Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
File:                     8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft (raw, json)
Hash identifier:          ZYJttMA6RjzHEsyASG9m4+6DrK1AKmnadru6rk02nsU=
Subject key identifier:   5E:37:F2:FD:ED:D5:46:A5:4F:ED:55:6C:06:14:E0:45:0F:C6:CB:C7
Authority key identifier: F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
Certificate issuer:       /CN=f324d0f47297680535eb2799189db888b4066782
Certificate serial:       0198D84F51A8F3CAC2A06CFD1C7FC287279C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
Manifest number:          0C50
Signing time:             Sat 23 Aug 2025 19:02:13 +0000
Manifest this update:     Sat 23 Aug 2025 19:02:13 +0000
Manifest next update:     Sun 24 Aug 2025 19:02:13 +0000
Files and hashes:         1: 8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl (hash: uBCe+qebzdZdVWeU0Ze10toXE0eL7Ii1FX7ALs24hR0=)
                          2: ViytvvvqRpbhZ8khzk-URy1_cok.roa (hash: GO9E5IMUAfx38THMM6EhNHK1/Vpo8T9/VGp4F+NJQF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:4f:51:a8:f3:ca:c2:a0:6c:fd:1c:7f:c2:87:27:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f324d0f47297680535eb2799189db888b4066782
        Validity
            Not Before: Aug 23 19:02:13 2025 GMT
            Not After : Aug 24 19:02:13 2025 GMT
        Subject: CN=5e37f2fdedd546a54fed556c0614e0450fc6cbc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f2:15:b9:fd:1a:46:3b:f1:96:8c:e6:72:27:
                    85:07:e6:ab:30:ea:fd:45:7f:52:5c:ae:48:6f:93:
                    9e:5f:04:7b:0a:b9:7e:af:5f:bf:f7:f4:a5:b5:52:
                    3c:91:19:f9:43:af:98:cc:a3:ae:6a:5e:bc:53:3b:
                    fc:a8:f4:90:80:b0:59:f8:15:36:70:ca:0e:4a:af:
                    ed:d4:89:9b:bc:e0:c1:1c:51:c4:d9:87:a1:59:7e:
                    29:70:2e:f3:c7:7b:e1:3d:31:bc:bd:c5:99:11:55:
                    f7:10:a3:f3:74:a5:97:7a:4e:51:8e:2d:8b:85:1e:
                    59:d1:f8:54:e0:96:64:f1:ff:36:69:c3:8c:b5:04:
                    04:dd:b5:a8:30:e6:d0:34:0d:71:e7:50:fe:63:05:
                    c6:a6:13:bd:9d:5e:6b:7c:91:e7:dd:d1:79:f7:6b:
                    24:7a:89:59:41:52:9c:14:15:d8:57:74:d4:47:f6:
                    5e:a7:aa:20:29:25:7d:83:70:f4:0c:b1:7e:9a:ae:
                    55:7a:6b:62:9c:b2:bf:f4:cc:0e:a1:aa:ac:08:9d:
                    5f:0a:12:9c:64:c1:a2:45:a1:b2:96:01:38:c6:f5:
                    9f:c0:27:75:30:d9:54:6e:7d:f6:39:33:cc:a8:8c:
                    c6:ec:4c:f5:5b:ed:6b:f7:91:96:f5:5d:aa:42:8a:
                    23:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:37:F2:FD:ED:D5:46:A5:4F:ED:55:6C:06:14:E0:45:0F:C6:CB:C7
            X509v3 Authority Key Identifier:
                keyid:F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:24:00:f6:43:bf:b0:98:53:b2:e2:28:13:36:28:e6:3a:af:
         c5:6c:ff:9b:fb:2a:ce:97:ef:70:a8:f7:a2:44:10:2d:37:ba:
         dc:d0:94:91:c5:a5:8e:30:80:95:c0:67:11:ed:83:97:43:c6:
         61:56:da:70:8a:e2:a8:2c:b7:21:74:fb:8a:d5:fe:68:bb:3d:
         f8:35:4f:60:6e:8f:b8:5e:04:62:13:1a:23:c9:c0:f3:69:78:
         8d:b8:c4:5a:a2:ff:41:3c:f4:e6:38:93:09:7f:a2:46:56:fe:
         c3:50:54:e1:8a:d5:35:6a:6b:03:8c:43:59:6f:fc:15:19:fd:
         b9:e7:ee:d6:df:6f:94:60:78:c7:63:37:b2:49:80:7d:67:d4:
         30:f2:dc:1e:34:3f:30:a6:88:9b:93:97:0e:ad:dc:10:18:7f:
         c5:a3:21:c9:02:bd:87:b4:0f:70:84:ee:f8:55:7a:b1:88:a0:
         f4:09:6e:ab:af:30:5c:4c:5e:fc:3c:9f:9b:48:36:3f:02:b9:
         d6:4f:0c:e5:32:4a:90:58:3d:4f:23:33:eb:cd:53:9d:69:83:
         15:e6:f0:51:69:68:bf:4f:ad:84:c7:52:f8:a6:55:82:84:c5:
         d3:d3:8e:2d:b9:84:7d:35:7b:73:30:19:b7:34:3e:5e:97:5f:
         f7:86:92:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:07:28 2025 by rpki-client