Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
File:                     8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft (raw, json)
Hash identifier:          o1cGtVUUgqTcQ7EkocX0uDkjYNpvf66xfpX8U9hqbs0=
Subject key identifier:   F1:67:0F:AB:53:45:63:A6:C8:78:05:CF:49:BD:07:DA:A5:3C:3B:64
Authority key identifier: F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99
Certificate issuer:       /CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699
Certificate serial:       0198D583EF7707E613F6ECFBA62E29A111AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
Manifest number:          06E2
Signing time:             Sat 23 Aug 2025 06:00:50 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:50 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:50 +0000
Files and hashes:         1: 5lrGfq58aTW_pE055xCJWqbwHHI.roa (hash: HZ/ABKHtPjzdW+3khr3PKfbOq8CHBTNqQUp9BotDJOM=)
                          2: 8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl (hash: 3avL0x0fbDfnryu+01eapdhD4fIlHiluzPSmFDV+Z7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:ef:77:07:e6:13:f6:ec:fb:a6:2e:29:a1:11:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699
        Validity
            Not Before: Aug 23 06:00:50 2025 GMT
            Not After : Aug 24 06:00:50 2025 GMT
        Subject: CN=f1670fab534563a6c87805cf49bd07daa53c3b64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:76:b5:14:86:27:e0:06:18:d7:cf:bb:d7:65:
                    44:c6:56:3b:0b:50:71:0b:18:54:9b:ab:eb:26:cb:
                    f0:8d:8c:bf:b8:3c:c2:93:a8:53:f7:33:cd:81:d9:
                    e0:96:a7:5b:7b:71:dc:ce:b6:6b:6f:f1:e4:17:ff:
                    3a:24:53:cf:e5:68:c7:79:ff:85:cc:d3:d9:5d:22:
                    bc:4b:00:20:04:f4:43:ea:e7:05:75:c2:50:91:66:
                    6c:d8:02:f8:18:b3:99:f5:18:35:a6:01:ce:80:45:
                    cd:c6:6d:08:f4:7b:b2:b1:ad:46:a5:2a:3a:c1:86:
                    b8:e5:e7:02:a3:8e:a1:9e:a4:c2:8b:15:5a:61:78:
                    3c:08:f9:30:a8:5e:ba:85:83:eb:f0:31:21:4d:31:
                    d0:bf:91:ac:a2:ab:56:39:38:09:24:bb:38:19:3d:
                    90:c0:9c:b2:0f:a4:19:6e:6f:15:dd:0f:c8:8d:63:
                    5a:35:fc:5b:79:7c:d2:f5:9c:63:1d:8c:45:50:8b:
                    c4:7a:8c:92:33:53:6e:03:0f:98:59:e3:90:15:66:
                    c8:d1:9d:cd:ea:fb:90:a2:b3:37:13:7c:49:be:66:
                    76:f5:5e:c4:c1:0f:76:65:30:87:a6:04:2f:9c:38:
                    3a:b8:a4:12:72:9a:7f:10:b0:2f:2e:c9:c3:d0:e1:
                    1b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:67:0F:AB:53:45:63:A6:C8:78:05:CF:49:BD:07:DA:A5:3C:3B:64
            X509v3 Authority Key Identifier:
                keyid:F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:45:7a:ea:26:2d:05:da:56:d0:0d:7b:e7:c8:b8:b4:e1:e2:
         3d:a0:d5:4e:54:ba:a1:39:c0:5c:68:d1:43:fb:d8:2c:6c:3d:
         bd:72:d6:3c:b7:88:71:f2:d1:fc:d9:28:07:ac:80:3e:fb:d8:
         ae:81:b9:d9:e4:46:15:f2:8d:f8:db:80:98:2f:dd:85:61:02:
         7a:ee:2b:26:1d:27:71:7b:5c:c1:a1:e4:c1:da:fd:cf:ae:7f:
         e2:df:9f:1a:9e:6b:5b:df:76:05:82:a1:49:7c:ac:05:22:fc:
         83:f0:50:71:4d:8e:23:a9:d4:41:dc:95:6f:84:fb:3c:52:cc:
         de:bb:9d:be:a8:ba:0a:09:be:72:ca:da:2d:b4:3b:f6:01:eb:
         64:fc:6e:67:fe:89:d4:07:40:8c:68:9f:1b:16:28:ed:54:1d:
         68:bd:23:24:2e:fb:82:cb:6c:5e:59:a8:1a:a6:df:b3:59:b9:
         cb:33:90:a9:01:42:ed:fc:e1:bf:85:c8:bb:28:50:23:83:65:
         eb:f1:9a:83:fa:67:c7:6d:fc:50:d2:d9:01:e0:df:d2:90:16:
         a2:ff:ef:74:3f:4c:46:65:4a:ab:48:27:2b:87:87:41:24:ec:
         82:7f:2b:8d:99:63:72:3b:5b:e0:de:a7:31:90:6b:b9:7b:0f:
         a9:51:27:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:10:40 2025 by rpki-client