Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
File:                     8-NiIsy8bHIhNgVAurOp26nyN6A.mft (raw, json)
Hash identifier:          7eoLp25+L3vJrn3gJb/QdvLqkN/EA+M/aIHeUI3+AX4=
Subject key identifier:   63:C0:40:5F:93:05:56:36:37:7D:5F:FA:3C:BD:F5:F7:D0:B7:EF:71
Authority key identifier: F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0
Certificate issuer:       /CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0
Certificate serial:       019935A527257EEE73F3C1D8E060E0B3D682
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
Manifest number:          143B
Signing time:             Wed 10 Sep 2025 22:00:39 +0000
Manifest this update:     Wed 10 Sep 2025 22:00:39 +0000
Manifest next update:     Thu 11 Sep 2025 22:00:39 +0000
Files and hashes:         1: 4OAQQVO8VIFzfsVpiMv8jSSll54.roa (hash: JMcD21CurSjrVb9e/Fa0SxXVumzBh+XhCdZn2t0vX/k=)
                          2: 8-NiIsy8bHIhNgVAurOp26nyN6A.crl (hash: sJ9wdL6vy9zwN+RVmtTDQc5o3rU+0j9P1x4s0jRFW80=)
                          3: S4_bZaUrYeif2UyHHeNglamlIdY.roa (hash: xW3QM1MxANWCikFD0BTEoT7OwPC4SDKTPMb/5xd/WUE=)
                          4: k8gLy7StQaIvKZDqraAi2w_fvtc.roa (hash: SkLPv2Z8PHPm64h4i6RldP3OE6ycpgOCRTvbQRULZdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 20:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:35:a5:27:25:7e:ee:73:f3:c1:d8:e0:60:e0:b3:d6:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0
        Validity
            Not Before: Sep 10 22:00:39 2025 GMT
            Not After : Sep 11 22:00:39 2025 GMT
        Subject: CN=63c0405f93055636377d5ffa3cbdf5f7d0b7ef71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:38:4b:cf:00:f5:6a:2a:63:3e:cf:b9:74:96:
                    4b:f9:f3:72:00:84:a7:a9:cd:73:ff:89:e3:63:a1:
                    a0:14:6d:45:d4:85:da:eb:7a:69:01:61:70:c2:86:
                    3d:1b:02:34:24:e8:7e:fb:34:3a:9d:0f:b0:1f:da:
                    6a:14:f6:b6:88:3e:50:2a:7e:47:93:c9:61:18:c3:
                    b6:1d:63:37:9e:40:71:00:31:68:1d:2b:47:73:34:
                    f6:c5:1c:77:c0:e8:cb:c1:19:10:ed:28:c4:53:95:
                    28:b2:9b:ff:33:c7:d1:fc:3d:59:92:e9:eb:3e:5b:
                    ca:d8:7c:c1:f3:72:d4:54:9d:93:d5:91:94:32:ca:
                    d0:1b:b7:68:0e:2e:05:0c:6a:ce:53:8f:26:23:1b:
                    1d:79:b2:3e:8e:8b:67:49:a0:56:70:ec:9c:ce:f7:
                    05:38:ca:d8:b9:9e:b6:60:57:08:58:c1:fc:2c:e0:
                    3f:cf:97:d5:9e:37:2a:b2:2c:f6:77:bc:8b:16:55:
                    22:6a:1d:c7:6a:df:de:9b:67:b5:ad:5d:3a:7f:48:
                    d2:07:03:bf:46:38:c4:bd:d9:64:ce:2a:c0:79:eb:
                    4f:30:c0:1e:89:33:2b:95:fd:8d:23:19:55:52:95:
                    53:c4:6b:bb:5b:77:2a:fd:a7:09:5f:a4:97:8a:41:
                    d5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C0:40:5F:93:05:56:36:37:7D:5F:FA:3C:BD:F5:F7:D0:B7:EF:71
            X509v3 Authority Key Identifier:
                keyid:F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:47:79:4f:48:28:8a:4d:b8:6c:01:2f:5f:31:77:91:a6:a8:
         ed:81:db:da:12:c5:0f:c0:b0:32:6c:c7:87:5a:94:e6:fb:2c:
         c0:28:05:5d:3c:16:fa:35:d7:67:81:df:cc:04:26:01:11:29:
         8f:6f:06:8a:bf:6d:85:61:03:71:8d:fe:b9:0e:e7:e3:bb:ef:
         70:cc:63:c0:95:ab:88:b8:cc:df:ea:aa:64:71:89:51:79:a0:
         8b:ce:60:2e:6c:ba:1e:75:67:e6:54:76:86:38:a6:fe:cf:66:
         ec:3b:64:d9:c8:30:6b:de:21:e5:c9:34:de:25:1a:83:3a:ef:
         65:03:06:e8:f9:d6:66:b5:5e:2c:19:47:cf:1f:35:60:a3:e5:
         1f:d6:0a:df:49:35:cf:14:88:22:69:be:a0:59:11:c2:e8:3c:
         be:5d:cb:8f:91:e0:c1:2c:d9:34:37:4c:4a:ac:8d:74:32:00:
         ad:07:21:a4:ad:3e:55:d4:b2:5e:6e:a8:78:c5:30:be:9f:34:
         eb:af:97:bc:a1:77:40:bc:c7:3f:87:7c:25:74:28:79:fa:a1:
         a5:1e:ce:c9:8f:33:c1:fb:8b:9b:88:ec:b3:ec:9a:06:1a:61:
         40:99:e1:06:98:d3:16:7f:21:45:a3:6f:59:46:ae:81:c7:8e:
         eb:a6:e4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:49:55 2025 by rpki-client