Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
File:                     8v_48bgcLGFPw-lOsXy6CUAhGgE.mft (raw, json)
Hash identifier:          3e9FmggWUhGmt36Mtn9sOGj356dUwENTzuCySBPGU4E=
Subject key identifier:   92:CA:E7:88:45:1D:71:19:FF:3F:72:13:23:CF:96:F2:0C:65:72:14
Authority key identifier: F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01
Certificate issuer:       /CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
Certificate serial:       0199FC59151B036F5520CC4C35071657BA2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 12:02:00 +0000
Manifest this update:     Sun 19 Oct 2025 12:02:00 +0000
Manifest next update:     Mon 20 Oct 2025 12:02:00 +0000
Files and hashes:         1: 8v_48bgcLGFPw-lOsXy6CUAhGgE.crl (hash: 6USptpaz2l3O6yw4x6Oyy2qsQuWYJ6X4GZ8xjCh8lvQ=)
                          2: vf_PL7Z26am-bUWHqusGVLE57ns.roa (hash: lq/qQHwmZ7jgnqMZo6s1jASjE57LJ9Te+YbA+3H42GE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:59:15:1b:03:6f:55:20:cc:4c:35:07:16:57:ba:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
        Validity
            Not Before: Oct 19 12:02:00 2025 GMT
            Not After : Oct 20 12:02:00 2025 GMT
        Subject: CN=92cae788451d7119ff3f721323cf96f20c657214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4f:10:82:20:1b:9f:3f:49:5b:6c:8b:25:e2:
                    2c:7a:20:04:52:af:d9:cb:01:bb:67:96:57:8b:9c:
                    6a:ab:53:ec:b4:90:18:4f:ba:9b:4a:ba:e3:8f:fe:
                    9b:ea:64:e8:f7:48:fd:e4:b6:40:04:c6:8f:9f:a8:
                    d5:dc:f4:fa:86:e6:d1:ae:66:39:67:de:33:1a:07:
                    25:36:d7:38:9f:51:6e:56:30:6a:60:06:2b:cb:6b:
                    0e:52:60:1e:c9:eb:f6:79:bb:b5:6a:83:3c:e6:0e:
                    b7:77:69:bf:3a:64:ed:a1:ca:6a:b1:36:d2:ca:9c:
                    73:ee:d9:c8:8a:70:dc:c4:b8:98:02:92:57:a7:7a:
                    d6:bb:85:05:29:50:8f:a7:b5:be:ba:93:e7:cd:9c:
                    e8:ac:b2:7f:c3:4d:5d:d1:87:15:bc:bf:b3:3d:85:
                    5f:36:21:92:ff:dc:4c:31:4b:f3:3d:bc:93:bd:69:
                    f5:93:ba:0d:0a:b7:43:b0:23:bd:c7:99:ca:ff:65:
                    25:d0:26:2b:b1:d7:78:a8:fe:0d:13:ef:26:ce:c3:
                    1c:09:2b:3b:c5:2e:08:13:fb:df:21:b6:d8:48:a1:
                    f4:cd:4a:96:2c:e7:19:36:8e:68:d0:3b:db:3a:e3:
                    ea:e8:fb:59:e6:48:ff:8e:6f:e7:cf:df:6f:44:1b:
                    68:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CA:E7:88:45:1D:71:19:FF:3F:72:13:23:CF:96:F2:0C:65:72:14
            X509v3 Authority Key Identifier:
                keyid:F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:f0:2b:9f:7c:d5:a3:cc:35:76:98:a7:47:f7:e4:ea:7d:ca:
         2d:b9:6a:c1:b4:4a:95:54:c8:1c:85:f1:28:f0:ef:f5:84:71:
         7b:e7:fb:e0:e8:d0:05:1f:ad:00:b4:da:da:c8:e9:c4:59:50:
         b0:4d:c5:b7:f4:11:e9:52:64:0f:60:2f:59:1d:84:17:77:1c:
         c9:c0:7b:c3:18:dd:10:92:f5:45:66:39:3d:ad:74:d2:04:2b:
         ab:3a:47:11:05:35:fb:bb:f4:18:a4:d2:6d:b0:12:75:12:b3:
         32:45:0e:19:7b:8b:3d:60:78:38:c8:dc:05:05:d9:f3:97:a0:
         33:dc:21:68:08:3b:08:e6:4d:c1:fe:3a:c6:7b:67:12:2f:b2:
         56:6f:57:c4:11:70:69:5d:92:be:6b:45:a0:73:36:6a:03:ad:
         0a:30:a8:02:37:59:98:95:67:fa:b7:3d:be:66:0a:49:41:96:
         15:72:0d:f9:68:27:ef:1c:d6:f7:99:21:b7:78:91:20:b8:45:
         53:6b:a8:89:c2:94:8c:37:62:19:b5:01:56:a4:7c:2a:77:38:
         c5:1f:b2:08:54:47:8f:ce:c8:d6:dc:23:3e:0f:06:89:95:9b:
         e1:03:de:83:0d:81:e3:89:fd:4d:76:49:09:87:aa:b2:60:14:
         a2:fa:b7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:32 2025 by rpki-client