Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
File:                     8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft (raw, json)
Hash identifier:          ke2O0EuyOG6pjvDm6btJPZx8G+47eO8B6x/LG3RfBmY=
Subject key identifier:   FF:F8:B5:F3:03:D3:68:C2:D4:99:E8:B2:15:7B:56:BD:F9:8D:CA:82
Authority key identifier: F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32
Certificate issuer:       /CN=f1af38ad44069be654d2e787f96c4e8fd26a5132
Certificate serial:       0199FAD8313D1A5789EDC74BA050B2F897FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
Manifest number:          07F0
Signing time:             Sun 19 Oct 2025 05:01:36 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:36 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:36 +0000
Files and hashes:         1: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl (hash: 1rj85zW195AyI/KPHIcte5DREahg2vPJPMdBAupiOwA=)
                          2: zFKwxmaeEautk9glZTACNxiJuHI.roa (hash: SSRDLDzbM3kxops586eTzqegDVIiP8cLLFUXY14RKCk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:31:3d:1a:57:89:ed:c7:4b:a0:50:b2:f8:97:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1af38ad44069be654d2e787f96c4e8fd26a5132
        Validity
            Not Before: Oct 19 05:01:36 2025 GMT
            Not After : Oct 20 05:01:36 2025 GMT
        Subject: CN=fff8b5f303d368c2d499e8b2157b56bdf98dca82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4d:43:1a:26:77:dc:dc:9f:e9:eb:38:dd:a4:
                    ea:d1:98:85:cd:1d:4f:5b:c0:07:39:b3:11:7b:7f:
                    d2:b0:86:21:2c:b3:7c:d7:a7:62:50:c1:b6:1f:22:
                    64:c2:f6:f3:15:10:0b:72:8a:13:20:0d:38:89:88:
                    68:56:e4:ee:2e:50:13:7b:2c:9a:bf:39:fe:c6:9a:
                    7f:14:9d:0e:b4:23:a7:ca:fe:e1:29:f2:41:66:e5:
                    d2:1c:6c:e7:8d:7d:f6:0f:8a:d8:1c:15:94:9f:04:
                    72:14:e6:f8:5e:9d:07:9b:2e:22:0a:46:55:8d:b5:
                    df:5f:aa:a7:61:e9:f1:45:04:f9:cf:91:28:d4:63:
                    42:a9:76:14:a8:dd:df:fd:65:f7:60:5e:80:ee:ad:
                    13:d0:a1:d7:ac:1f:c2:c7:c7:09:0f:ee:dd:73:f6:
                    93:47:00:e8:90:e8:8d:a2:d8:6b:99:45:e7:37:be:
                    bb:e7:23:46:65:69:9a:75:14:09:aa:4d:50:e0:9a:
                    1b:57:2c:a2:24:cd:14:fa:95:a7:a6:9c:99:f8:03:
                    0a:97:93:84:51:fc:76:15:79:e7:4a:ed:54:6b:a8:
                    17:b3:1d:33:84:19:2d:86:78:cc:31:09:02:4d:20:
                    77:5c:99:55:61:e7:4a:a6:31:dc:50:e8:4f:5c:41:
                    57:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F8:B5:F3:03:D3:68:C2:D4:99:E8:B2:15:7B:56:BD:F9:8D:CA:82
            X509v3 Authority Key Identifier:
                keyid:F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:b2:54:61:33:a8:95:cc:88:aa:7b:00:00:3e:ce:4c:28:28:
         3c:66:b6:ee:92:a1:54:19:17:b5:ca:09:c3:3c:87:d4:be:13:
         41:75:98:f2:4c:29:d8:71:07:51:0a:78:3f:b5:83:e6:61:9f:
         c3:fa:0c:f8:ba:40:9d:dd:a7:fb:39:29:df:cd:c7:45:30:e7:
         c3:fc:50:ee:65:5e:7d:80:50:e0:bf:33:8a:77:66:e6:b2:a2:
         7f:2f:24:e5:1e:52:cc:87:ad:3d:1d:16:22:95:eb:20:a4:5b:
         f4:a3:55:a2:5f:08:90:18:12:0c:a0:61:3c:39:1a:b0:36:72:
         8a:7a:80:d3:5a:d9:a2:f9:e9:bd:81:11:1c:2b:59:46:0e:39:
         75:0c:76:73:7c:53:37:59:12:66:33:fe:8e:53:74:d7:b2:72:
         90:ea:de:dc:61:c5:dc:1b:51:ac:da:b1:f4:46:32:d8:8a:15:
         9c:34:4b:12:14:3b:07:17:c0:c3:93:40:2a:16:12:a1:c6:93:
         10:c3:ab:6e:50:a3:10:a7:eb:43:ed:8a:e1:c2:98:b8:e8:62:
         75:45:45:b0:dc:24:e9:e2:ec:aa:31:5d:b6:74:8f:d8:06:99:
         41:3c:25:ce:ba:ee:0f:fc:2c:77:8f:58:31:ef:c6:fd:95:fa:
         63:b6:ae:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:37 2025 by rpki-client