Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.mft
File:                     8UHWZGmLcP-yom9oS0fetsjVmlM.mft (raw, json)
Hash identifier:          IXphlfu2AUH6cfzwWUsGF3OJ9ZpP4CHFP1aHVtHIkZY=
Subject key identifier:   F1:35:58:93:49:79:C7:15:86:C1:C4:02:96:1B:44:2A:7A:49:FB:61
Authority key identifier: F1:41:D6:64:69:8B:70:FF:B2:A2:6F:68:4B:47:DE:B6:C8:D5:9A:53
Certificate issuer:       /CN=f141d664698b70ffb2a26f684b47deb6c8d59a53
Certificate serial:       0198D6CD6D2CB43E8057338EF5B25FED6E46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8UHWZGmLcP-yom9oS0fetsjVmlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.mft
Manifest number:          1082
Signing time:             Sat 23 Aug 2025 12:00:43 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:43 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:43 +0000
Files and hashes:         1: 4T4WQHYVEwM6aHV5StYkGf2jN5Y.roa (hash: KlTVObGFhQ/EitqWP5C6TUwR0SNqxo8YoBWHXEsTCiE=)
                          2: 8UHWZGmLcP-yom9oS0fetsjVmlM.crl (hash: 6cd6RNUdkNPc0tLn7Ag+GvSIeyXSAuTx9by3KMqfBcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8UHWZGmLcP-yom9oS0fetsjVmlM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:6d:2c:b4:3e:80:57:33:8e:f5:b2:5f:ed:6e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f141d664698b70ffb2a26f684b47deb6c8d59a53
        Validity
            Not Before: Aug 23 12:00:43 2025 GMT
            Not After : Aug 24 12:00:43 2025 GMT
        Subject: CN=f13558934979c71586c1c402961b442a7a49fb61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b0:1f:a5:3b:6e:76:e9:e3:d1:30:41:c6:43:
                    38:ed:ce:96:24:e6:94:e5:46:93:f5:da:15:ae:34:
                    a8:af:66:cf:7b:6f:ef:d6:9b:37:2d:e9:3b:bd:b3:
                    64:6e:82:bf:6e:0e:7a:d8:ee:3a:b6:c2:8d:7c:ad:
                    98:e7:65:c5:2b:a2:da:b8:46:18:1c:6a:ba:10:02:
                    39:53:bd:85:b1:11:b1:c2:80:6f:4a:e9:da:02:d1:
                    0f:1f:e4:12:1e:8d:69:a5:98:16:6c:af:9d:87:47:
                    96:96:22:bd:03:51:51:65:d0:21:87:5b:40:bd:d9:
                    75:7b:40:98:17:46:a9:f5:7f:be:c2:24:47:57:3b:
                    dc:ac:42:98:e3:59:7b:7e:67:3a:21:10:96:fa:b9:
                    59:b7:13:d4:e6:56:7e:07:f1:c9:e5:7e:82:4f:ed:
                    7d:ee:72:bc:ce:ee:40:da:42:c1:9f:fe:40:6d:e7:
                    4a:7a:9d:c7:1e:b4:6e:87:54:f2:d8:d5:71:ea:b7:
                    fc:6f:b0:01:b8:90:79:af:2e:10:9d:ae:5b:58:96:
                    cc:88:fd:79:a1:69:ac:8a:f5:85:16:58:01:c4:3c:
                    31:79:a9:4b:df:f0:f5:3b:30:be:99:8a:be:91:c9:
                    d6:84:a9:67:17:c2:b3:41:a9:5b:20:0a:63:3e:bf:
                    44:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:35:58:93:49:79:C7:15:86:C1:C4:02:96:1B:44:2A:7A:49:FB:61
            X509v3 Authority Key Identifier:
                keyid:F1:41:D6:64:69:8B:70:FF:B2:A2:6F:68:4B:47:DE:B6:C8:D5:9A:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UHWZGmLcP-yom9oS0fetsjVmlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:9d:82:fb:bd:55:bd:0f:a4:1f:28:20:90:d7:83:75:3c:8c:
         82:5b:2b:32:7d:3e:72:69:93:cb:2e:7f:9e:ea:ae:24:59:b2:
         44:f9:14:5b:3c:26:8c:24:11:52:30:57:45:49:0c:f4:cd:2c:
         62:3d:7a:51:d8:ef:8e:42:59:10:2d:68:b6:cb:d1:f7:48:18:
         65:54:04:b3:e1:18:28:41:d3:46:f2:ab:f9:1c:11:b6:d2:10:
         2a:7e:c2:0e:50:ff:0b:8e:4c:cd:7c:e3:c9:ce:7d:15:fd:90:
         b6:76:a9:de:4f:0e:a6:ca:e7:6d:bd:e6:4e:3c:a2:17:69:49:
         77:94:68:9a:1f:06:03:63:6f:9a:9c:c6:5a:70:db:42:7b:b9:
         72:bf:38:87:cf:40:b0:e7:3d:41:81:44:74:7a:e9:4b:a3:6c:
         41:88:76:3a:b9:d3:d1:38:f4:5e:1f:84:67:87:44:d4:ef:25:
         48:38:fc:59:c1:4d:28:28:49:2a:eb:0b:a2:44:67:b1:d0:48:
         b0:8c:a4:88:97:a6:d6:f8:8e:22:ab:a2:cf:5c:cc:1f:ff:0d:
         2a:df:f1:c2:ed:6b:b9:95:4b:db:3b:36:e3:50:3e:92:b2:8e:
         70:69:20:8b:a4:5f:b2:45:8c:35:f7:80:73:b4:e8:b9:92:9a:
         f8:6c:16:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:32:02 2025 by rpki-client