Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
File:                     8yf6fhlHLlg7cgk2w50P0kJmGf0.mft (raw, json)
Hash identifier:          HAI1ZsYANMuRbivg0GS8etvUwrwPLjncq5xJ71PJLac=
Subject key identifier:   4E:F3:E2:1E:AB:CB:33:4E:BC:F1:A2:BB:70:D3:87:00:B6:0B:4A:8F
Authority key identifier: F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD
Certificate issuer:       /CN=f327fa7e19472e583b720936c39d0fd2426619fd
Certificate serial:       0198D84FDB143EC3483B12D45F56F2A5BEA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
Manifest number:          09F5
Signing time:             Sat 23 Aug 2025 19:02:48 +0000
Manifest this update:     Sat 23 Aug 2025 19:02:48 +0000
Manifest next update:     Sun 24 Aug 2025 19:02:48 +0000
Files and hashes:         1: 8yf6fhlHLlg7cgk2w50P0kJmGf0.crl (hash: wBZ0wA1RsRXTNScyigkGc+9+I4Wripjlxb7qKME3pxs=)
                          2: jteACDbaYC2GMTFvAHtj6JRaDvo.roa (hash: FyyB216euYUAYG4P0lTXHk9/k4BDveAtrAV0IpAsB3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:4f:db:14:3e:c3:48:3b:12:d4:5f:56:f2:a5:be:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f327fa7e19472e583b720936c39d0fd2426619fd
        Validity
            Not Before: Aug 23 19:02:48 2025 GMT
            Not After : Aug 24 19:02:48 2025 GMT
        Subject: CN=4ef3e21eabcb334ebcf1a2bb70d38700b60b4a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1f:0d:cf:3f:28:0b:f2:b8:ea:74:4d:4b:7d:
                    fe:60:6f:2e:59:1c:c3:38:ec:f8:24:8f:29:8d:64:
                    67:91:39:34:52:68:ce:69:37:1e:67:1f:31:0f:13:
                    71:52:80:e5:2f:31:7a:26:64:a4:61:af:18:a2:a7:
                    ce:95:ad:bc:8e:3b:55:ae:66:fd:8b:00:aa:f0:63:
                    74:2b:e6:4c:7b:3d:58:4e:18:4c:fe:74:fa:01:69:
                    df:7a:ec:ae:21:ad:11:d5:ea:a8:8a:2d:f1:16:b0:
                    e7:d4:21:6a:42:70:27:c9:86:2a:62:18:01:b4:b9:
                    4e:6d:e1:55:41:c8:0f:63:f9:63:a1:fd:a0:74:ce:
                    09:8d:4b:f1:df:db:74:f5:1c:0c:e5:b1:45:e0:19:
                    3c:a9:a0:a6:c6:2e:b7:a8:66:12:f5:23:68:5a:18:
                    15:80:a7:92:ef:58:0d:36:c3:97:19:e3:a2:1d:5b:
                    ff:07:d9:69:dc:69:c8:e3:39:36:2e:33:eb:c4:35:
                    af:b6:cc:8a:ba:71:14:47:24:dd:98:db:19:85:10:
                    bc:bc:3a:1a:75:ee:e0:83:42:a6:24:c5:c7:d8:51:
                    ce:52:00:97:0f:c7:fd:5f:5f:dd:8b:0d:ee:80:3a:
                    6d:91:52:70:b7:f4:b3:f0:aa:3b:2c:88:69:bd:b4:
                    19:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F3:E2:1E:AB:CB:33:4E:BC:F1:A2:BB:70:D3:87:00:B6:0B:4A:8F
            X509v3 Authority Key Identifier:
                keyid:F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:86:49:b2:69:c6:3e:84:39:53:9f:90:16:e0:70:74:eb:19:
         82:0a:dd:27:f3:fa:68:3d:a6:6a:d4:dc:ff:d5:1b:fd:34:37:
         98:db:51:9e:ac:81:2c:2c:67:fe:e3:70:59:94:b9:e4:20:e8:
         9d:bc:40:54:c3:cc:86:b7:ea:d2:2d:11:08:29:62:d9:f7:2c:
         ea:56:dc:48:30:b0:cc:9f:05:3d:55:14:3d:84:fd:c8:f5:29:
         72:12:54:5a:8c:d3:1f:e4:3e:9a:7c:3f:6e:5a:2c:89:a7:5e:
         76:9b:da:a9:84:84:e8:03:26:5b:9a:61:f5:8d:4b:c3:f1:6b:
         d1:08:c5:8f:3a:d8:13:87:2b:7d:90:10:ee:35:85:91:6f:c9:
         72:f3:04:1e:91:d9:58:27:35:41:c1:0f:b9:1a:cf:ea:75:b4:
         d6:ce:79:79:a4:21:68:e4:9b:27:94:6f:d1:05:de:ef:ff:1e:
         0d:64:9a:69:98:16:30:09:49:25:5f:37:c3:ad:0a:a9:f1:d5:
         ae:99:e7:a9:45:98:1e:82:df:55:69:85:51:b2:d5:04:29:70:
         06:ec:36:5a:9b:ab:32:4b:ba:47:ad:a1:2f:b8:58:b2:76:f2:
         a9:52:ed:17:6e:01:0d:c8:a2:c1:30:f0:dc:97:33:56:8b:19:
         f6:6f:1c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:08:51 2025 by rpki-client