Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
File:                     8_su-07B6bb2xtC6JgdHqcPgrco.mft (raw, json)
Hash identifier:          G3eS/riwTVeMOvw4SXwfZn4e0YFdeCL5a8xCRFMZDfU=
Subject key identifier:   D5:CB:C1:F1:66:EA:93:8C:4B:14:1C:F7:7B:1F:57:9F:B2:0C:95:F1
Authority key identifier: F3:FB:2E:FB:4E:C1:E9:B6:F6:C6:D0:BA:26:07:47:A9:C3:E0:AD:CA
Certificate issuer:       /CN=f3fb2efb4ec1e9b6f6c6d0ba260747a9c3e0adca
Certificate serial:       0198D4A7E6DA3EF9C8E15D9B705469FD2C6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
Manifest number:          0424
Signing time:             Sat 23 Aug 2025 02:00:29 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:29 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:29 +0000
Files and hashes:         1: 8_su-07B6bb2xtC6JgdHqcPgrco.crl (hash: K4UxHRZFk3+HmTs4eliutfEDeIT7at4CB0aAKGvSDRE=)
                          2: ZEIkHOpAjx_99PsiN5R21UlMSKc.roa (hash: vTffovFaT4NCjWWk8Fwv+MgUP11pdffCPeTnPWoxFwE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:e6:da:3e:f9:c8:e1:5d:9b:70:54:69:fd:2c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3fb2efb4ec1e9b6f6c6d0ba260747a9c3e0adca
        Validity
            Not Before: Aug 23 02:00:29 2025 GMT
            Not After : Aug 24 02:00:29 2025 GMT
        Subject: CN=d5cbc1f166ea938c4b141cf77b1f579fb20c95f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fd:c5:40:d7:6d:8c:c9:f1:37:94:1c:84:d9:
                    03:14:c1:43:e3:5e:7c:58:83:d2:f4:a0:4f:43:f1:
                    c7:00:b9:94:dd:6d:85:76:78:a8:73:5c:cf:a8:88:
                    aa:0e:91:29:64:96:af:f0:33:25:fd:24:cf:80:22:
                    42:78:af:32:37:14:64:da:27:c1:0d:8d:2a:c3:b1:
                    db:f1:18:bb:d1:12:b3:88:4c:27:14:77:ac:73:0b:
                    86:d7:8f:32:01:80:f4:f4:f5:3e:45:ae:03:48:0f:
                    9d:0d:1c:cf:e0:13:80:46:80:9c:9d:43:4f:bf:ca:
                    54:7c:6a:df:4c:5c:fa:4e:2c:55:27:f3:3a:83:25:
                    ee:2c:5e:62:8e:00:f9:3d:74:23:ba:8a:53:45:ac:
                    04:d8:e4:2f:a0:4a:04:86:4d:d5:64:95:20:65:82:
                    aa:57:9a:d5:b7:d6:f3:d8:84:07:2f:6e:a6:36:61:
                    3d:cc:6b:77:ec:45:15:a7:79:9c:2b:27:83:f9:76:
                    dd:b2:e4:cb:9b:2f:ac:3d:94:a6:7e:82:34:52:a6:
                    0c:e0:2a:13:3a:84:77:65:3b:9d:c8:1a:ac:7d:b5:
                    7a:c8:15:4d:3c:9a:e1:40:ab:f8:8b:d3:2b:81:b4:
                    25:db:3c:3e:f4:19:cc:aa:cf:0c:95:7b:b9:9a:e7:
                    92:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:CB:C1:F1:66:EA:93:8C:4B:14:1C:F7:7B:1F:57:9F:B2:0C:95:F1
            X509v3 Authority Key Identifier:
                keyid:F3:FB:2E:FB:4E:C1:E9:B6:F6:C6:D0:BA:26:07:47:A9:C3:E0:AD:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:fc:20:a5:7b:2b:02:ce:a8:72:ea:47:a8:c2:3b:19:79:37:
         32:b3:ca:05:2c:ac:0e:d0:e5:ee:e9:93:0e:84:a6:0d:bb:9a:
         b7:ab:97:5c:c5:ba:a1:70:a1:65:f3:cf:bd:56:53:96:fd:5c:
         cb:34:60:85:6f:14:2f:67:30:01:23:82:84:10:32:e7:78:a3:
         a5:ac:8d:bf:07:76:08:d5:f3:68:3e:6b:34:71:9e:02:e5:fa:
         b6:76:10:fa:34:0b:b2:2c:75:1c:3b:c7:4a:24:dd:6f:36:a9:
         a5:09:5c:a0:27:25:c3:e9:e8:f5:7a:a7:3d:ac:df:72:f5:87:
         fd:69:8c:a7:f6:34:37:5d:fb:01:31:2b:26:20:51:60:3e:d4:
         09:68:a6:7d:4b:1a:91:c1:85:f1:c7:78:ec:06:eb:50:0c:fa:
         a7:97:79:f5:93:4b:39:b4:e9:62:4c:f2:d9:41:6d:ab:a9:25:
         1b:96:e8:70:b9:fb:97:a2:4c:1f:79:4a:22:b6:0b:fd:33:48:
         71:34:17:4e:71:fc:5d:70:89:6e:1f:91:d4:05:e6:ad:eb:95:
         30:25:7a:16:b1:cf:83:13:d4:98:81:8a:3b:c7:64:ce:05:3f:
         37:64:a2:11:5d:e2:21:96:35:40:f0:9a:42:61:d7:20:9b:1c:
         68:da:9e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:51 2025 by rpki-client