Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft
File:                     8mJAZfhrTPmEjex9q4ak24bBXhE.mft (raw, json)
Hash identifier:          Om5nknRm1QIv9vV+kaGf4OJoplGQAe1JEcytJQ7zEgk=
Subject key identifier:   3E:61:18:A3:33:17:3E:49:F6:53:F1:C1:F8:96:09:6F:6F:11:99:F9
Authority key identifier: F2:62:40:65:F8:6B:4C:F9:84:8D:EC:7D:AB:86:A4:DB:86:C1:5E:11
Certificate issuer:       /CN=f2624065f86b4cf9848dec7dab86a4db86c15e11
Certificate serial:       0198D4E06B57ABB7A0A7D8B02C8EBDC3A3A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mJAZfhrTPmEjex9q4ak24bBXhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft
Manifest number:          0238
Signing time:             Sat 23 Aug 2025 03:02:13 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:13 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:13 +0000
Files and hashes:         1: 8mJAZfhrTPmEjex9q4ak24bBXhE.crl (hash: BIY2ga+6FZvpp1oRSPdqsBuYHik31h1Su2JTQUUyWrE=)
                          2: cD-tw650Z_Y6Vmxx9pyza1DBukk.roa (hash: wcc3gJVDDM85KdHRToySGGF6W2lO6V1fBEScrl4XQJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8mJAZfhrTPmEjex9q4ak24bBXhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:6b:57:ab:b7:a0:a7:d8:b0:2c:8e:bd:c3:a3:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2624065f86b4cf9848dec7dab86a4db86c15e11
        Validity
            Not Before: Aug 23 03:02:13 2025 GMT
            Not After : Aug 24 03:02:13 2025 GMT
        Subject: CN=3e6118a333173e49f653f1c1f896096f6f1199f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d3:52:08:d4:53:30:7e:48:83:e0:ab:0b:7a:
                    ed:f9:89:ec:51:48:fc:1b:28:33:e7:2b:cb:f9:d4:
                    cc:e1:1e:f1:34:e5:fe:e3:15:8d:fc:55:4a:40:d7:
                    fa:45:02:ac:d4:1d:7e:3f:1a:12:b6:73:b4:47:bc:
                    15:78:7c:da:71:77:ee:75:33:1c:2e:71:e7:d2:72:
                    f4:48:b1:82:3b:a4:89:5c:fb:0a:92:12:3f:fb:f1:
                    bb:6d:ab:8c:43:5b:38:6a:fe:c1:04:dc:9d:fe:49:
                    7a:eb:1a:21:8b:48:9d:7e:7c:10:4d:95:82:de:b0:
                    eb:3d:c8:03:37:37:d0:52:ae:7d:40:cf:4c:d0:f2:
                    40:d1:0a:ce:5b:e5:3a:f9:bd:f6:da:66:d4:8b:37:
                    c5:7b:c9:5c:8a:d3:ca:54:76:94:08:38:c2:28:95:
                    87:4d:8f:26:84:33:cb:ec:21:85:71:d8:11:fa:4b:
                    4b:33:7a:0c:bd:e7:db:0d:97:87:7c:8f:90:cd:58:
                    ef:35:a1:41:55:1c:6b:b2:b3:01:83:41:d5:a9:71:
                    cf:c6:3b:c2:51:37:ae:b6:96:76:5d:13:c8:de:d8:
                    f9:0c:bf:75:23:6a:d8:23:e5:b5:d6:0b:ac:af:b8:
                    57:f8:e6:72:1c:08:a4:be:49:c4:67:de:59:9a:e3:
                    ec:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:61:18:A3:33:17:3E:49:F6:53:F1:C1:F8:96:09:6F:6F:11:99:F9
            X509v3 Authority Key Identifier:
                keyid:F2:62:40:65:F8:6B:4C:F9:84:8D:EC:7D:AB:86:A4:DB:86:C1:5E:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mJAZfhrTPmEjex9q4ak24bBXhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:4f:f7:38:ad:09:11:fd:7d:2c:c7:d5:f5:9c:16:fb:c2:30:
         b7:f8:d1:24:1c:17:39:cb:8b:03:6a:6c:54:6a:0e:93:a8:09:
         c4:a0:9b:0a:b5:a6:e6:cd:b5:26:8c:5e:be:a8:ff:97:da:23:
         35:98:d3:d8:37:50:33:cd:06:eb:41:ca:b2:bd:61:da:5d:5c:
         29:5a:aa:eb:47:50:1d:18:d3:ff:8a:c0:41:36:f4:67:ef:4f:
         f4:f1:6e:61:ce:65:88:0e:19:8a:2c:64:57:20:18:0d:0a:04:
         78:68:59:fb:94:ec:41:63:4f:0c:d3:bb:31:12:79:ec:ce:c8:
         70:80:19:cd:10:41:61:b6:7d:9d:78:87:5d:24:b2:68:7a:9f:
         3b:f9:e1:e3:4f:da:cb:48:ae:f6:d3:fb:35:c2:bc:2a:db:47:
         f9:fa:3e:0b:eb:c0:78:15:e9:f6:93:d9:85:f1:99:27:d6:4e:
         77:90:6f:ae:48:db:1c:95:7f:28:38:73:cd:90:62:6f:0c:46:
         0e:42:23:62:12:07:56:cd:6c:1c:e8:e2:ac:53:bc:b7:ab:5e:
         19:63:de:57:18:05:3b:ec:26:61:89:49:b3:d3:36:38:00:a8:
         c9:70:6e:0b:b0:39:f3:06:55:bc:45:26:3f:9f:21:fc:04:3c:
         39:fd:d0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:28:21 2025 by rpki-client