Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
File:                     c2fEkER_UEXAI2fbjSG04IdJ-nY.mft (raw, json)
Hash identifier:          hsoHRLHuaX97vHqn+rHMuZKYsV3yfNmxkiZE4Cb4QQU=
Subject key identifier:   9F:B8:44:34:4A:C6:E4:0A:84:C3:20:84:89:BD:77:39:42:64:08:41
Authority key identifier: 73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76
Certificate issuer:       /CN=7367c490447f5045c02367db8d21b4e08749fa76
Certificate serial:       0198D515D59685B8F9CD07EAA7A6F66F11F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
Manifest number:          0842
Signing time:             Sat 23 Aug 2025 04:00:34 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:34 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:34 +0000
Files and hashes:         1: c2fEkER_UEXAI2fbjSG04IdJ-nY.crl (hash: HdeWcU0LnXLtpMrATIJFq3GTOhjVvDUA/X2sPR9nkac=)
                          2: zxcUujcSrD8SI1LnYGJEIzlJLRs.roa (hash: 9DpZ6fCwMNxgzvUI8W4qG2/5GfqMuaNy171SPmB26NM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:d5:96:85:b8:f9:cd:07:ea:a7:a6:f6:6f:11:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7367c490447f5045c02367db8d21b4e08749fa76
        Validity
            Not Before: Aug 23 04:00:34 2025 GMT
            Not After : Aug 24 04:00:34 2025 GMT
        Subject: CN=9fb844344ac6e40a84c3208489bd773942640841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:62:50:12:60:3b:8d:1d:d2:e1:6a:1d:a1:09:
                    08:3d:6a:7a:ba:5b:5b:45:71:8a:6d:ee:b2:1e:dc:
                    30:b6:de:e5:61:6d:f9:b2:bb:99:08:5e:23:b6:38:
                    37:13:f8:ab:51:16:0a:c9:d4:ae:b5:31:22:c9:b3:
                    60:9b:fe:fb:b7:ad:f1:c5:bb:16:b9:1e:3d:13:e5:
                    d9:b1:79:2f:be:91:0e:75:b6:e6:59:9e:79:5d:6b:
                    9c:df:79:ef:1b:a6:b5:1b:3b:21:f8:b4:47:f6:f6:
                    3e:62:8a:07:fc:6d:06:4d:61:08:5c:9b:0f:eb:d7:
                    0d:95:2c:ae:83:8e:42:b4:8c:00:9e:d7:27:ca:e3:
                    df:8c:45:05:2e:40:fc:7a:77:0b:ff:39:cc:20:bc:
                    00:ac:2c:24:f2:97:69:47:bb:c2:0a:2a:1a:c9:ee:
                    bb:c3:67:bc:c2:6f:aa:34:08:61:84:a9:c0:88:bc:
                    da:e6:55:10:41:81:ca:8f:1a:bf:de:0f:1e:bc:55:
                    f5:b5:2e:89:d2:b8:77:3d:77:ab:4c:3b:22:d4:66:
                    5f:54:15:cb:22:06:75:18:3a:18:d8:8d:9c:89:17:
                    2e:7d:da:94:4c:29:6a:f6:8f:81:c6:53:ec:d1:0a:
                    8f:6b:94:ca:69:c8:1f:38:6d:fb:32:74:ad:0b:88:
                    1e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B8:44:34:4A:C6:E4:0A:84:C3:20:84:89:BD:77:39:42:64:08:41
            X509v3 Authority Key Identifier:
                keyid:73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:ff:33:ea:fe:ee:e8:3d:c2:b7:2a:6b:b8:f9:96:d8:49:42:
         28:4e:a1:84:cf:f9:80:98:59:19:64:f8:1d:c7:9f:13:9d:01:
         74:96:9b:e7:ab:d1:e5:25:5e:4d:fe:65:5f:39:7c:7d:54:71:
         b7:c4:ce:b4:2c:51:48:76:60:fa:17:a4:76:99:ca:94:c1:55:
         aa:15:cb:1d:6e:22:1f:0c:66:39:18:f0:6f:4f:b1:05:35:63:
         00:59:a9:45:86:bf:74:28:a1:d2:0f:2f:75:96:ea:3b:65:74:
         9e:03:ef:72:1d:40:29:db:cb:36:71:a0:93:b4:79:2c:df:c2:
         51:12:d2:64:c9:fc:75:d3:83:93:ec:63:59:11:b7:90:3d:d3:
         96:eb:40:e2:73:26:64:16:75:d8:7f:68:06:be:40:6a:09:ca:
         d7:c1:4a:74:2a:be:be:d7:67:14:7a:a9:3b:71:42:08:44:b5:
         57:21:fb:c5:49:c8:4e:d2:b5:c8:41:0d:19:1e:23:ac:7b:42:
         6c:57:13:25:30:58:5b:c5:42:96:98:2a:a6:6d:66:ad:27:a1:
         38:88:78:f6:4e:3f:a9:78:ce:a7:58:82:8e:a4:2e:f9:a1:50:
         9f:13:9b:7a:12:b4:08:30:d2:16:4f:62:ca:d0:90:71:cb:74:
         17:94:0b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:48:38 2025 by rpki-client