Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
File:                     k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft (raw, json)
Hash identifier:          SURW9060C6u6VNS5FmCN1MQKVB6YktetwpLcCcBvNrs=
Subject key identifier:   39:28:21:8D:1F:20:4E:78:F5:BA:FF:FE:67:BC:13:9A:95:78:9F:AF
Authority key identifier: 93:EF:2E:43:3D:00:A2:53:C9:9A:45:04:85:07:94:43:85:45:7C:F0
Certificate issuer:       /CN=93ef2e433d00a253c99a45048507944385457cf0
Certificate serial:       0198D5BC224B8D9ECEA282EE9E6151940582
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
Manifest number:          0A87
Signing time:             Sat 23 Aug 2025 07:02:13 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:13 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:13 +0000
Files and hashes:         1: 1-s_qFSQKBRG1ihqBmhzdBKCiJNM.roa (hash: LshraZqBwrj50k+MVV5n8/UzMU3Sq3fCYs5NyUMMWNA=)
                          2: k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl (hash: tT7XKBi80y6+9LV0p1KIDXl71JCpg/B7xjXnRN5Apqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:22:4b:8d:9e:ce:a2:82:ee:9e:61:51:94:05:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93ef2e433d00a253c99a45048507944385457cf0
        Validity
            Not Before: Aug 23 07:02:13 2025 GMT
            Not After : Aug 24 07:02:13 2025 GMT
        Subject: CN=3928218d1f204e78f5bafffe67bc139a95789faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bf:9d:5e:0c:ee:8d:93:b8:cf:f4:f5:83:50:
                    ac:61:b6:a8:67:43:c1:6f:b0:61:c2:eb:71:62:e3:
                    cb:1b:8a:11:99:5e:b8:71:84:25:ed:6b:39:e6:3f:
                    10:37:58:ce:21:93:74:e9:d7:90:7b:14:d4:02:02:
                    39:57:51:83:4b:b5:1a:82:f4:9a:9b:cf:bf:98:c4:
                    16:a9:34:0a:4d:aa:87:32:98:ee:d1:b4:60:69:03:
                    09:1c:3b:43:f6:7d:8f:f2:32:d2:4c:ef:db:fc:4f:
                    d7:05:11:af:11:e1:cf:08:a8:e6:0b:c6:3c:d3:4b:
                    05:87:74:c6:1d:9d:75:35:4d:74:de:37:94:93:00:
                    22:ef:2a:48:14:78:8b:d5:89:0d:6c:8a:c7:0b:09:
                    76:78:4e:cc:f0:8e:9c:67:f8:17:da:75:c2:db:48:
                    d2:82:d9:89:a8:1a:56:a8:39:ad:cc:97:1e:0f:3a:
                    ca:3d:ff:08:d4:15:74:29:d8:d6:46:1d:4b:32:b0:
                    3d:88:05:c1:68:e0:a4:d0:5b:2b:7a:ce:7d:fc:6b:
                    18:b4:ac:59:ea:2a:7d:c9:60:0d:74:80:7c:f0:b4:
                    72:7d:b2:ff:2f:ae:1d:c6:71:a0:ee:b9:ca:92:17:
                    63:39:02:a6:d0:37:99:3d:45:ee:19:81:88:63:34:
                    9b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:28:21:8D:1F:20:4E:78:F5:BA:FF:FE:67:BC:13:9A:95:78:9F:AF
            X509v3 Authority Key Identifier:
                keyid:93:EF:2E:43:3D:00:A2:53:C9:9A:45:04:85:07:94:43:85:45:7C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:36:bc:17:55:43:95:10:e1:70:3c:4b:a7:bc:d6:75:75:7f:
         23:3e:3e:36:e3:b0:7b:8a:56:b0:ee:d9:ed:70:09:3b:73:25:
         33:a3:d2:de:df:2d:3d:dc:95:4c:2d:bb:08:45:c4:f0:36:08:
         ce:ff:2e:1e:7e:27:b7:c3:d8:7f:5e:35:74:fe:bf:10:78:b3:
         10:47:16:b1:22:2f:7c:e3:fd:f7:6e:dd:1e:11:c6:f0:30:70:
         c0:c9:29:1b:da:35:af:b7:11:78:bc:c8:4d:3b:d6:9a:f1:77:
         cf:d8:97:43:8a:7e:c0:a2:55:36:63:31:59:d6:e9:0f:bd:b2:
         ba:8b:d9:2b:03:fd:a0:46:ea:56:5a:98:3f:ef:d0:ac:32:fa:
         d2:69:b2:2a:e4:8d:5a:40:0d:c4:3b:86:a5:c0:3d:b1:93:ed:
         d0:b2:a1:ea:23:d9:6b:28:68:0b:db:4e:7d:06:02:1b:83:3d:
         b5:c3:1a:b6:74:45:e2:f9:d3:09:b7:43:10:e6:c8:f8:96:b4:
         0b:70:62:d3:cb:64:cd:7e:4c:6b:3d:09:f6:e1:5b:5c:bf:f1:
         16:14:44:b0:cc:c6:ed:51:ae:57:b7:8b:8e:d9:05:96:bf:12:
         48:f8:e8:b9:08:65:c3:4a:f5:32:b8:f8:d0:d9:20:f9:15:43:
         c2:30:f8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:39 2025 by rpki-client