Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
File:                     8rwR5uzToK8-5DlNy7ez75AYfTA.mft (raw, json)
Hash identifier:          l6MvuSNaBC553yyBy1fFRxlQdsf6BGfTmV95z4jJR9o=
Subject key identifier:   85:29:CC:B5:77:B2:49:F6:DB:D7:CD:4E:09:1D:5D:D3:C0:BE:AB:47
Authority key identifier: F2:BC:11:E6:EC:D3:A0:AF:3E:E4:39:4D:CB:B7:B3:EF:90:18:7D:30
Certificate issuer:       /CN=f2bc11e6ecd3a0af3ee4394dcbb7b3ef90187d30
Certificate serial:       019A006C083AEB5162474A7AF14E0E1904F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
Manifest number:          0A67
Signing time:             Mon 20 Oct 2025 07:01:11 +0000
Manifest this update:     Mon 20 Oct 2025 07:01:11 +0000
Manifest next update:     Tue 21 Oct 2025 07:01:11 +0000
Files and hashes:         1: 8rwR5uzToK8-5DlNy7ez75AYfTA.crl (hash: wHyGODBze+SQC6XXiIX17D/fZOt0XyetJYz0Zi5Eij0=)
                          2: Jt10BH3qKoOGqx6R1oafXbYBRvg.roa (hash: 9VB1KYRqUDPucDZfXSnHKaNbHiQLBOlnBbvyv/YEMkA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:6c:08:3a:eb:51:62:47:4a:7a:f1:4e:0e:19:04:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2bc11e6ecd3a0af3ee4394dcbb7b3ef90187d30
        Validity
            Not Before: Oct 20 07:01:11 2025 GMT
            Not After : Oct 21 07:01:11 2025 GMT
        Subject: CN=8529ccb577b249f6dbd7cd4e091d5dd3c0beab47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b1:75:0d:eb:95:da:0e:7c:5a:cb:9f:e6:77:
                    d7:67:a2:a8:30:e0:98:97:eb:46:c5:d2:a6:a6:ea:
                    27:60:ad:f2:63:6b:10:26:a5:29:3b:c6:65:67:c0:
                    e3:46:67:49:a1:87:9b:bd:61:ed:78:ba:16:57:00:
                    ca:70:9c:96:bf:d0:39:7a:7f:5d:e6:84:e5:85:eb:
                    4f:db:98:58:ce:0b:cd:23:12:ce:37:ec:a8:6e:4e:
                    94:e1:dd:8a:2b:ec:d6:6b:9e:2c:09:16:fe:0f:40:
                    cd:53:43:ff:0c:54:6a:9c:75:12:a4:b2:6e:5d:a8:
                    39:04:22:1d:b2:77:dc:68:61:7f:cd:82:c5:12:77:
                    5d:13:56:54:91:fa:17:43:e8:21:21:44:85:42:f4:
                    1e:05:87:ef:f4:cc:6c:0f:ef:23:1d:69:38:b5:80:
                    49:5d:fb:f9:82:9b:36:3d:36:52:f7:1b:7b:5f:5d:
                    98:7e:31:54:f5:c1:88:bc:fe:18:a5:15:a4:6e:88:
                    77:a4:05:40:30:79:10:5f:cb:be:e5:96:1b:14:51:
                    27:48:b4:79:33:a2:cd:25:11:04:0d:51:7a:d5:a3:
                    61:28:4c:f0:c2:bc:a1:4f:39:14:85:3d:03:19:c5:
                    43:9c:d2:5b:a3:27:cc:82:60:f0:85:96:39:51:2e:
                    b3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:29:CC:B5:77:B2:49:F6:DB:D7:CD:4E:09:1D:5D:D3:C0:BE:AB:47
            X509v3 Authority Key Identifier:
                keyid:F2:BC:11:E6:EC:D3:A0:AF:3E:E4:39:4D:CB:B7:B3:EF:90:18:7D:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:57:12:c0:1e:e2:4e:e5:86:7c:c1:01:03:ef:65:34:ec:25:
         29:01:c3:86:6c:c4:c0:50:44:64:c5:df:1b:9f:93:38:98:f2:
         c8:36:d0:7e:22:24:fa:2b:0b:26:f7:37:66:2d:07:a3:f6:5b:
         0d:03:21:ec:e8:a6:8f:6b:7c:10:c5:fd:a4:d6:e9:62:05:3e:
         4b:9e:53:ce:58:27:c9:fe:fb:13:55:38:83:70:18:2b:21:f7:
         87:77:e4:f8:ee:65:7c:01:75:fe:64:2f:00:6e:73:f0:62:6f:
         39:dc:15:d7:51:f6:4d:cb:bc:ad:83:8a:19:05:6d:66:a6:27:
         d8:ce:36:c0:c4:6e:ca:fd:2b:3b:b0:93:9a:4f:21:c6:ca:40:
         c9:f7:2f:39:36:fd:2b:b8:8e:18:85:f9:6d:4b:60:93:2b:b6:
         e8:04:e3:9e:f6:81:cf:0b:ff:b3:92:82:63:4d:f1:46:80:c3:
         79:16:7d:14:c7:a4:7c:68:40:ab:41:9f:d0:79:07:a1:05:bd:
         bc:a4:bc:fe:0b:6d:be:46:b8:4d:32:b4:c5:4e:29:70:76:f7:
         10:f8:29:01:e7:0f:bd:ed:36:09:67:b2:c4:51:a6:d8:78:e4:
         f6:47:65:e5:58:29:42:c9:b5:34:b9:59:bc:36:bb:68:32:df:
         c9:c5:d4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:32:58 2025 by rpki-client