Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
File:                     d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft (raw, json)
Hash identifier:          2t1zRcMIJSBDSMBmdbnrETTW7T6vie5dAfVFbFoHd9Y=
Subject key identifier:   BD:A5:4D:0E:DF:1F:46:3D:20:E6:18:52:CE:F7:DF:2C:51:E3:5C:00
Authority key identifier: 77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78
Certificate issuer:       /CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
Certificate serial:       0198D54E8B02003304374194B4058F2CBB30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
Manifest number:          0DE9
Signing time:             Sat 23 Aug 2025 05:02:31 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:31 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:31 +0000
Files and hashes:         1: d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl (hash: d9dExrUKpxp0wFZl4B8zZBkukK8qIu1WxtvZtMgwI8k=)
                          2: hNGctvUgxsV9VRFcAR330Ay19l8.roa (hash: zQTWmn2EIkYMs7iDpMx3kmmkHaS8RfsfTxjAwAVdFG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:8b:02:00:33:04:37:41:94:b4:05:8f:2c:bb:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
        Validity
            Not Before: Aug 23 05:02:31 2025 GMT
            Not After : Aug 24 05:02:31 2025 GMT
        Subject: CN=bda54d0edf1f463d20e61852cef7df2c51e35c00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:86:26:9b:52:6d:eb:a2:8c:ae:7a:d3:9e:af:
                    9a:26:35:e3:73:47:0d:22:e6:6f:15:1e:c6:71:25:
                    e3:90:9e:c3:43:84:f8:fe:2e:3a:a7:14:99:22:b9:
                    c8:4a:41:7b:33:ee:3e:06:86:95:9c:a8:5e:2e:62:
                    df:06:8f:fb:49:df:bf:a4:3a:27:99:7a:24:db:56:
                    79:c1:3a:eb:65:55:04:b3:15:79:b1:6a:21:cf:9e:
                    8f:11:e2:0f:79:e0:13:01:61:cf:53:a7:14:04:dc:
                    a7:ac:2f:e1:57:0f:74:ef:12:65:5a:9c:29:fe:8a:
                    81:8e:1d:4f:3a:ad:88:a7:06:f9:60:8d:04:a7:9c:
                    0a:9d:09:1a:ae:e1:d4:d6:d3:c3:22:8d:7f:43:51:
                    ee:d7:7c:bb:90:e9:82:d6:d7:17:8c:0c:d4:0c:04:
                    94:2f:fa:88:b5:c5:f8:25:a2:15:23:c5:7a:ae:61:
                    b0:93:01:eb:db:b9:e5:76:d5:3b:cc:ea:8f:d3:dd:
                    15:c0:d5:32:2a:d1:b4:fb:30:b7:d0:be:13:1e:19:
                    a0:1f:c7:f7:e4:e4:d2:be:03:49:95:ae:24:2b:79:
                    d3:6e:c1:b6:b7:d2:f1:17:b7:0f:b3:92:22:da:99:
                    ba:14:da:97:02:b5:83:b4:be:e6:76:20:7d:10:70:
                    c0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A5:4D:0E:DF:1F:46:3D:20:E6:18:52:CE:F7:DF:2C:51:E3:5C:00
            X509v3 Authority Key Identifier:
                keyid:77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:b1:d5:43:4e:16:ca:35:ec:49:aa:0d:27:a9:15:bf:40:8d:
         dd:45:38:12:3e:5a:e8:c7:7a:26:29:23:a5:4c:b8:aa:b4:60:
         75:a1:9a:b0:db:f2:5d:5b:a0:5c:7b:f7:51:39:d1:eb:7b:87:
         68:98:5a:62:52:b8:0d:3f:be:94:40:92:88:7e:b9:f1:06:c9:
         9b:c4:19:1e:82:97:55:ab:cd:16:a6:ac:ad:3f:06:4d:02:bd:
         e2:23:92:1b:0f:58:3f:97:da:1b:56:14:2d:f5:7e:2e:29:e5:
         c4:dc:ee:6d:91:3e:64:73:5a:5d:af:59:f8:20:d7:c0:50:c2:
         c0:89:15:0a:98:68:13:bb:cb:2a:8d:3b:de:7d:c2:16:30:66:
         dd:dd:04:34:03:56:c9:22:4e:28:a7:aa:af:62:b1:2e:a5:5b:
         bd:dd:fa:55:76:90:2c:a0:c1:02:3b:3b:ba:54:bf:f6:28:de:
         9d:52:9a:b2:fe:04:45:cb:da:fa:e5:dc:5d:b7:11:ed:de:82:
         d5:c4:7e:57:e1:8e:04:46:76:82:a4:f7:47:9b:a6:e3:6c:77:
         f3:fc:3e:61:8f:f9:57:5e:e3:8f:07:3b:0c:0f:7e:79:59:61:
         78:90:d3:b8:6c:dc:5c:e9:fd:95:3a:85:a2:a3:5a:a4:c0:b0:
         af:3d:2d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:50 2025 by rpki-client