Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
File:                     9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft (raw, json)
Hash identifier:          5+QrAhv6DOXiHeiQP1isScRsK8gpgIpbwqnlrUsKXZE=
Subject key identifier:   81:19:C9:5A:72:17:DA:40:17:C1:B3:89:F8:2F:6E:02:F9:33:06:31
Authority key identifier: F7:FF:3E:7D:86:59:E8:AE:9F:6F:4F:31:D3:F2:4F:DB:3C:6D:F5:27
Certificate issuer:       /CN=f7ff3e7d8659e8ae9f6f4f31d3f24fdb3c6df527
Certificate serial:       019932362ACBDC8AF61F8BB396F21078F73C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
Manifest number:          0234
Signing time:             Wed 10 Sep 2025 06:00:34 +0000
Manifest this update:     Wed 10 Sep 2025 06:00:34 +0000
Manifest next update:     Thu 11 Sep 2025 06:00:34 +0000
Files and hashes:         1: 9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl (hash: jW4BT1M1iU9JpnqaJnNIDuyPcA+hgIr3iklUjAxcfc4=)
                          2: MDg3SGQivd4Gkhmi2ar9KtkbxPw.roa (hash: kp0L4LourZESQv5PNyUfmc/3RRGNdSH3s5Vl6lYig18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 02:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:32:36:2a:cb:dc:8a:f6:1f:8b:b3:96:f2:10:78:f7:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7ff3e7d8659e8ae9f6f4f31d3f24fdb3c6df527
        Validity
            Not Before: Sep 10 06:00:34 2025 GMT
            Not After : Sep 11 06:00:34 2025 GMT
        Subject: CN=8119c95a7217da4017c1b389f82f6e02f9330631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a6:32:73:f5:02:13:3c:61:17:e3:9d:ce:d0:
                    ca:ad:79:d1:e7:e4:eb:35:f0:75:f9:47:e6:06:5c:
                    2f:27:11:fb:d8:98:b1:12:ec:84:5c:44:ac:03:dd:
                    e8:78:81:76:38:6f:74:14:44:3b:f9:84:3f:8d:6b:
                    95:79:4d:55:2c:97:a9:8a:aa:41:a8:d0:73:ec:45:
                    66:43:91:94:95:99:33:53:db:97:15:b9:62:8e:b6:
                    3f:60:76:58:46:e2:90:24:db:63:fd:ad:63:4b:f8:
                    0c:40:85:da:11:67:64:d1:23:7e:4d:f7:11:a5:dd:
                    1d:8d:64:68:5c:90:eb:0f:a6:d2:dd:49:1b:54:a2:
                    fd:64:15:f8:bc:37:e2:49:4e:e4:c9:5b:dc:e3:fd:
                    c4:85:fd:ec:5b:f1:03:30:6f:e2:d8:7a:62:e6:a4:
                    9f:ee:00:8e:fb:0d:8c:ea:60:8f:f8:39:2b:d7:a8:
                    81:93:6d:cf:04:09:04:7e:01:8b:b8:46:26:f6:33:
                    2d:21:e2:14:ef:d3:8f:0c:7c:ae:7c:9b:93:01:67:
                    ae:65:f6:a1:58:ee:45:ca:0c:c7:27:43:bb:e0:f8:
                    07:3d:f2:7d:b1:92:45:e2:66:99:e8:cd:2f:35:9d:
                    39:28:98:de:09:ec:91:94:48:10:84:16:cf:d7:05:
                    5e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:19:C9:5A:72:17:DA:40:17:C1:B3:89:F8:2F:6E:02:F9:33:06:31
            X509v3 Authority Key Identifier:
                keyid:F7:FF:3E:7D:86:59:E8:AE:9F:6F:4F:31:D3:F2:4F:DB:3C:6D:F5:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:7b:fd:e0:fd:f2:1c:4f:d2:c0:8b:da:51:4a:5a:34:cf:cb:
         bb:98:86:5c:d1:f1:a5:4f:a2:f2:da:c5:c9:b2:20:f5:5c:a9:
         ad:a1:18:93:b0:56:ae:de:5c:60:e2:f5:3d:a3:84:e7:c2:0c:
         98:11:7c:17:53:ac:61:d7:7c:aa:09:17:01:d1:e5:62:88:55:
         2c:51:22:95:f7:9c:1b:57:01:45:ae:30:6a:b5:c7:6d:9a:76:
         cb:44:3c:1c:0d:05:99:46:d0:aa:64:1b:ba:5d:38:ec:f3:60:
         7e:db:2a:91:84:28:b2:74:d5:2d:3e:d6:c6:ec:47:c0:c3:46:
         6f:42:ef:1e:b4:34:50:ae:b9:f1:e8:16:1a:03:60:ac:ae:70:
         fd:03:b4:c3:61:87:9c:6c:01:00:19:a2:5a:87:c7:8b:35:95:
         6c:02:62:d5:8d:a9:10:23:e9:49:c7:91:8f:10:c0:e4:c1:a1:
         d1:3e:0b:b7:4d:20:e1:2a:ff:e6:b3:6c:b0:c7:7b:bb:3f:ad:
         44:f2:ad:04:b4:be:96:0b:99:1e:0d:51:4d:f7:3b:2b:cc:c6:
         16:ce:ce:75:fb:c5:05:77:1a:f8:05:3a:50:48:33:cd:64:f1:
         a3:f9:84:af:71:24:bc:f6:8d:bf:82:d2:34:75:d1:4c:a3:53:
         b5:b9:09:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 08:23:12 2025 by rpki-client