Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/Myrs0kO-9YfIebv-H-TFpb6zNFU.mft
File:                     Myrs0kO-9YfIebv-H-TFpb6zNFU.mft (raw, json)
Hash identifier:          bjywqOXT5nH3yMkurVHroyK8FvI9tyrwJ3rbJfUBf9M=
Subject key identifier:   36:AE:6D:EB:22:21:C2:9D:D7:0B:D6:2D:9C:02:E3:4F:1F:02:41:98
Authority key identifier: 33:2A:EC:D2:43:BE:F5:87:C8:79:BB:FE:1F:E4:C5:A5:BE:B3:34:55
Certificate issuer:       /CN=332aecd243bef587c879bbfe1fe4c5a5beb33455
Certificate serial:       0199FB0EF2CB06201FC8431F9A08F927EC78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Myrs0kO-9YfIebv-H-TFpb6zNFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/Myrs0kO-9YfIebv-H-TFpb6zNFU.mft
Manifest number:          8B
Signing time:             Sun 19 Oct 2025 06:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:24 +0000
Files and hashes:         1: Myrs0kO-9YfIebv-H-TFpb6zNFU.crl (hash: KQT/qdRY9e5RPCZH4LbILOl9oTMDRLETloK9fy6PH1g=)
                          2: YCOzpt6m55VdUCTyaUiIpHbbaAw.roa (hash: 8KEhXczZ5fk5hHX3jazf7zw7DRdBM2iZ9Jxn8A/DTF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/Myrs0kO-9YfIebv-H-TFpb6zNFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/Myrs0kO-9YfIebv-H-TFpb6zNFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Myrs0kO-9YfIebv-H-TFpb6zNFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0e:f2:cb:06:20:1f:c8:43:1f:9a:08:f9:27:ec:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=332aecd243bef587c879bbfe1fe4c5a5beb33455
        Validity
            Not Before: Oct 19 06:01:24 2025 GMT
            Not After : Oct 20 06:01:24 2025 GMT
        Subject: CN=36ae6deb2221c29dd70bd62d9c02e34f1f024198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3c:12:b6:ec:a7:e9:32:71:63:75:3c:2a:d1:
                    2c:c9:28:42:b7:85:1e:f9:2e:18:99:6e:56:01:a0:
                    f4:95:74:0a:7a:85:f6:f0:1c:c3:39:a6:36:60:3b:
                    19:85:83:2d:19:5a:1e:b4:7e:d4:a9:eb:b9:8b:f4:
                    0c:34:be:1d:22:46:d6:1c:f9:6f:b4:db:d3:70:56:
                    e9:cf:c5:2c:56:a2:c6:96:4e:11:c3:8e:ef:3d:c3:
                    11:02:64:dd:d2:e4:e1:43:1c:f5:42:8f:5d:e6:84:
                    d3:8a:34:d4:7a:04:bc:43:81:4f:05:e1:9c:e1:44:
                    f1:8a:f1:b5:de:30:95:46:02:6c:4d:9a:99:34:89:
                    0c:94:b1:92:da:97:5b:10:48:cc:aa:e6:5c:61:fe:
                    54:b5:b0:3f:6e:8d:81:ae:b1:25:0d:47:ea:c4:8a:
                    6e:72:00:8f:64:bd:fb:77:d4:d8:74:20:23:0b:0f:
                    74:2b:60:68:bc:07:6f:30:67:0f:74:8a:65:d1:8b:
                    d5:4b:5c:af:e4:ca:8b:64:48:77:fd:64:92:da:be:
                    5e:e5:b0:2a:98:1e:5b:13:91:3f:bc:4c:4f:a6:8e:
                    19:0e:79:be:41:4c:8d:cd:7e:c4:19:59:64:fe:57:
                    5c:fd:43:ad:8f:f6:85:29:5e:c4:f6:61:86:99:5b:
                    f2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:AE:6D:EB:22:21:C2:9D:D7:0B:D6:2D:9C:02:E3:4F:1F:02:41:98
            X509v3 Authority Key Identifier:
                keyid:33:2A:EC:D2:43:BE:F5:87:C8:79:BB:FE:1F:E4:C5:A5:BE:B3:34:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Myrs0kO-9YfIebv-H-TFpb6zNFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/Myrs0kO-9YfIebv-H-TFpb6zNFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/Myrs0kO-9YfIebv-H-TFpb6zNFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:04:7f:e9:8b:e3:ff:6c:df:60:f6:4d:d3:49:75:a8:93:2a:
         46:f7:a5:a3:f9:45:c7:b5:18:47:79:b1:8f:09:77:03:a3:13:
         cd:a1:e6:3d:9e:f8:b5:ee:46:f6:0a:d9:a7:70:f5:38:df:c5:
         1b:5a:95:9f:81:83:0f:8e:db:89:2b:aa:31:e7:32:bd:9c:b0:
         dd:eb:d6:ad:1f:92:5a:e3:78:93:eb:90:a4:a0:be:47:95:10:
         66:83:c4:59:d7:fd:eb:62:8e:84:0c:d8:20:87:fc:61:ff:44:
         a8:c2:a4:d7:f4:9d:0a:0c:ca:64:3b:b3:84:a0:11:e4:00:21:
         63:22:2e:69:c4:26:e7:10:85:6c:b0:34:52:66:3a:bd:60:21:
         04:1a:33:c8:19:e3:2c:5b:cf:e5:67:f7:3a:eb:08:db:ce:a6:
         f8:a7:5d:96:13:3f:12:5f:81:f3:c0:a5:62:5e:fc:7c:a8:7c:
         46:a3:0a:ed:ff:10:9f:08:d4:74:63:ed:27:57:2c:54:a5:8a:
         4b:97:88:63:37:f8:e0:f0:d3:a4:0f:77:8a:e1:ec:8f:7e:95:
         f8:04:d6:91:d7:06:2f:1b:b1:ac:ad:61:06:ba:1c:53:85:31:
         de:a5:3b:d4:69:31:fe:03:73:c8:92:d5:84:c6:f8:36:85:b9:
         14:ba:1b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:03:58 2025 by rpki-client