Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft
File:                     0f00NtehmnND-oANh6Aa8YPaMYs.mft (raw, json)
Hash identifier:          YVwRp2IpJVvTbSfdkvYSeGNv4zxfEqRWBl9+P0a5zhI=
Subject key identifier:   B0:93:B1:73:53:FD:3A:7B:FE:89:DC:FB:9C:FA:35:10:8E:4B:4C:12
Authority key identifier: D1:FD:34:36:D7:A1:9A:73:43:FA:80:0D:87:A0:1A:F1:83:DA:31:8B
Certificate issuer:       /CN=d1fd3436d7a19a7343fa800d87a01af183da318b
Certificate serial:       0198D5BC61E490CB67326142AA102529E521
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft
Manifest number:          0C56
Signing time:             Sat 23 Aug 2025 07:02:29 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:29 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:29 +0000
Files and hashes:         1: 0f00NtehmnND-oANh6Aa8YPaMYs.crl (hash: qDAkPYygsfl96Zfj7ea6VMnlRmoLzzdBlgvh5WyNzz4=)
                          2: 289E-Jj1-_NHnfIspmJ6dDyJHMo.roa (hash: WdW5apU9mzQj50OlelJWc6bz8hGD+pm8qBunEBj3yw4=)
                          3: Cs1qBn4VjrBIRHmPJXLiE1xFxCY.roa (hash: MWgCuKpBS+l+AyVioTFlRoxqt43GEYXQ/PHcMYuFOog=)
                          4: h6nXa6s8OWHMrQG1DSMZKlfJDE8.roa (hash: oPs+na6jf/GLFYpEpQKvloInu3ZuLoam22sOPdiiyEs=)
                          5: iW93Iii_wpRaBJx4UitIZE8Hirs.roa (hash: nFhRjV7MRzVZ4mQI/ZjUoZj1OD4mh/1+uDWJfZv9Rc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:61:e4:90:cb:67:32:61:42:aa:10:25:29:e5:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1fd3436d7a19a7343fa800d87a01af183da318b
        Validity
            Not Before: Aug 23 07:02:29 2025 GMT
            Not After : Aug 24 07:02:29 2025 GMT
        Subject: CN=b093b17353fd3a7bfe89dcfb9cfa35108e4b4c12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e6:25:a7:c9:ec:be:01:63:64:f2:1b:f9:49:
                    c6:6f:4a:ef:e5:bc:77:ae:75:3f:f3:7f:2b:1d:70:
                    8b:8a:55:11:e5:0a:23:b8:09:81:89:9d:a6:01:36:
                    87:97:25:84:de:a5:dc:70:be:9e:ae:db:bc:30:ec:
                    53:b0:a2:65:17:46:ce:a1:fa:b5:36:f1:64:89:19:
                    a0:86:a4:fb:78:cc:8c:f4:af:d5:b5:c7:3d:4e:f0:
                    19:13:80:12:08:18:ab:db:2b:b1:7e:9c:a3:50:05:
                    20:e5:4e:1f:11:be:5e:02:88:ec:42:93:20:06:d9:
                    29:a7:b3:e6:80:c8:be:d6:0d:96:fd:7f:36:a8:14:
                    ab:72:77:d3:f9:93:e9:8c:9a:23:67:57:bd:6b:33:
                    fc:b4:90:e5:01:43:3e:df:57:33:e6:4f:15:59:88:
                    d4:ed:ce:1a:7c:c3:50:19:78:af:e6:c6:b8:1c:bf:
                    b8:29:fa:38:cb:20:3e:5b:50:54:df:81:fa:5b:ed:
                    2a:e6:7b:03:c5:ce:4c:78:21:05:e4:92:aa:b9:e9:
                    56:f8:94:2d:d4:ff:3f:9b:17:26:73:cc:5b:bc:21:
                    74:c0:18:9d:17:e7:59:19:e5:65:cf:c6:2d:42:1d:
                    6b:63:93:30:7f:3c:e8:73:63:25:ba:b9:b2:9d:b6:
                    98:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:93:B1:73:53:FD:3A:7B:FE:89:DC:FB:9C:FA:35:10:8E:4B:4C:12
            X509v3 Authority Key Identifier:
                keyid:D1:FD:34:36:D7:A1:9A:73:43:FA:80:0D:87:A0:1A:F1:83:DA:31:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:99:e9:a3:af:c1:12:8e:98:2a:f9:f1:51:16:ea:cc:d1:dd:
         e8:aa:4a:e0:ec:6a:e6:23:83:1f:81:50:b5:ab:c4:9b:3b:84:
         a5:9e:a7:d5:16:4f:a6:e1:2e:69:04:84:2e:b2:5c:6d:e0:30:
         5c:3d:14:d9:6d:46:1a:07:c4:5f:c4:c4:2c:ff:c0:ee:ee:81:
         4c:0c:e4:37:26:01:30:2b:78:82:ef:4d:b4:4f:d0:73:2c:5b:
         fc:b6:67:2c:7a:0b:ae:f0:b3:51:52:ce:70:36:e2:cf:35:e6:
         99:3a:d6:b1:2e:f2:97:27:6a:d3:73:90:d8:4f:8e:7c:14:9b:
         53:f3:a0:6b:1b:17:18:45:b9:37:cf:d6:3b:e9:0c:c6:63:b5:
         23:55:4e:70:c4:7e:93:38:e1:6b:e8:76:2a:b9:61:02:94:97:
         ca:d3:c9:e7:f3:b7:52:ad:92:6a:e8:eb:10:d3:f8:25:c4:20:
         e9:44:a8:ae:dd:2f:75:a9:a1:89:6a:1c:a0:e5:a8:e3:c4:b0:
         0f:cd:04:3d:4a:75:13:2e:a9:37:53:51:b0:9f:7c:73:34:18:
         2e:c1:f8:ad:8f:bb:ee:bb:8d:0b:cf:f3:21:6a:39:69:15:b8:
         09:f1:02:c5:37:58:c8:47:e7:23:8f:f9:9d:52:53:4f:99:09:
         40:e1:d4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:19:58 2025 by rpki-client