Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
File:                     8NREvH1TNNoU3oBRcrJiXpgwdj8.mft (raw, json)
Hash identifier:          n0inDYACVA4T/29rFpKBQzHwErsnPQtIchYjiFd4Mh4=
Subject key identifier:   86:9D:94:B0:5D:7F:7B:A4:C6:4A:88:06:92:E1:3E:61:26:82:AF:8A
Authority key identifier: F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
Certificate issuer:       /CN=f0d444bc7d5334da14de805172b2625e9830763f
Certificate serial:       0198D583F584E435FED7012AF0AA7357AF7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
Manifest number:          05CA
Signing time:             Sat 23 Aug 2025 06:00:51 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:51 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:51 +0000
Files and hashes:         1: 8NREvH1TNNoU3oBRcrJiXpgwdj8.crl (hash: tFXpLam8GrFH8UJt4KZhJbHZyUx2TWef8lq9y0U+gFo=)
                          2: 8VhhkSiakyjyds2HL3KVl5SAjHk.roa (hash: XMxyFpkWV1CCq0kdHYWIMKgwA50BX4tfunpr2JyfxpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:f5:84:e4:35:fe:d7:01:2a:f0:aa:73:57:af:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0d444bc7d5334da14de805172b2625e9830763f
        Validity
            Not Before: Aug 23 06:00:51 2025 GMT
            Not After : Aug 24 06:00:51 2025 GMT
        Subject: CN=869d94b05d7f7ba4c64a880692e13e612682af8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0c:22:22:14:78:d4:f0:40:31:b6:9e:fd:6f:
                    52:49:3a:78:fe:54:fc:ea:e3:86:be:51:d2:82:cb:
                    c1:1d:72:f3:54:bc:48:6b:85:89:55:03:5c:0a:3c:
                    0b:9e:26:81:44:16:bf:ee:c9:8a:2f:3f:7f:cd:a5:
                    56:32:77:06:4c:75:60:11:f1:33:26:dc:d2:f5:f8:
                    34:eb:ee:e9:b1:0f:d4:21:66:cd:6d:9d:66:bd:db:
                    35:9a:cd:9a:2e:26:03:d0:fb:e8:3b:ea:62:96:8f:
                    4e:e1:b6:f0:39:2e:0f:5e:14:01:b9:2c:41:78:76:
                    72:4e:6a:de:ee:04:1e:1d:69:c2:44:55:11:3c:de:
                    ba:e1:2f:d6:f3:22:1b:ad:fe:5b:46:4a:6e:5a:95:
                    96:61:31:fc:e7:02:40:8a:d6:41:8b:de:dc:5c:26:
                    bb:49:14:6c:3d:3d:32:f0:c8:7e:42:ea:43:73:7b:
                    16:a6:a3:1b:74:1d:4c:72:b3:68:be:7c:84:49:e2:
                    c2:48:ef:e4:65:56:07:4e:7a:2d:d4:05:68:71:06:
                    49:41:c3:f8:28:bf:9c:ef:17:d3:d5:02:47:75:64:
                    3a:a1:1e:5a:ad:dd:f3:67:6d:bb:44:fb:63:20:0c:
                    aa:16:f3:7f:8c:71:c3:e2:76:04:5f:3e:8d:31:f1:
                    c7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:9D:94:B0:5D:7F:7B:A4:C6:4A:88:06:92:E1:3E:61:26:82:AF:8A
            X509v3 Authority Key Identifier:
                keyid:F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:5f:15:cf:62:1a:32:83:bf:93:4b:5a:c1:dc:ae:63:36:e9:
         07:b6:a6:12:b9:fe:46:33:e2:de:ff:c1:c5:c9:83:98:39:ba:
         26:c9:d8:24:d7:9e:13:fa:d3:03:5e:0f:6b:80:74:77:b4:75:
         5d:aa:33:a2:50:ad:a0:9e:b4:49:b9:13:55:8f:a0:39:1c:d8:
         72:ca:71:b8:b5:5a:86:c4:32:94:c9:f4:a0:c6:77:5a:eb:95:
         d3:b5:91:e5:fe:53:f9:b2:df:d9:50:10:9f:e8:03:42:19:e8:
         17:65:62:6d:eb:44:cc:60:e0:f3:d8:d4:af:f5:22:d0:b3:cc:
         56:6b:42:2d:2d:77:b0:cc:6a:59:f8:1a:e9:fc:2a:8c:07:1f:
         42:8c:fc:ff:92:74:d0:8d:44:90:76:71:52:ac:59:77:2a:8d:
         86:fd:e7:74:f9:76:47:01:11:9b:5b:cf:bb:88:d2:f3:c9:3d:
         d8:32:bd:78:b1:8d:5a:e9:67:83:90:7e:b8:fa:a3:01:7d:3f:
         d4:fa:b9:f0:3b:1b:f3:bd:b6:57:55:b2:b3:8b:eb:85:e8:61:
         9d:a2:32:d9:89:a4:be:f5:22:ee:ce:00:3f:a5:1c:4b:01:42:
         a8:f5:4d:ba:9e:dc:ab:a5:0a:fd:71:f7:b4:c9:f9:8c:ef:45:
         56:cb:2c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:58 2025 by rpki-client