:
         8a:81:d3:e1:d3:30:eb:51:4c:d1:03:05:cc:99:70:71:5a:a8:
         69:86:3d:5a:1a:42:82:bd:b0:c5:c7:75:28:2d:e1:6a:d2:a7:
         2f:b7:c2:89:76:6d:4d:81:a7:e6:d7:1d:15:30:34:d8:40:f3:
         0d:df:82:47:40:3a:97:94:4b:79:6b:77:55:d0:c2:3c:e1:df:
         a7:0c:64:44:e7:36:52:2e:9b:3e:fe:b8:e7:18:9e:d0:42:e8:
         5f:14:fc:58:00:89:05:53:14:b2:0e:12:d9:86:86:90:fd:58:
         91:6c:35:de:98:78:3d:d5:82:d2:91:50:35:21:53:a9:b0:ec:
         85:27:0f:47:f2:ad:7a:38:78:70:81:35:d2:45:93:00:7f:e1:
         68:9a:e9:9e:a0:a5:58:70:c3:a7:09:7d:ce:13:60:07:67:cb:
         27:3d:e7:83:30:6d:96:31:c9:96:87:f9:52:1c:0a:d7:ab:93:
         83:b8:34:6e:6f:03:67:d9:58:8d:d8:19:2f:8b:0a:4f:51:36:
         26:88:10:a0:2a:75:87:cf:bf:24:b6:ec:ec:99:f1:bd:64:69:
         5e:63:3b:62:43:af:f7:98:91:fd:31:5a:0f:87:c6:33:7f:68:
         0d:88:f5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:08:12 2025 by rpki-client