Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft
File:                     Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft (raw, json)
Hash identifier:          Ze7EnYXyXjogtPg3gGkeznvUcYy3guQ5XbRlcPL5Mgc=
Subject key identifier:   05:E7:F4:D0:EB:81:78:4A:AD:49:9F:6F:DF:87:4B:16:C7:AB:5F:1A
Authority key identifier: 16:ED:CF:EC:9F:6E:32:5B:C2:C3:9D:24:19:3F:83:0F:43:18:31:35
Certificate issuer:       /CN=16edcfec9f6e325bc2c39d24193f830f43183135
Certificate serial:       01992E5A55CEDE077955CEC70B985E2E135A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fu3P7J9uMlvCw50kGT-DD0MYMTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft
Manifest number:          08C8
Signing time:             Tue 09 Sep 2025 12:01:36 +0000
Manifest this update:     Tue 09 Sep 2025 12:01:36 +0000
Manifest next update:     Wed 10 Sep 2025 12:01:36 +0000
Files and hashes:         1: Fu3P7J9uMlvCw50kGT-DD0MYMTU.crl (hash: SeHeclvqSmknEkuN0hF0ZG0Ke9Oy79/+iGCywwWUd10=)
                          2: a6yjRQPaEVSmn2Af_50hlyGwo-8.roa (hash: f+GvZNBih0mNs6EfHvNm1HRb2NXRxOiIU+W+BUZl09g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fu3P7J9uMlvCw50kGT-DD0MYMTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 08:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2e:5a:55:ce:de:07:79:55:ce:c7:0b:98:5e:2e:13:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16edcfec9f6e325bc2c39d24193f830f43183135
        Validity
            Not Before: Sep  9 12:01:36 2025 GMT
            Not After : Sep 10 12:01:36 2025 GMT
        Subject: CN=05e7f4d0eb81784aad499f6fdf874b16c7ab5f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:49:48:e9:98:0b:19:1f:48:30:0a:b9:40:e6:
                    61:0a:d3:f9:90:a0:55:28:2e:25:8e:75:62:f3:d9:
                    94:35:98:3d:2b:96:ab:8d:40:46:3c:8c:6b:27:6a:
                    78:c5:fd:49:c0:fb:40:74:2a:13:c6:bf:e7:a6:69:
                    97:17:25:38:08:18:01:55:2a:5f:83:db:6b:d5:6f:
                    85:ff:25:a0:ea:a6:8c:ea:cf:80:9a:e5:6e:db:77:
                    6c:7a:3c:e7:ce:93:3e:75:ed:d0:34:57:7d:ac:3a:
                    af:b5:85:b5:9e:1b:22:22:9c:61:15:e1:db:d3:c4:
                    4e:4f:02:c6:dc:2f:6c:be:26:c3:4c:2e:b0:47:ee:
                    ee:b1:96:f0:42:65:18:b5:e2:42:89:17:35:7e:95:
                    c6:c5:1c:11:d3:27:5e:30:1c:e0:7c:72:16:4f:5d:
                    34:a5:4d:66:26:a0:ed:fd:86:f6:48:d4:90:bb:a0:
                    20:9c:cc:5d:52:7d:15:5d:15:a3:81:40:c8:4a:45:
                    36:a5:4d:39:41:3f:f3:51:1f:da:53:8f:79:89:85:
                    ab:ec:91:c3:d9:cd:ff:ce:a1:02:21:1b:78:f7:4f:
                    37:ef:b5:44:5d:8f:bc:0e:b4:6b:83:16:76:f7:37:
                    2c:d9:28:01:c4:ec:34:dd:07:0b:e6:5a:24:fd:c7:
                    ea:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E7:F4:D0:EB:81:78:4A:AD:49:9F:6F:DF:87:4B:16:C7:AB:5F:1A
            X509v3 Authority Key Identifier:
                keyid:16:ED:CF:EC:9F:6E:32:5B:C2:C3:9D:24:19:3F:83:0F:43:18:31:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fu3P7J9uMlvCw50kGT-DD0MYMTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:64:3c:26:d6:7e:89:a4:2f:49:46:6c:20:5e:a3:63:19:79:
         57:4d:0c:a3:33:d5:5b:52:15:a7:d7:43:f1:5e:22:0f:6a:cb:
         7e:f4:78:98:ed:4a:7e:11:e2:b4:b2:ae:34:a3:07:43:af:2a:
         e5:b8:f0:a2:98:a5:ad:5e:d4:e1:82:77:04:f6:98:39:a4:44:
         05:d5:ee:11:0e:f7:08:bd:0d:55:7b:61:08:94:d7:9c:44:8d:
         6a:c3:ad:39:9a:41:b3:88:55:94:48:b3:c8:ef:a7:fb:02:a0:
         48:2c:ac:63:b4:c7:3f:a4:a3:29:3b:7d:a1:75:a0:60:99:f7:
         2b:ea:a5:94:a7:e9:9a:e6:59:5f:f8:99:11:ef:8e:1e:6a:1e:
         b6:53:98:75:6a:15:8e:3b:36:ae:f4:ce:20:57:b1:1a:44:2b:
         06:f4:94:2e:37:16:2b:1f:c5:2a:41:4a:43:12:f9:94:0f:e7:
         6d:29:d0:69:8b:11:94:c7:6f:68:7b:f4:d1:fd:d5:e9:b6:87:
         aa:cb:38:41:c5:6c:c5:99:36:de:e4:84:67:10:7d:3e:7c:47:
         51:01:3b:a3:6b:2f:0a:fb:31:56:7b:d4:cf:6b:2a:5b:d3:b8:
         ad:d1:c3:a6:cc:dd:ba:91:dd:05:f7:b9:ce:94:ac:d1:d1:2e:
         7c:ad:34:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:27:37 2025 by rpki-client