Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
File:                     rYg6hugtDZEPz1n4_5978aZxSHA.mft (raw, json)
Hash identifier:          b7JondYy6FXudHA2H3U94Qh5oAevsGyUpoOdVKgK0FI=
Subject key identifier:   B5:69:C7:AC:B4:97:7B:1A:1A:07:CB:0A:13:8C:12:3D:D1:E4:C2:13
Authority key identifier: AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70
Certificate issuer:       /CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870
Certificate serial:       01993124F4DCEF5D5F7A3378376CF66683D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
Manifest number:          08C8
Signing time:             Wed 10 Sep 2025 01:02:09 +0000
Manifest this update:     Wed 10 Sep 2025 01:02:09 +0000
Manifest next update:     Thu 11 Sep 2025 01:02:09 +0000
Files and hashes:         1: od7ExObCxDqzHqRis0nMtXmus2Y.roa (hash: WoaJOBOnB6iTsR77zkPSuoVOWwQU/LjcUNKKgIIFfv0=)
                          2: rYg6hugtDZEPz1n4_5978aZxSHA.crl (hash: WtsdBbrNh9JcfcdVE542HBUt3oVTx+JIq6RTeZ932aQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 21:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:31:24:f4:dc:ef:5d:5f:7a:33:78:37:6c:f6:66:83:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870
        Validity
            Not Before: Sep 10 01:02:09 2025 GMT
            Not After : Sep 11 01:02:09 2025 GMT
        Subject: CN=b569c7acb4977b1a1a07cb0a138c123dd1e4c213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0b:ec:0f:dc:c4:10:33:dc:e3:49:81:a0:2f:
                    b0:37:d3:23:62:ef:47:d3:2c:5d:bf:18:81:b0:a5:
                    fc:3e:06:22:3a:53:b1:8a:08:30:e0:28:06:82:f9:
                    b2:32:fb:38:72:f7:9c:b5:8e:d4:0a:67:7e:f5:6f:
                    d2:86:fe:60:be:fa:14:60:7b:a5:c4:bf:23:77:c9:
                    57:c8:3a:aa:a9:06:3f:61:5e:6d:d4:a3:b5:e6:cc:
                    33:2f:88:c6:b1:77:b8:e3:a3:21:3a:f4:aa:96:8a:
                    74:3f:04:ca:13:3a:64:67:85:52:35:9a:5e:67:18:
                    81:cc:40:f2:7d:37:62:ae:d1:7b:85:ae:46:d5:01:
                    34:98:ec:b7:71:dd:78:19:02:06:50:49:ff:60:d9:
                    0a:02:fc:41:ce:47:ba:d0:a0:bd:02:00:cd:89:3a:
                    9b:b2:d8:51:8f:37:0b:87:1c:9e:b5:db:6f:40:f1:
                    d9:37:62:98:1e:9b:77:45:af:20:37:2b:7a:01:46:
                    0a:39:bd:bc:e8:75:b3:5f:2d:37:44:59:82:5e:f7:
                    1a:e1:e3:65:18:fb:8c:fb:93:71:fb:85:42:88:1d:
                    15:a2:c5:87:b1:ae:52:1c:5c:e4:6d:c2:88:53:0b:
                    e2:06:21:45:e9:51:cc:5e:df:a1:95:1d:9d:bf:f6:
                    20:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:69:C7:AC:B4:97:7B:1A:1A:07:CB:0A:13:8C:12:3D:D1:E4:C2:13
            X509v3 Authority Key Identifier:
                keyid:AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:07:8a:c3:39:ce:a3:29:7d:5d:41:cf:19:26:c2:9a:a1:10:
         2c:a5:15:a6:52:c8:02:26:2a:62:f5:50:83:01:03:6a:c1:81:
         4d:cc:ae:57:aa:38:cd:53:f6:a6:cd:f3:af:dd:7d:31:c1:52:
         16:f8:1d:e6:af:e8:53:ff:e3:b7:32:0f:87:de:26:ce:46:68:
         a4:dd:cf:2f:90:ab:09:98:e5:06:1b:6d:d6:18:0e:86:f6:5e:
         2f:dd:c0:7e:ba:f3:51:28:cc:a5:28:11:44:de:8c:bf:d2:94:
         59:64:70:06:42:03:87:27:b5:06:3b:04:c7:28:b0:38:1d:6a:
         63:11:81:82:b9:9c:8c:a8:7f:69:9f:9c:4b:84:04:25:f6:82:
         ff:dd:c4:26:37:61:7b:92:d1:52:49:8d:0c:22:b8:db:47:d8:
         18:3c:7e:dd:52:2f:1e:df:af:d9:47:6e:df:7f:19:59:6f:0f:
         d3:21:45:6e:6f:18:9c:1d:b6:52:53:8c:fa:ad:36:43:73:f8:
         07:98:57:2b:cf:96:18:0c:a7:5e:e5:4e:af:54:e3:83:09:7e:
         cb:73:17:fa:1a:cc:54:bf:6d:03:65:7a:62:e5:99:e3:fe:81:
         f2:e7:43:0c:6c:b7:a6:57:7f:9c:bc:c9:1a:2d:e0:96:b6:3c:
         5d:85:f0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:10:02 2025 by rpki-client