Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
File:                     8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft (raw, json)
Hash identifier:          wiONB/sPNdKk8SurdT08qCPYrtbgLAjgkKTDziH0PpQ=
Subject key identifier:   B6:0E:77:17:9E:3E:E0:B3:FC:44:EB:8B:7E:D4:5B:B5:7D:0B:F6:E8
Authority key identifier: F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94
Certificate issuer:       /CN=f0d03098b8356fffc5a597e9c45b84edf87cf994
Certificate serial:       019922C3571A886A9335E0EC012DBAFB97AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
Manifest number:          1425
Signing time:             Sun 07 Sep 2025 06:00:51 +0000
Manifest this update:     Sun 07 Sep 2025 06:00:51 +0000
Manifest next update:     Mon 08 Sep 2025 06:00:51 +0000
Files and hashes:         1: 8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl (hash: dIvruSAefS2qKntNleUwGEQSJt6Lf/xl0QcBmjvbCtQ=)
                          2: OkXBNJnUgokPx0Xxs8AUPN40aT4.roa (hash: E/UomHj5ST+3/lio4VV13yWumaIvNp+hYEYFZLaJR7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 06:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:57:1a:88:6a:93:35:e0:ec:01:2d:ba:fb:97:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0d03098b8356fffc5a597e9c45b84edf87cf994
        Validity
            Not Before: Sep  7 06:00:51 2025 GMT
            Not After : Sep  8 06:00:51 2025 GMT
        Subject: CN=b60e77179e3ee0b3fc44eb8b7ed45bb57d0bf6e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:86:a4:59:af:f3:7c:ef:9e:d1:9f:9c:f6:b0:
                    78:3a:14:2d:8e:0e:c7:13:71:ea:9f:61:12:d8:a8:
                    fe:4f:1d:1e:3a:35:7f:e8:3d:db:9f:03:94:e4:9a:
                    b1:67:94:86:3c:b7:fb:3f:75:72:fd:8b:4a:15:83:
                    81:b1:bb:ab:50:d3:5d:d6:92:2f:77:5c:93:f0:82:
                    53:4c:4a:70:e1:2a:fc:32:2c:6e:f3:98:2f:95:70:
                    31:08:9e:fc:57:ea:5f:82:67:66:54:ed:64:3d:13:
                    df:ca:87:8a:b3:94:12:28:b3:78:3a:cd:25:0a:21:
                    08:70:98:27:1e:db:d6:c7:71:49:ec:3c:5e:d9:00:
                    d4:b4:1f:58:85:b3:2c:15:1b:52:19:f5:c6:7e:4f:
                    d6:b5:07:98:ab:f6:61:22:a0:cd:e9:7c:c6:b9:f3:
                    9d:39:95:42:5b:de:23:14:b7:3e:e6:9a:42:50:d0:
                    4f:2f:c0:24:4e:d5:de:d1:17:a1:ca:57:66:25:c6:
                    0c:41:d1:2b:fa:44:83:aa:a1:e0:9c:79:7a:d9:74:
                    1c:5c:b8:c8:68:12:76:97:51:7b:f2:3b:3c:b2:fc:
                    b8:fb:53:43:0f:a6:3c:22:5c:ac:e1:bb:69:e1:44:
                    57:9b:c9:68:e2:fa:27:a8:b7:49:f4:1c:2e:88:c2:
                    59:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:0E:77:17:9E:3E:E0:B3:FC:44:EB:8B:7E:D4:5B:B5:7D:0B:F6:E8
            X509v3 Authority Key Identifier:
                keyid:F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:72:91:82:3d:19:0c:b4:10:7c:7c:63:12:9e:10:e2:1c:db:
         91:17:7a:cb:78:73:e6:16:12:0d:e3:bf:f4:dd:fa:9c:85:c2:
         c6:4a:04:f3:98:ba:d5:d0:2b:f2:5a:d1:f0:53:e7:e9:75:4f:
         30:ca:1c:2d:ce:3e:c2:e2:96:47:b8:94:7f:d2:28:85:a8:39:
         cd:1e:d8:4e:6c:6f:fa:cc:76:18:41:61:7c:a0:63:e1:d9:e7:
         db:30:35:91:5b:f1:80:01:df:eb:fa:7a:58:25:72:3f:8b:64:
         7a:66:cf:d8:99:35:ec:f2:6f:01:12:12:e1:68:85:4b:f2:78:
         76:6b:fc:57:ef:f8:bd:9a:72:6d:22:fc:a4:74:a3:58:40:d9:
         de:22:74:92:1a:1e:11:97:e2:26:b1:24:c7:3f:da:50:ee:38:
         f6:cf:b9:37:bf:6c:38:4d:2a:97:57:18:b7:2d:60:0b:b3:4d:
         b4:d3:2e:0d:51:d8:e2:cd:1e:5d:dc:a4:09:43:de:48:38:e4:
         9e:2b:69:32:2d:6a:ef:d1:4c:3a:08:9c:04:7f:66:f2:09:02:
         8a:79:d0:c7:6d:09:98:81:39:98:bf:cf:27:bf:16:30:01:35:
         71:92:07:ac:9b:79:34:54:bc:60:a5:15:8d:7f:8d:75:f0:b9:
         6a:2e:d1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:11 2025 by rpki-client