Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft
File:                     8EoYcV28tIU2j6_pm4riyfBK92M.mft (raw, json)
Hash identifier:          HRazDrRVDmUt9AjkZgG+pdM6OdOYbbRT26qiCBs9EgA=
Subject key identifier:   26:26:A1:F3:40:7B:8F:35:24:A3:48:FA:D7:02:E3:93:77:6E:76:6D
Authority key identifier: F0:4A:18:71:5D:BC:B4:85:36:8F:AF:E9:9B:8A:E2:C9:F0:4A:F7:63
Certificate issuer:       /CN=f04a18715dbcb485368fafe99b8ae2c9f04af763
Certificate serial:       0198D472D95A5156E03820DD6048FDE97AAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8EoYcV28tIU2j6_pm4riyfBK92M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft
Manifest number:          0DA9
Signing time:             Sat 23 Aug 2025 01:02:33 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:33 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:33 +0000
Files and hashes:         1: 8EoYcV28tIU2j6_pm4riyfBK92M.crl (hash: qCrPRFdQZwQNwWE4EOXuZO6FtwOJ5wSBBm1/8T2CrKs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8EoYcV28tIU2j6_pm4riyfBK92M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:d9:5a:51:56:e0:38:20:dd:60:48:fd:e9:7a:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04a18715dbcb485368fafe99b8ae2c9f04af763
        Validity
            Not Before: Aug 23 01:02:33 2025 GMT
            Not After : Aug 24 01:02:33 2025 GMT
        Subject: CN=2626a1f3407b8f3524a348fad702e393776e766d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:01:5b:0b:88:2c:4a:fc:c8:c0:e2:bc:5c:d9:
                    b4:8a:ea:16:08:da:03:fc:f1:67:07:27:d5:33:0a:
                    39:db:6e:90:17:0a:39:7e:9b:ba:4f:83:55:30:90:
                    ff:bb:b8:6c:c2:c9:95:c2:9d:09:6b:9e:f4:e0:a6:
                    28:b5:5f:60:ea:77:93:fb:01:3d:70:24:49:28:c4:
                    9b:ba:60:f6:3d:95:fb:2f:d3:a7:df:81:7a:ad:3a:
                    7c:f3:b9:ea:27:ba:83:8f:bf:d3:9c:62:03:53:fe:
                    ce:57:5d:e0:4f:d1:fa:7f:44:84:9c:6f:ae:f3:07:
                    05:e1:ee:0a:6f:60:da:da:e4:16:a0:c0:f5:dd:00:
                    f3:03:a7:51:19:b6:4f:76:8b:c0:46:6f:61:5a:38:
                    ce:ec:00:d7:71:c1:9c:7c:9e:6f:25:bb:f3:1c:3b:
                    46:b8:e6:28:47:cc:9c:1c:d1:f1:c2:5b:18:94:6b:
                    fc:d4:e8:e6:dc:00:7e:14:75:0e:17:f9:24:f5:25:
                    be:40:c8:ac:29:90:ef:95:86:2b:86:dd:7b:bf:30:
                    ae:43:68:20:f2:46:69:4c:ec:bd:33:45:98:b4:f5:
                    05:f3:9c:fd:13:2d:22:9d:42:79:07:43:0c:a3:92:
                    79:9e:ca:b9:cf:6b:a2:c7:97:75:ac:61:c8:6a:1d:
                    fd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:26:A1:F3:40:7B:8F:35:24:A3:48:FA:D7:02:E3:93:77:6E:76:6D
            X509v3 Authority Key Identifier:
                keyid:F0:4A:18:71:5D:BC:B4:85:36:8F:AF:E9:9B:8A:E2:C9:F0:4A:F7:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EoYcV28tIU2j6_pm4riyfBK92M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:4a:84:1e:4b:4b:41:80:19:1b:6c:ef:db:ee:a1:7e:10:1d:
         49:ee:fe:5f:bf:a5:ce:4c:e3:c1:87:8a:f5:5f:5f:e5:67:83:
         83:0f:39:ff:4b:31:42:f6:8e:da:ec:ab:e9:46:56:31:b7:4a:
         c0:7d:8c:ac:cb:aa:f5:58:ae:86:1a:f6:6f:14:d3:66:52:c2:
         af:39:39:e5:2f:5f:f9:0b:34:d6:14:8c:90:1f:31:83:22:43:
         7c:a5:08:c0:75:2a:a8:d8:15:ec:19:3b:3e:81:5b:c4:46:f6:
         8c:31:36:2e:93:b8:c2:ae:1f:c3:5c:30:0a:9d:1e:8d:92:8b:
         54:61:98:7a:d0:6f:8f:85:ac:df:d1:dc:10:9b:12:98:e6:1c:
         90:a7:82:00:00:82:74:1c:69:ff:e4:0b:c2:33:e4:1f:77:f6:
         0b:68:ed:a0:64:38:46:d7:d3:be:31:ae:d3:d9:d3:af:a5:1a:
         2a:14:5d:a2:b9:06:79:94:da:30:6c:d2:40:e8:03:6b:31:b0:
         d8:2d:e5:71:29:61:01:a3:45:11:95:08:74:a0:a4:2b:3e:d7:
         a2:cc:80:41:05:ce:7f:5a:a5:bb:58:6b:12:58:e3:13:a3:49:
         eb:01:a7:d5:65:10:18:da:e9:0b:66:b1:be:d7:6e:d5:8e:c6:
         ea:90:2a:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUctlaUVbgOCDdYEj96XqrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGExODcxNWRiY2I0ODUzNjhmYWZlOTliOGFlMmM5ZjA0
YWY3NjMwHhcNMjUwODIzMDEwMjMzWhcNMjUwODI0MDEwMjMzWjAzMTEwLwYDVQQD
EygyNjI2YTFmMzQwN2I4ZjM1MjRhMzQ4ZmFkNzAyZTM5Mzc3NmU3NjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwFbC4gsSvzIwOK8XNm0iuoWCNoD
/PFnByfVMwo5226QFwo5fpu6T4NVMJD/u7hswsmVwp0Ja5704KYotV9g6neT+wE9
cCRJKMSbumD2PZX7L9On34F6rTp887nqJ7qDj7/TnGIDU/7OV13gT9H6f0SEnG+u
8wcF4e4Kb2Da2uQWoMD13QDzA6dRGbZPdovARm9hWjjO7ADXccGcfJ5vJbvzHDtG
uOYoR8ycHNHxwlsYlGv81Ojm3AB+FHUOF/kk9SW+QMisKZDvlYYrht17vzCuQ2gg
8kZpTOy9M0WYtPUF85z9Ey0inUJ5B0MMo5J5nsq5z2uix5d1rGHIah39MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYmofNAe481JKNI+tcC45N3bnZtMB8GA1UdIwQY
MBaAFPBKGHFdvLSFNo+v6ZuK4snwSvdjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVvWWNWMjh0SVUyajZfcG00cml5ZkJLOTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wNDJkOGItNjUxMC00N2MyLTk1YTIt
MGY0MTAwN2E0Y2UwLzEvOEVvWWNWMjh0SVUyajZfcG00cml5ZkJLOTJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8wNDJkOGItNjUxMC00N2MyLTk1YTItMGY0MTAwN2E0Y2Uw
LzEvOEVvWWNWMjh0SVUyajZfcG00cml5ZkJLOTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhUqEHktL
QYAZG2zv2+6hfhAdSe7+X7+lzkzjwYeK9V9f5WeDgw85/0sxQvaO2uyr6UZWMbdK
wH2MrMuq9Viuhhr2bxTTZlLCrzk55S9f+Qs01hSMkB8xgyJDfKUIwHUqqNgV7Bk7
PoFbxEb2jDE2LpO4wq4fw1wwCp0ejZKLVGGYetBvj4Ws39HcEJsSmOYckKeCAACC
dBxp/+QLwjPkH3f2C2jtoGQ4RtfTvjGu09nTr6UaKhRdorkGeZTaMGzSQOgDazGw
2C3lcSlhAaNFEZUIdKCkKz7XosyAQQXOf1qlu1hrEljjE6NJ6wGn1WUQGNrpC2ax
vtdu1Y7G6pAqjQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:57 2025 by rpki-client