Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
File:                     A8vbBZX8SJApOKePQsHq8KFZv0Y.mft (raw, json)
Hash identifier:          gp8VuZfDlsasyn0EQ6Vr7O2Fxjtw/4zmQ6LDM2WYwDk=
Subject key identifier:   8D:8B:C4:06:B1:C0:C9:08:99:84:3F:3E:EB:69:42:F1:0C:32:29:0E
Authority key identifier: 03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
Certificate issuer:       /CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Certificate serial:       019839F1FD11D5AEE046EC59132301716E2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
Manifest number:          0AE4
Signing time:             Thu 24 Jul 2025 01:00:16 +0000
Manifest this update:     Thu 24 Jul 2025 01:00:16 +0000
Manifest next update:     Fri 25 Jul 2025 01:00:16 +0000
Files and hashes:         1: A8vbBZX8SJApOKePQsHq8KFZv0Y.crl (hash: U3QVFRIoueKgM5wB76uIitW8RJ3RsZj7D9bgaFTVkIw=)
                          2: CkMelDZYJ8wLYR1cBeOcNR-SbG4.roa (hash: 6DRW9xC/bgUNN/0DP+fJRep1JSUrKnuaZJm7l+ZDw18=)
                          3: GK_repQ6rwK9wKBexoj_8KHn0ps.roa (hash: BVRGH6L3m9qE1hNSh0udH+0Cqw8KHPDP3+FP2Bc+9Fo=)
                          4: PwFex15w_vGu9rMsC-NGPYybEsw.roa (hash: oh3ulFFupTLJCwmoHULEmcM0EU2doUd+YoDkAtl9zLo=)
                          5: Se_t6NLKu8IA2sTkrVOBiKVsQwY.roa (hash: phtV0BDD2FsHScjhDeHLatllFRKkRPV0UJtMe0PEg8c=)
                          6: cWH5PPaYfZWUJba_G0n_uzh_rsc.roa (hash: C8oVSKijBzzlBacVotbOoAmP0eM+u3jK9TaM8PG08eI=)
                          7: eK7sZ1D_OT19uO-hHprpcrVXcWU.roa (hash: bVKg53TVS+OiFbk3Bkeg0BfOZQFTwlQ5IxwlXslILAc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:39:f1:fd:11:d5:ae:e0:46:ec:59:13:23:01:71:6e:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
        Validity
            Not Before: Jul 24 01:00:16 2025 GMT
            Not After : Jul 25 01:00:16 2025 GMT
        Subject: CN=8d8bc406b1c0c90899843f3eeb6942f10c32290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e8:ea:d2:8d:a9:f7:7e:e6:58:8f:17:e4:54:
                    70:fe:2d:c5:10:c1:5d:1a:26:bf:dd:b1:ba:97:7b:
                    ff:66:fe:8a:82:03:23:ab:a4:12:50:c6:93:f6:0a:
                    d2:22:86:06:d9:19:cc:85:a2:ec:dd:7a:bb:fb:18:
                    36:fd:d3:99:dc:25:77:3d:9e:3d:3c:10:04:02:01:
                    ac:89:46:03:87:9d:8a:90:bb:d0:8a:27:a4:91:f6:
                    23:d6:02:74:19:4f:3a:5a:ce:dc:ee:3e:39:7f:18:
                    fb:82:07:3b:86:68:53:f6:9a:ae:04:df:73:fd:bc:
                    c9:7e:2b:ad:33:2d:1c:a0:b6:d8:59:04:3b:1c:cc:
                    ef:23:79:62:1c:0a:a9:80:30:4d:ec:9e:e7:4d:18:
                    bc:89:f6:ca:2f:90:bd:93:ac:47:c4:41:6e:a2:51:
                    70:0a:d3:39:e4:57:0d:e6:e3:a8:43:d6:97:35:a6:
                    04:0b:f1:50:a6:be:57:8e:3b:fd:4b:de:4f:f1:67:
                    c4:57:90:2e:e7:79:7b:19:d2:38:f1:90:1e:05:29:
                    8e:62:17:ce:9a:3f:a9:39:01:ad:59:55:8a:5a:86:
                    96:2f:ab:3a:d6:0a:8e:4d:97:99:49:6a:7e:c0:db:
                    8c:a7:c9:a0:68:f3:46:b9:41:65:7a:e0:c6:70:a8:
                    0d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:8B:C4:06:B1:C0:C9:08:99:84:3F:3E:EB:69:42:F1:0C:32:29:0E
            X509v3 Authority Key Identifier:
                keyid:03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:a3:fc:99:40:d0:dd:0c:09:1c:88:f7:1e:bd:8f:39:90:5a:
         4e:48:ab:03:29:af:24:b4:88:50:5e:79:65:6d:04:e7:1d:11:
         bb:b9:bb:33:07:62:4b:7d:14:29:fa:61:23:24:82:4d:e6:9c:
         df:8e:11:3e:f9:3c:19:d7:b8:a5:ef:54:95:45:00:bd:de:d5:
         d5:ea:ff:5f:69:53:aa:a5:e0:92:68:d3:b9:ad:8e:f6:a4:70:
         e6:08:a5:89:60:d8:af:fb:2f:59:19:86:40:51:02:3e:51:e1:
         1c:54:37:15:be:6e:73:b0:ee:c3:3c:64:78:da:87:9c:59:37:
         70:c2:df:2f:cb:03:87:d4:12:82:79:09:ea:10:9b:cb:c8:73:
         a7:85:d7:b4:06:bf:75:21:3c:82:00:e5:d5:0b:28:f0:19:ee:
         b3:45:51:ca:ee:c5:34:71:b8:52:b8:22:a3:e5:13:47:92:17:
         75:11:32:7d:e7:7a:a3:69:47:77:c8:8c:ae:ef:af:35:9e:f3:
         6b:28:6b:0b:01:d0:3d:16:41:e7:a8:43:65:a1:b7:8a:0e:03:
         2b:1a:ec:8b:b9:3b:19:cb:36:08:f9:4c:a2:4f:52:74:5f:b0:
         e7:21:49:72:ef:20:6a:a2:f2:a9:b7:0b:f4:93:c3:86:c3:d1:
         d6:03:04:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 03:50:15 2025 by rpki-client