Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
File:                     k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft (raw, json)
Hash identifier:          MOaagbvlkqFZiTfaeJMwmh27bsZBZ7ZpJfZTdujq5+w=
Subject key identifier:   C4:C8:0A:24:55:D6:26:51:B2:E6:D2:A3:46:01:37:A5:0D:19:41:00
Authority key identifier: 93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9
Certificate issuer:       /CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9
Certificate serial:       0198D5F12B2C4280D1E0E68C37ACCAC544EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
Manifest number:          0D2A
Signing time:             Sat 23 Aug 2025 08:00:08 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:08 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:08 +0000
Files and hashes:         1: ilnYefv9qH3PNjv85ldcxCld-ls.roa (hash: SaAltYqG0WS/0wCUjq7LbhKFvPJZWUqyuxA3IK3kA+I=)
                          2: k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl (hash: SkFgjxftxuZeqyBwYSSaMzNxn2RL2/FR8vq4w8rWwNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 08:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:2b:2c:42:80:d1:e0:e6:8c:37:ac:ca:c5:44:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9
        Validity
            Not Before: Aug 23 08:00:08 2025 GMT
            Not After : Aug 24 08:00:08 2025 GMT
        Subject: CN=c4c80a2455d62651b2e6d2a3460137a50d194100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:fb:a7:f2:e5:fe:e2:5c:60:d5:4e:3b:58:0e:
                    bf:5b:c8:e2:ae:6b:70:47:95:2c:71:52:7d:f5:05:
                    a1:b2:4f:31:25:34:d4:9d:d8:00:a5:98:6f:e1:4c:
                    fa:65:8e:86:33:fe:76:77:2f:86:63:c7:a3:ac:b8:
                    da:32:e8:f1:03:d8:1d:e6:09:a3:87:ad:2e:3e:e6:
                    6f:8f:cb:63:3c:f7:c9:b5:0d:e5:62:c7:4c:1d:09:
                    31:7b:a8:d4:e2:33:5f:53:0b:aa:ad:27:86:13:d7:
                    4c:ae:b4:a1:7a:5d:14:a1:8a:ad:06:84:5f:5b:9a:
                    53:72:6e:32:e4:a6:70:bd:5c:49:de:46:dd:c3:d5:
                    96:8c:15:35:f2:8d:4e:09:04:29:cc:aa:c3:0b:8a:
                    a2:ea:96:a7:7b:f1:af:3f:1a:37:c2:3d:ff:52:a3:
                    9d:07:53:a2:fd:e0:83:37:c2:52:76:1d:91:f2:49:
                    c2:bc:9c:07:d3:40:ba:a3:45:d5:77:cf:ce:d2:9b:
                    d6:4f:19:f6:e9:ed:6e:9a:4c:d5:b2:75:ea:6f:cb:
                    78:34:6f:eb:70:4c:03:4f:b2:67:3b:15:2d:39:41:
                    4b:9a:7e:b2:b8:25:de:22:c1:fc:62:3b:01:6e:14:
                    b9:cf:38:57:c0:66:61:04:cf:ed:d7:82:e3:03:96:
                    2d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C8:0A:24:55:D6:26:51:B2:E6:D2:A3:46:01:37:A5:0D:19:41:00
            X509v3 Authority Key Identifier:
                keyid:93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:5e:7a:bb:b2:ff:49:32:03:14:66:fa:08:00:bd:fb:e1:52:
         b9:35:3b:65:1c:79:34:f6:8f:78:88:08:78:2b:af:d7:cc:c3:
         7d:d5:da:2c:5c:57:a4:f4:4c:6a:d5:42:2a:fd:bb:09:27:9f:
         c3:78:90:c1:db:f9:55:1d:2d:1d:95:c6:ee:8a:46:2b:fd:19:
         94:04:5d:c5:2a:4c:30:bd:b2:c3:dd:6e:e9:f7:87:c1:95:77:
         02:d2:59:cc:3e:7e:45:63:e1:ce:c7:1a:b3:27:01:86:49:c0:
         44:98:43:6e:bf:09:a1:90:19:43:24:a7:32:c1:09:fd:c1:5c:
         6f:94:b5:29:2b:51:7e:f5:ce:c4:e0:b7:58:4d:36:62:a5:87:
         2f:56:67:c2:19:5e:32:ea:ec:79:b2:fc:99:48:02:58:34:8b:
         15:43:f3:2e:62:9e:4f:2a:76:54:b7:d2:b1:97:94:39:b7:04:
         56:bd:e1:43:34:67:ee:a3:4c:ac:9c:d8:ee:0a:1f:b5:20:07:
         6d:77:5a:32:02:90:fc:68:c0:fe:8a:3b:07:af:3f:7d:a7:2d:
         e5:76:ff:3d:bb:a2:d1:af:51:8b:9e:c6:05:3b:cc:f8:8c:b8:
         8f:5e:e2:83:42:d4:08:b0:f0:06:e8:3a:7a:db:28:2e:6d:94:
         c7:bf:f8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:30:45 2025 by rpki-client