Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.mft
File:                     8gI-dqaOpsn3DT6nLfhOU9whck8.mft (raw, json)
Hash identifier:          qFxrYPY0he2jDOuqJg5EiJ4o4c/Pp4B0pAOEMZCA4XQ=
Subject key identifier:   B4:32:84:EF:2E:98:02:41:48:9F:2F:68:3D:20:0C:0E:F6:5D:80:39
Authority key identifier: F2:02:3E:76:A6:8E:A6:C9:F7:0D:3E:A7:2D:F8:4E:53:DC:21:72:4F
Certificate issuer:       /CN=f2023e76a68ea6c9f70d3ea72df84e53dc21724f
Certificate serial:       0198D6605C19E03EE40D3AE7F67719050FA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8gI-dqaOpsn3DT6nLfhOU9whck8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.mft
Manifest number:          0E9E
Signing time:             Sat 23 Aug 2025 10:01:35 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:35 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:35 +0000
Files and hashes:         1: 8gI-dqaOpsn3DT6nLfhOU9whck8.crl (hash: LLoCNKb75LPq48nxROgl5FtmVQYz4usCdYeomwi0v1E=)
                          2: xmm2JL7TcI6ebRwScNNxmj8JWuo.roa (hash: fkFUQl1m0mbIlDS4H4YUitr8IcfvKPdCtORJm2ZIyMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8gI-dqaOpsn3DT6nLfhOU9whck8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:5c:19:e0:3e:e4:0d:3a:e7:f6:77:19:05:0f:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2023e76a68ea6c9f70d3ea72df84e53dc21724f
        Validity
            Not Before: Aug 23 10:01:35 2025 GMT
            Not After : Aug 24 10:01:35 2025 GMT
        Subject: CN=b43284ef2e980241489f2f683d200c0ef65d8039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:90:60:31:9f:5b:57:ea:63:b7:af:c9:6a:6b:
                    4d:d1:4b:79:83:99:64:cd:cb:9e:4e:b3:cd:75:5a:
                    ba:38:f7:ce:4e:9b:6d:9e:08:04:f8:c6:ea:77:fc:
                    2e:66:0d:ba:00:f8:5e:da:5e:91:af:af:c4:97:7a:
                    2c:6d:fd:e3:f8:79:9d:87:4d:fb:7d:9a:36:2c:17:
                    78:d4:82:a2:e3:71:19:15:cb:ea:21:1c:e4:3f:16:
                    aa:c4:e6:60:0b:67:b9:60:16:b4:95:46:d8:0f:60:
                    15:8b:6d:67:88:0e:b3:85:0e:b1:7f:87:73:32:9e:
                    f4:5a:aa:08:22:5b:ae:64:a6:d4:ef:d7:e4:42:73:
                    b5:41:9d:d5:03:b6:b1:dc:1b:96:da:3f:51:6c:95:
                    55:d5:10:a5:31:86:a5:ad:46:94:b5:e6:95:d2:be:
                    83:1f:3a:0e:32:e9:4e:de:ad:d7:99:0c:23:16:12:
                    e0:79:6b:f5:84:08:20:a1:58:21:77:59:70:3f:ac:
                    52:54:bc:d5:4e:8a:73:cc:82:f8:d4:37:33:32:c9:
                    a9:43:76:4d:7c:40:bd:a9:4b:35:38:ee:aa:33:78:
                    05:b1:09:f7:84:2f:51:12:47:24:fe:72:72:86:bc:
                    21:e6:c8:32:aa:4b:0a:b9:47:9b:44:ed:87:fc:1c:
                    e6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:32:84:EF:2E:98:02:41:48:9F:2F:68:3D:20:0C:0E:F6:5D:80:39
            X509v3 Authority Key Identifier:
                keyid:F2:02:3E:76:A6:8E:A6:C9:F7:0D:3E:A7:2D:F8:4E:53:DC:21:72:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gI-dqaOpsn3DT6nLfhOU9whck8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:e0:17:17:86:52:21:c3:a2:2a:ed:de:42:dd:f3:b7:a9:4e:
         ee:44:24:67:f3:be:0f:95:cb:8a:c8:89:c0:82:a1:8b:be:5d:
         5d:43:92:e0:e4:e3:7a:0b:65:b8:5a:7a:bb:00:f1:7f:c5:9f:
         4f:98:73:82:2c:f9:22:1e:14:80:9a:56:5e:0c:1b:a4:50:b9:
         6d:8c:78:46:0a:fb:1b:35:50:1a:aa:ab:96:c8:1c:49:c5:a7:
         92:cd:d3:72:96:cf:6b:d0:1c:6e:7b:a6:45:28:b3:09:3d:32:
         12:ff:a0:7e:ff:9e:61:7d:aa:d3:e4:8f:00:23:ba:39:e4:c7:
         a5:9d:78:70:8e:84:78:15:2d:12:b2:e8:8a:33:9b:f9:3c:e6:
         17:91:b2:eb:89:6d:b6:3d:06:e1:8d:52:ed:86:12:9b:9d:19:
         e0:5a:eb:d7:a5:db:31:9a:28:09:cf:ae:52:d4:07:5f:6c:a3:
         aa:2c:fe:c4:09:50:c7:5b:e8:c2:43:d9:fc:ec:04:dc:e0:fb:
         86:f4:98:28:82:79:84:f1:cb:5e:df:f2:88:4f:fc:d1:ea:01:
         48:60:0a:dc:55:61:f1:ae:76:fb:0f:25:8d:a4:60:11:d4:ca:
         57:a7:a1:21:53:f3:be:17:8e:69:3d:3b:c1:72:6b:d0:0f:d9:
         af:b3:59:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:23:22 2025 by rpki-client