Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft
File:                     8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft (raw, json)
Hash identifier:          J8K0MryccWHQTepw8IsEMnlSKgTMsDPtCzUI5Th6FTc=
Subject key identifier:   D4:C2:87:CC:33:64:81:5B:CD:06:44:A5:7C:62:22:61:AB:20:04:82
Authority key identifier: F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55
Certificate issuer:       /CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55
Certificate serial:       0198D583ECCF17FE9CCEDCE42F0A9752A273
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft
Manifest number:          10ED
Signing time:             Sat 23 Aug 2025 06:00:49 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:49 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:49 +0000
Files and hashes:         1: 5ZNnU0ul1PvuB6V3S-Y8qQNgW4Y.roa (hash: RgXKHj2HAygr87kEjLFNnsJCWJ6hg9g9jGeFNERw+T8=)
                          2: 8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl (hash: 8xhJSYOChSY5qkP6umPP8eLZgO8j8eTWt+jKYY2hMAk=)
                          3: 9c9IMdwPViHHlGIXa-EYvM5rE2c.roa (hash: Y48jer5SEM8eKuN0ygvkfPpOfOkBQ0uV7/NANNuOcto=)
                          4: DYGgwKgBr-X-UJNWrHRoiByEE0k.roa (hash: 0UcPzEKGR92DACoKDDn5wkyZ0r0HCl4oapCFAXQREB8=)
                          5: Xi938_LG0fo08PcIDueZffuVF3Q.roa (hash: 5cOzoa9nCO1ZRf33mVdI0qSK+ZoAQbsBPtAf2Kylv28=)
                          6: oAsyO0CJws2AMTge7-6JSychHyY.roa (hash: OT9pAjZ/E5OdooOn7gC+YSxibLo6Rf5dBxQdNRyss9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:ec:cf:17:fe:9c:ce:dc:e4:2f:0a:97:52:a2:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55
        Validity
            Not Before: Aug 23 06:00:49 2025 GMT
            Not After : Aug 24 06:00:49 2025 GMT
        Subject: CN=d4c287cc3364815bcd0644a57c622261ab200482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f2:5e:cf:b5:94:f5:cc:ab:ad:60:29:22:82:
                    3e:db:97:d3:e2:b4:91:2c:b0:8e:27:0c:f4:93:2c:
                    51:e9:5d:0b:50:b6:99:5b:a8:81:4c:3a:46:6e:a6:
                    1c:ec:4b:cb:d0:9b:a4:ac:0d:75:cc:fc:e2:7a:e0:
                    fd:67:09:33:ee:33:44:11:45:91:77:29:41:34:75:
                    79:1d:5c:8e:14:3d:f9:80:b0:f3:36:67:68:fc:56:
                    2c:40:2d:fb:c2:8b:f1:51:3b:dc:71:dc:20:1b:52:
                    f3:5b:de:83:b7:88:3c:46:b0:84:3f:75:82:56:fd:
                    33:7c:5e:09:4b:a0:12:28:a3:6b:c7:f8:78:63:eb:
                    e7:3b:ed:4c:a7:68:cb:ec:70:3d:cd:e7:87:ac:73:
                    45:12:cf:8f:c7:83:39:27:17:ae:dd:24:e3:59:55:
                    4a:78:f5:38:39:e1:48:18:22:e9:bf:04:48:af:0e:
                    55:2f:84:15:ad:01:60:04:96:bf:e9:71:38:4d:61:
                    5c:c2:10:a1:c6:93:da:c5:e6:77:a2:f5:c3:84:1d:
                    79:ab:38:c6:71:03:9e:cc:aa:c1:64:f7:90:d7:1c:
                    7e:bf:54:10:8f:94:89:5b:ae:ff:97:98:45:d1:b7:
                    91:9f:f8:3b:0c:ba:d5:41:72:50:02:a0:46:96:a2:
                    2e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C2:87:CC:33:64:81:5B:CD:06:44:A5:7C:62:22:61:AB:20:04:82
            X509v3 Authority Key Identifier:
                keyid:F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:61:f8:cb:42:cb:b9:3c:0f:6d:f9:63:56:05:0f:25:a5:26:
         50:d1:c0:a2:fa:d3:2c:c7:08:d6:3d:ea:8a:57:3b:f9:f4:ac:
         b4:03:d8:cc:6a:f9:50:22:36:08:cf:e9:e0:e5:8d:3d:4a:15:
         27:13:1b:12:77:94:1e:30:b9:a5:12:99:1f:e0:ce:aa:d0:f5:
         ed:08:e5:f6:39:7c:4a:d8:6c:54:86:32:ab:ec:d9:c0:cc:ec:
         47:d3:f9:38:9f:28:da:07:8f:4a:3c:ee:29:89:51:9a:af:4b:
         8c:e2:b2:db:2c:f9:39:cd:ae:cd:57:1c:f1:76:fb:4e:5b:50:
         7c:00:54:e9:63:cd:c2:25:57:d0:99:e2:b4:6e:ce:27:0d:c0:
         e0:2f:e6:a8:e7:24:1b:18:2d:f8:53:d8:66:d9:c6:7c:95:f6:
         03:ba:c7:82:e2:0c:e9:fc:07:25:85:7c:7e:58:6e:a5:2a:93:
         32:fb:4d:57:4a:04:e3:26:09:e2:2f:04:b3:4e:a0:1c:b6:ad:
         8f:8a:39:82:d1:df:29:27:71:b6:bf:6c:a3:78:17:0d:56:b6:
         19:df:f2:6b:14:61:7b:00:e3:cd:9b:a3:8c:bd:51:a6:37:8f:
         a2:c2:59:b4:17:51:75:16:66:79:05:c1:d5:6b:5e:1d:12:dd:
         28:56:e6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:41 2025 by rpki-client