Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
File:                     2YhPkq_rWP-rJkh7IyBf4NXaip8.mft (raw, json)
Hash identifier:          B83luUYNJsbSIIhpI0E9Z/Ksi0k/Wl9wGZnkLy/R97U=
Subject key identifier:   C8:5C:D2:C6:C2:02:B4:74:80:83:3A:1E:80:81:18:CC:D2:37:91:B2
Authority key identifier: D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
Certificate issuer:       /CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Certificate serial:       0198D5F16BD018EFF25A4A2FFE2FDC3FE66C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
Manifest number:          0F2D
Signing time:             Sat 23 Aug 2025 08:00:25 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:25 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:25 +0000
Files and hashes:         1: 2YhPkq_rWP-rJkh7IyBf4NXaip8.crl (hash: N4znd3s1XwIYF1g84KIgRVGB6pgIL+BPLt30DbgJCV4=)
                          2: CYLgyzMsYi7lgn_Q5Gp7OFp3YLo.roa (hash: KpU4uZLnHzH71nuh4tR8vuJUqVXwmRrydoVr8tnF92Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:6b:d0:18:ef:f2:5a:4a:2f:fe:2f:dc:3f:e6:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
        Validity
            Not Before: Aug 23 08:00:25 2025 GMT
            Not After : Aug 24 08:00:25 2025 GMT
        Subject: CN=c85cd2c6c202b47480833a1e808118ccd23791b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0d:da:22:13:25:9c:31:27:00:6b:47:a7:83:
                    5a:15:02:b1:74:c0:76:af:d3:d6:cc:bf:9d:bf:3c:
                    ad:44:48:3f:78:f6:4e:44:7c:ef:42:6c:b7:da:ec:
                    e8:14:c6:c7:47:51:1e:56:ad:04:3b:ea:32:d1:32:
                    b7:c8:bd:6d:99:64:ad:35:69:15:26:85:ab:06:c5:
                    f5:84:c9:45:2a:d4:67:29:69:52:08:9f:d3:a3:44:
                    15:8a:d9:18:97:db:a3:d7:16:a4:b9:72:fb:74:c2:
                    01:d7:f6:1d:af:15:4b:f2:01:19:ec:ee:a2:94:65:
                    1a:ba:8e:03:cc:fd:d3:31:db:5c:57:49:8f:fb:5a:
                    38:cf:9b:88:db:34:b9:f0:ac:5e:d5:e9:5d:28:91:
                    c8:df:fb:42:64:ba:fe:88:68:0e:b9:2d:ba:cc:c1:
                    ae:23:be:f1:b6:6d:51:94:ad:8c:30:69:c8:29:f9:
                    0a:6f:99:fe:9c:55:2f:f2:87:34:36:d0:49:1d:e4:
                    0c:eb:d0:96:86:a8:20:ab:78:a9:ed:4d:2c:18:5c:
                    df:0f:59:50:32:86:6a:a6:fa:4e:50:af:2e:56:3e:
                    14:0e:3d:58:64:82:19:8a:d8:fa:fc:ad:2d:1c:e1:
                    69:4e:7e:f3:4d:4a:fa:fe:38:bd:d5:dc:dc:81:ef:
                    7b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:5C:D2:C6:C2:02:B4:74:80:83:3A:1E:80:81:18:CC:D2:37:91:B2
            X509v3 Authority Key Identifier:
                keyid:D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:a8:30:eb:fa:08:e4:b9:24:c2:7d:4a:91:6a:68:ae:43:1e:
         fc:8c:06:86:b5:5c:db:c2:33:93:b5:94:12:a5:aa:3b:f1:59:
         9c:46:90:6b:97:99:72:4b:2f:fa:f8:cd:13:bd:8a:38:39:b5:
         0f:b7:13:b0:d4:36:ba:fd:a5:3f:5d:08:3a:20:e5:f8:6a:1b:
         c1:f4:47:91:96:b9:be:f0:b9:9b:9f:cb:42:f2:04:24:9e:08:
         63:17:cd:94:af:53:f7:bf:f6:9f:9f:5b:fa:fb:08:e5:f3:b3:
         23:9a:40:6d:04:33:43:bb:f5:9f:e5:1d:26:c3:c5:28:f5:f9:
         9c:52:61:e0:2d:95:e9:25:f4:62:0f:6d:77:d2:ee:8d:26:17:
         6a:22:9a:0d:b4:f2:b9:24:17:9c:58:dc:3d:15:36:a4:bc:5e:
         0a:fd:04:4f:10:99:7f:85:20:2d:6a:69:7b:e7:81:cf:dc:de:
         1c:35:98:7a:90:f2:0c:19:bb:1b:8d:fa:9a:66:c9:f4:79:ea:
         96:70:d0:b0:01:23:d1:16:80:a5:61:83:fb:e2:b6:c7:88:9e:
         d3:b9:2c:67:74:da:35:ed:51:81:24:85:48:af:c0:11:2d:68:
         7f:9b:f7:70:4d:8e:d8:c7:55:ec:52:4a:84:54:f8:52:b2:16:
         1c:f9:63:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:20 2025 by rpki-client