Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
File:                     8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft (raw, json)
Hash identifier:          5DdMfo/7oReuU0slW7yaOPy/KCTOVAESfhMUH2cvQm8=
Subject key identifier:   1D:90:B7:F0:76:C9:1B:26:2D:88:01:A6:00:19:C8:DA:84:AE:FF:3C
Authority key identifier: F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26
Certificate issuer:       /CN=f031c2da6bb9a56c28efeec4e4df0758cc24eb26
Certificate serial:       019848C058DBFED622D934FD829CF96B8BB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
Manifest number:          0580
Signing time:             Sat 26 Jul 2025 22:00:21 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:21 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:21 +0000
Files and hashes:         1: 8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl (hash: pQf52L2nUYF++9ncLW9NPvkFRuRVQ/Wlw7Eg8VPfseE=)
                          2: 9LD-hrLWBwUSPOko1WfMuzpukWE.roa (hash: IlW9fI4rY7r7GVZoUndhpUDRIk8UJ5M6N9Zdn/noO1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:58:db:fe:d6:22:d9:34:fd:82:9c:f9:6b:8b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f031c2da6bb9a56c28efeec4e4df0758cc24eb26
        Validity
            Not Before: Jul 26 22:00:21 2025 GMT
            Not After : Jul 27 22:00:21 2025 GMT
        Subject: CN=1d90b7f076c91b262d8801a60019c8da84aeff3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e3:18:b9:a7:37:ff:0d:4d:ce:b9:02:b2:9e:
                    5c:a1:4b:1b:51:2d:9f:3d:70:68:c4:cd:ba:b7:43:
                    f8:4a:9b:77:38:f5:c8:f2:4c:85:85:7b:47:29:38:
                    46:fb:8d:66:3f:75:d9:5f:ee:46:db:d6:06:ec:a6:
                    90:87:99:8b:31:96:04:14:12:05:6b:77:05:84:92:
                    77:1b:6e:30:89:31:a5:e3:d6:da:18:71:78:cf:95:
                    c1:89:d1:98:22:20:6b:68:37:f0:17:fd:de:3a:fd:
                    d2:34:e0:50:22:1c:75:d1:5b:9e:5c:b6:a7:71:75:
                    52:44:dd:f8:d3:e1:f1:ef:22:d4:41:ec:e8:68:c9:
                    2c:1e:fd:3b:87:20:de:cf:42:19:9c:55:0a:63:24:
                    c8:4c:31:f9:04:94:ab:d1:aa:e1:8a:a0:aa:23:68:
                    47:2a:9f:91:49:c1:92:69:a2:5b:3d:9b:70:a2:0f:
                    de:65:4a:44:18:85:fd:aa:4c:d4:93:d3:b1:fc:4f:
                    62:1b:41:08:64:dd:6e:94:80:8d:dd:94:63:b8:34:
                    e2:41:8a:7c:3e:9d:04:ec:de:90:89:94:a2:39:f3:
                    3c:7e:7f:5e:41:2a:7c:e5:f3:41:e5:14:e6:20:0f:
                    1e:b1:6f:cf:4a:b9:52:5c:7e:5c:88:4f:fa:9f:26:
                    6f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:90:B7:F0:76:C9:1B:26:2D:88:01:A6:00:19:C8:DA:84:AE:FF:3C
            X509v3 Authority Key Identifier:
                keyid:F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:55:5b:01:78:a9:2f:ae:80:68:20:a0:85:66:01:58:b1:d1:
         23:bc:c2:41:3a:05:00:c3:19:a1:b8:72:b8:c0:f7:6f:3d:40:
         28:f2:0e:a2:2c:d2:e0:34:64:9b:ec:c1:4e:cb:77:de:f1:78:
         20:6f:07:ce:a2:a4:93:f0:1e:de:40:2c:1e:cd:1b:0b:9a:ab:
         b1:ec:21:02:20:17:69:64:69:57:12:a0:24:e4:8d:20:6e:95:
         cc:a9:e0:d8:7a:42:7f:56:8c:4c:18:ea:82:06:2b:f4:98:5a:
         b4:45:4e:b6:fe:f9:35:bf:c5:6b:82:bb:76:e6:21:7c:01:01:
         78:9d:de:15:bf:5a:79:d5:d3:26:86:23:57:83:ba:ca:13:79:
         6f:b5:41:03:01:2d:72:45:17:02:56:83:61:b8:d6:6c:04:03:
         a6:23:9a:12:f2:65:4d:d4:73:18:1d:f1:ec:b1:3a:3f:b3:e3:
         d6:c4:cc:56:34:c7:83:b4:1a:bf:1d:92:32:73:d0:c2:9c:c1:
         62:81:d8:b9:a0:d4:bb:d6:cc:29:10:75:04:51:f7:92:73:47:
         33:45:f5:80:9c:ff:7a:a2:c5:c1:c3:e6:84:7b:90:35:cf:60:
         64:8d:b8:65:ca:c6:6c:c5:25:5f:ee:08:ab:0b:44:11:de:a5:
         42:29:92:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 03:04:44 2025 by rpki-client