Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.mft
File:                     8VzG8-5-0llTHW0Izp4JNztxYGI.mft (raw, json)
Hash identifier:          87kpLWul0vuc+xuATKrMVwEuI2d37OxzX4MFh13bxi4=
Subject key identifier:   29:CB:29:5A:62:64:98:A7:79:C2:6A:93:26:D4:89:79:77:75:97:4C
Authority key identifier: F1:5C:C6:F3:EE:7E:D2:59:53:1D:6D:08:CE:9E:09:37:3B:71:60:62
Certificate issuer:       /CN=f15cc6f3ee7ed259531d6d08ce9e09373b716062
Certificate serial:       019922551767F7F2B10B8C5C237B6D296636
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8VzG8-5-0llTHW0Izp4JNztxYGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.mft
Manifest number:          040E
Signing time:             Sun 07 Sep 2025 04:00:25 +0000
Manifest this update:     Sun 07 Sep 2025 04:00:25 +0000
Manifest next update:     Mon 08 Sep 2025 04:00:25 +0000
Files and hashes:         1: 8VzG8-5-0llTHW0Izp4JNztxYGI.crl (hash: Lp0byd5TQcluU2Veq0CCKzIRDlt0M32BUsGA4LJM/Wk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8VzG8-5-0llTHW0Izp4JNztxYGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:17:67:f7:f2:b1:0b:8c:5c:23:7b:6d:29:66:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f15cc6f3ee7ed259531d6d08ce9e09373b716062
        Validity
            Not Before: Sep  7 04:00:25 2025 GMT
            Not After : Sep  8 04:00:25 2025 GMT
        Subject: CN=29cb295a626498a779c26a9326d489797775974c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9c:3a:f6:36:d3:fa:76:cf:3b:b9:0c:02:8c:
                    36:00:25:ba:0c:1d:dc:fe:3a:42:0f:d6:2d:0b:b6:
                    e1:91:7b:9c:d2:6a:cc:70:e3:88:19:1e:d0:88:3a:
                    46:ce:1a:df:9a:20:3b:1d:7d:c3:25:c5:52:6e:7f:
                    48:6f:bc:04:33:0c:f6:75:72:46:09:97:13:a2:ea:
                    e8:60:05:4e:d5:ee:1d:50:57:74:5b:40:76:56:eb:
                    2a:0f:c5:16:d6:95:f7:59:13:59:d4:69:e1:51:6d:
                    71:7d:aa:09:73:e1:40:c4:71:80:21:51:46:6c:3f:
                    30:86:70:e7:d7:79:58:0a:d6:83:4d:f0:a2:b4:fa:
                    5e:0f:aa:90:8b:c6:ed:e4:16:8f:cc:78:f8:5e:d2:
                    7c:9b:c2:1f:3e:ca:14:56:76:58:a1:7d:3f:34:b0:
                    e5:a4:14:aa:a0:f4:f9:57:c6:61:b2:fa:9f:85:b2:
                    08:ee:ee:94:d6:3b:62:ec:58:e3:63:de:87:fe:8c:
                    52:ce:b4:10:af:a9:a2:cd:7d:02:61:6c:e0:03:24:
                    e0:5b:27:5a:ae:14:dc:e7:01:a6:c8:ba:d1:c8:2b:
                    ea:49:d2:c1:aa:bc:5a:4a:b4:84:fe:aa:b2:37:d1:
                    d2:32:ec:04:42:f8:dd:5c:4c:0f:3c:37:ba:fb:45:
                    7c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:CB:29:5A:62:64:98:A7:79:C2:6A:93:26:D4:89:79:77:75:97:4C
            X509v3 Authority Key Identifier:
                keyid:F1:5C:C6:F3:EE:7E:D2:59:53:1D:6D:08:CE:9E:09:37:3B:71:60:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VzG8-5-0llTHW0Izp4JNztxYGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:9d:62:4c:7b:64:9a:f5:0d:71:84:e9:68:1d:8b:48:e7:47:
         4a:20:b3:56:2c:32:f5:7c:57:5d:c6:80:41:56:11:db:e5:a0:
         b4:39:04:36:97:ab:9b:23:22:89:4c:51:2a:af:50:7e:07:af:
         fb:95:73:6f:96:ad:7e:54:52:66:0e:ab:c7:20:de:0d:28:25:
         93:01:6b:e9:32:e0:de:aa:a3:97:15:33:93:53:90:b8:68:17:
         2e:47:db:1f:f0:0d:17:bb:96:a4:bd:a6:ce:95:5d:51:04:cd:
         4a:08:d9:9d:9b:66:39:b7:96:4a:71:bb:ed:91:9b:50:d3:57:
         55:b7:63:0a:4e:f6:56:27:23:3f:52:e6:db:ca:63:62:19:35:
         65:bd:94:0d:5e:54:2a:65:28:87:e1:b5:b4:f6:b0:11:25:97:
         93:03:82:6b:e2:aa:5e:6a:ae:5f:dc:80:32:82:bc:67:b8:af:
         8d:82:85:6b:da:b1:1d:ee:a7:ed:39:32:7b:b2:87:b8:f9:c4:
         c4:8e:80:9c:f2:71:84:e1:5c:20:54:21:d8:1b:7f:ee:e8:d4:
         79:62:8a:60:1c:b2:8f:98:43:90:9a:8f:b3:06:e4:ac:b1:98:
         af:58:1f:10:05:c8:1d:df:83:03:a6:fb:75:65:0d:29:2b:02:
         6c:2a:b3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:41 2025 by rpki-client