Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.mft
File:                     8_alfqKpAutJEt6SffgDBMNVqxI.mft (raw, json)
Hash identifier:          /pNUReQB7O5BrUYXyP68MeTzys2TvsebEnFjIbtnrCw=
Subject key identifier:   F8:BD:B3:66:CC:5C:4A:D9:D3:A2:61:3E:D9:E1:14:AD:05:FC:5C:76
Authority key identifier: F3:F6:A5:7E:A2:A9:02:EB:49:12:DE:92:7D:F8:03:04:C3:55:AB:12
Certificate issuer:       /CN=f3f6a57ea2a902eb4912de927df80304c355ab12
Certificate serial:       0198D698715231FA12BA6F0C51F6B855BB44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8_alfqKpAutJEt6SffgDBMNVqxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.mft
Manifest number:          159C
Signing time:             Sat 23 Aug 2025 11:02:51 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:51 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:51 +0000
Files and hashes:         1: 8_alfqKpAutJEt6SffgDBMNVqxI.crl (hash: VqfDJ6T2HxG3kPFOA8lTIrm6qihAipnSszRfeoBeYYI=)
                          2: u8DCnmiwdvKh2XgFpOMuHJjylj4.roa (hash: pyYbMY7OWkqDVRgEujgw5F9QcQGgPWWbAPnLnwKmM2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8_alfqKpAutJEt6SffgDBMNVqxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 11:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:71:52:31:fa:12:ba:6f:0c:51:f6:b8:55:bb:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3f6a57ea2a902eb4912de927df80304c355ab12
        Validity
            Not Before: Aug 23 11:02:51 2025 GMT
            Not After : Aug 24 11:02:51 2025 GMT
        Subject: CN=f8bdb366cc5c4ad9d3a2613ed9e114ad05fc5c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:79:5f:bd:a1:43:8a:82:ca:6a:be:c2:42:9d:
                    20:a8:71:15:85:fd:0e:22:6d:57:0a:be:82:85:86:
                    c8:ba:dd:86:a7:e9:dd:79:f8:6d:a0:24:1d:fe:e1:
                    48:16:ec:8b:52:bb:5c:2a:b7:c6:4b:6d:4b:05:a7:
                    b5:a7:a1:04:e8:77:4e:2b:b2:3f:4b:91:a3:4a:f5:
                    12:0b:38:48:3d:08:39:30:fb:f8:a2:7a:a0:30:5d:
                    cc:8c:ff:44:71:38:5e:b5:ee:fb:b0:f4:e9:f8:7b:
                    f6:64:57:3f:e0:8d:d8:05:fe:21:87:7b:9d:0b:ee:
                    95:f7:5f:5d:62:3f:69:57:3d:0b:48:9c:91:d4:67:
                    8c:fa:bb:6d:d1:d6:9f:a5:05:5f:9e:a6:b9:b3:a2:
                    b6:be:53:6a:d3:9e:43:fb:e4:2f:27:7e:b2:f1:be:
                    48:c5:e9:c8:19:d2:35:c8:bd:c6:fd:7e:7b:67:b1:
                    a7:0f:45:26:07:65:d7:64:0e:1c:d7:9e:9b:50:85:
                    1b:47:14:52:76:c2:55:18:ae:fc:f2:c5:64:44:b0:
                    af:b7:de:c4:35:8c:2c:7e:c3:af:4c:85:0b:51:f4:
                    89:4f:1b:c2:56:51:79:08:39:56:4f:c8:2d:42:e8:
                    c7:70:d9:a2:50:2e:54:9b:85:ac:73:bd:2e:75:7c:
                    81:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:BD:B3:66:CC:5C:4A:D9:D3:A2:61:3E:D9:E1:14:AD:05:FC:5C:76
            X509v3 Authority Key Identifier:
                keyid:F3:F6:A5:7E:A2:A9:02:EB:49:12:DE:92:7D:F8:03:04:C3:55:AB:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_alfqKpAutJEt6SffgDBMNVqxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:6c:54:4e:b9:82:41:45:a1:e7:36:98:17:4b:10:ac:34:f0:
         f8:bb:2e:23:72:73:eb:40:13:72:60:92:2b:76:5e:e1:31:c8:
         da:c4:69:7d:20:54:f6:b3:01:ae:4a:b3:c9:91:82:80:9e:2f:
         02:e6:87:a2:f7:ab:6b:5f:fe:65:95:37:b2:7f:0f:94:a9:b7:
         09:3f:c1:e8:a5:6e:31:48:56:b7:f5:1e:5a:36:62:e8:73:e5:
         ff:bd:f6:36:12:88:05:15:32:6d:c8:d6:53:d9:34:51:40:22:
         16:75:38:82:a4:9a:8b:39:cd:57:05:4d:db:ec:d5:11:9e:be:
         ba:79:74:a4:36:4d:8d:f1:03:07:87:f3:4a:c2:97:ed:07:d6:
         d7:bb:10:5e:84:68:88:3d:cd:48:c7:96:75:1a:b5:89:1f:f5:
         0a:10:3d:38:d8:a9:0c:ca:5a:ca:98:69:d4:e7:7a:d7:59:74:
         4b:3f:b2:41:d2:84:6d:d4:45:06:12:08:fb:55:4e:18:ce:cb:
         60:23:06:82:fc:7b:df:c3:e2:13:2c:32:25:c5:98:7a:ad:09:
         75:43:05:c6:86:9b:da:c8:0f:52:8c:c9:7e:c5:58:d1:e7:65:
         ab:a3:c9:6e:bd:cf:ca:91:5c:13:d2:40:84:9b:bf:9e:36:24:
         dc:bc:b2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:13:58 2025 by rpki-client