Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.mft
File:                     n8wvPua1w_9txTRqdTVQb6gkEj4.mft (raw, json)
Hash identifier:          3WDVP13t4D68CAO7TqLf9d61wsIU58qazJQzTYj4XOY=
Subject key identifier:   57:84:E7:C6:32:3C:C3:CC:79:5A:F2:20:C7:D6:5C:B7:70:CE:45:42
Authority key identifier: 9F:CC:2F:3E:E6:B5:C3:FF:6D:C5:34:6A:75:35:50:6F:A8:24:12:3E
Certificate issuer:       /CN=9fcc2f3ee6b5c3ff6dc5346a7535506fa824123e
Certificate serial:       0198D65F7529A27948935BE8875B60537B1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n8wvPua1w_9txTRqdTVQb6gkEj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.mft
Manifest number:          0B4B
Signing time:             Sat 23 Aug 2025 10:00:36 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:36 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:36 +0000
Files and hashes:         1: d6576JrBH9SAWrjxOsX8R_x4jzM.roa (hash: tOpLNCmhcfBx5S04WHkAz4ZSeX9flEr3FqNx70rcKF0=)
                          2: n8wvPua1w_9txTRqdTVQb6gkEj4.crl (hash: iPYIiZ1QUTamYDRtXbQECAla15V/Z74M37lzGLjzWwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n8wvPua1w_9txTRqdTVQb6gkEj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:75:29:a2:79:48:93:5b:e8:87:5b:60:53:7b:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fcc2f3ee6b5c3ff6dc5346a7535506fa824123e
        Validity
            Not Before: Aug 23 10:00:36 2025 GMT
            Not After : Aug 24 10:00:36 2025 GMT
        Subject: CN=5784e7c6323cc3cc795af220c7d65cb770ce4542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:92:6e:d5:48:d6:5c:0b:ea:6c:65:b0:5e:c5:
                    56:4d:4f:c2:65:37:27:17:8a:ac:12:56:6d:d5:7e:
                    01:87:83:bd:bf:b1:a0:b7:ad:54:2a:aa:b3:a3:74:
                    55:df:35:db:c5:f7:25:29:ca:da:68:93:e0:f0:79:
                    49:1c:d5:37:03:32:f5:a5:40:9e:67:05:71:40:4e:
                    65:ac:00:71:b5:52:5c:f7:55:6d:7c:38:87:10:d1:
                    89:18:b0:ee:f8:f0:bd:0d:fb:c4:09:f3:8f:ef:c3:
                    ba:10:81:78:f3:18:be:76:73:15:28:cc:29:d5:bd:
                    8f:a9:a4:cf:61:d3:04:c5:d4:f7:35:95:e6:c9:d4:
                    c6:ad:b2:de:cc:7a:3f:69:d0:10:b7:42:2f:d5:00:
                    51:69:b3:ae:16:e3:64:35:7f:ad:b4:69:78:1a:20:
                    44:4a:97:cb:b8:5b:bf:bc:94:7d:03:39:7f:34:be:
                    8f:31:6a:7c:a9:5f:34:a1:55:48:a5:31:16:67:7b:
                    36:a2:6c:91:69:cd:1d:af:0b:8d:ce:42:7b:d9:30:
                    d2:0c:19:ce:a9:06:e2:ac:d8:e4:03:b5:0e:20:74:
                    a3:62:e1:9a:25:38:c7:fe:48:ed:78:e5:14:3b:98:
                    c2:e0:45:28:ef:04:c6:7a:8a:0b:23:85:a7:12:93:
                    ca:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:84:E7:C6:32:3C:C3:CC:79:5A:F2:20:C7:D6:5C:B7:70:CE:45:42
            X509v3 Authority Key Identifier:
                keyid:9F:CC:2F:3E:E6:B5:C3:FF:6D:C5:34:6A:75:35:50:6F:A8:24:12:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8wvPua1w_9txTRqdTVQb6gkEj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:03:09:b6:f8:5e:7d:65:eb:db:20:6e:a6:58:30:c1:ef:38:
         7c:01:7d:be:e9:cf:01:9d:bf:45:d9:3e:7f:f0:a1:c6:38:bc:
         09:5c:7d:2a:a3:1a:89:e2:1c:65:41:65:6f:2c:d6:ba:13:63:
         88:34:8d:94:48:df:1b:9f:fe:1b:45:3a:d9:27:58:27:c1:d3:
         86:b0:e1:40:01:8e:51:72:a7:67:f8:70:4b:6a:9f:94:86:2e:
         5c:96:95:a2:56:7a:b3:04:4c:cf:f0:64:ef:fc:9a:68:fa:68:
         2d:5b:4a:81:dd:da:67:29:97:64:2d:d5:df:ca:4f:62:f4:2b:
         6c:9f:96:43:ce:a1:4e:e8:f6:6c:9a:ae:f1:cb:d7:e3:ea:c7:
         90:10:7c:cb:42:6f:58:62:14:7d:15:58:48:1a:a5:d2:1d:ab:
         3d:fb:2d:60:ce:7a:0b:ff:ea:a3:cd:b9:38:03:37:88:3a:50:
         5e:4f:78:8e:4c:f9:11:48:43:a6:e0:76:ae:70:09:0f:f1:d0:
         df:28:15:87:b6:bf:52:61:46:a6:36:d5:96:02:be:ff:9b:49:
         45:17:06:b6:33:3f:0c:bb:23:e1:6f:08:db:9a:6e:40:a3:c5:
         3b:78:0a:03:b4:af:3f:0e:9f:89:3e:c5:9c:de:ee:e1:0d:47:
         9d:98:06:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:10:12 2025 by rpki-client