Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft
File:                     8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft (raw, json)
Hash identifier:          2rF2UCfZ+ropY3RQF8/hjunWg2Z5QIeR5yiyWxhboyQ=
Subject key identifier:   75:AE:38:CC:39:9E:BE:DA:9C:8F:F2:E1:CF:84:04:96:D5:18:12:30
Authority key identifier: F2:19:38:3A:3E:3F:11:6A:9B:CC:47:69:C8:51:7C:DC:E4:07:65:C7
Certificate issuer:       /CN=f219383a3e3f116a9bcc4769c8517cdce40765c7
Certificate serial:       019A29671D467ED6A6E9FFB8583891CAA672
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft
Manifest number:          02E1
Signing time:             Tue 28 Oct 2025 06:00:14 +0000
Manifest this update:     Tue 28 Oct 2025 06:00:14 +0000
Manifest next update:     Wed 29 Oct 2025 06:00:14 +0000
Files and hashes:         1: 0c_l4ysRLhoLyNhVK3O7GIWEcSo.roa (hash: wCgtD5GTaTUHzlGOdOblih6qPlBPABAlJQ113X+Jw+c=)
                          2: 5jOb8o1BbBXO52drtCV8RnZe9h0.roa (hash: fEi3qbuXq214iH/x1u07FGO1olTWt/av+qXuhlLn1AY=)
                          3: 8hk4Oj4_EWqbzEdpyFF83OQHZcc.crl (hash: ZdoIJP2QE0u1CAkvz2MHfm7eerc/83w+qJcDZBYv4o0=)
                          4: 97Bdc61qbgqdAvjBmYkfFO0y1Ww.roa (hash: oUOsuSRnUrU8knVeKfFc9QKPrgL79MjXgwUrkum1/pg=)
                          5: Z29YwFdCw8mb-MR3SYDyBs3lmMg.roa (hash: J+lE3dbsGRla43+sCei9+kYRVYFXdgjow6d3cOzy75c=)
                          6: bFysswJxqvMNZTsaf64flp1ZIQc.roa (hash: uwCDzi7rd+IXP1Mw2HNimdPO1YXu5Quq3N1iTcDCSa4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 06:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:29:67:1d:46:7e:d6:a6:e9:ff:b8:58:38:91:ca:a6:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f219383a3e3f116a9bcc4769c8517cdce40765c7
        Validity
            Not Before: Oct 28 06:00:14 2025 GMT
            Not After : Oct 29 06:00:14 2025 GMT
        Subject: CN=75ae38cc399ebeda9c8ff2e1cf840496d5181230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b9:e1:fb:6a:54:0c:c9:3e:8b:1b:69:4b:05:
                    a5:72:51:8a:d9:80:ae:cf:20:c6:40:c2:0e:fc:b7:
                    4c:fb:87:45:26:a7:6a:16:97:99:11:45:c6:34:3a:
                    34:d6:75:f6:c3:3d:14:68:b2:c8:d7:5d:78:d1:11:
                    ab:00:7f:b1:c6:bc:e3:0f:a7:75:25:9e:2a:c2:16:
                    3e:19:19:0a:e6:c1:c0:dd:8d:5a:37:1a:c1:46:67:
                    e8:70:4f:96:0f:37:26:0d:bf:fc:df:f4:bd:df:fe:
                    4a:6b:05:de:35:23:c8:c9:d6:7b:cc:5a:0f:ec:db:
                    df:c8:8a:be:0f:e2:66:d2:2e:10:a6:5a:ee:a8:42:
                    e7:02:ec:db:36:25:9b:43:88:86:c7:8e:b0:ba:f5:
                    76:3b:6e:bf:6c:49:cf:ed:f5:47:75:b4:60:fa:ca:
                    06:7b:19:a7:cd:00:81:93:b3:1d:ce:5f:04:6c:07:
                    25:a1:5d:1c:b2:4a:9e:c1:87:e1:80:2a:4e:d2:6e:
                    79:41:a8:c4:e6:38:bb:b3:3b:4f:06:1a:87:da:f2:
                    46:1f:9a:07:e7:1a:48:f7:6e:46:1e:d4:90:76:a1:
                    4a:ec:a0:7e:a1:18:77:d4:75:1f:76:5b:69:f4:19:
                    25:42:f4:b6:ce:23:6f:0a:fb:80:6e:6b:f6:f3:31:
                    15:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AE:38:CC:39:9E:BE:DA:9C:8F:F2:E1:CF:84:04:96:D5:18:12:30
            X509v3 Authority Key Identifier:
                keyid:F2:19:38:3A:3E:3F:11:6A:9B:CC:47:69:C8:51:7C:DC:E4:07:65:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:86:e7:a0:b8:74:9d:5d:2c:6c:aa:91:be:4f:e4:36:ad:a6:
         27:da:15:e6:68:24:11:f6:fe:9e:93:01:e9:bb:c2:36:c3:b3:
         30:c7:1d:a0:8e:dc:c9:9e:f9:72:bd:69:f2:37:0b:57:ab:3f:
         6c:f9:39:b5:88:78:cc:80:6d:2e:cf:d5:c3:f4:83:e3:66:75:
         1e:b1:35:af:37:34:98:be:cf:24:3d:ef:09:8a:fa:9d:ff:ad:
         19:0f:8c:7a:ab:88:8f:77:55:ee:4b:82:ac:e1:df:90:49:bb:
         ab:7a:81:44:96:b1:99:eb:8d:95:1a:7b:40:4c:4e:14:0b:d4:
         1c:21:20:fb:63:3a:4e:2d:d0:5b:e3:ed:7d:fe:3d:8f:3d:8e:
         02:b0:21:da:cc:d8:83:65:f3:e4:94:cb:7c:bf:04:63:c7:7f:
         e3:07:c8:bf:97:8c:76:8a:6d:5c:3f:26:30:88:72:a2:9e:89:
         1b:5c:c9:bb:dc:4b:50:45:6d:3f:a9:e9:5c:83:86:67:47:2f:
         54:17:cd:07:8a:0d:0f:fc:83:36:0a:04:36:a1:14:33:f1:bc:
         00:cf:76:9d:85:e5:f1:4f:30:62:5d:82:3c:b1:d7:d6:1a:3d:
         96:e0:a1:9a:53:65:f6:7a:7b:27:d9:3b:b5:dd:7a:61:98:b6:
         26:5a:02:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:37:53 2025 by rpki-client