Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft
File:                     8H-pjVIdhMKNrsion3SIu86AAhU.mft (raw, json)
Hash identifier:          pD8/MMqycQ69FU0GqfoGdAKWB2BJ1dY+QDMAboGVeZY=
Subject key identifier:   F6:19:7A:03:7C:CE:B7:86:5E:C7:5C:9F:11:85:B0:F9:7F:50:2B:9A
Authority key identifier: F0:7F:A9:8D:52:1D:84:C2:8D:AE:C8:A8:9F:74:88:BB:CE:80:02:15
Certificate issuer:       /CN=f07fa98d521d84c28daec8a89f7488bbce800215
Certificate serial:       019921B0839FF55803D7C2DB8D40F58204D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8H-pjVIdhMKNrsion3SIu86AAhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft
Manifest number:          0294
Signing time:             Sun 07 Sep 2025 01:00:40 +0000
Manifest this update:     Sun 07 Sep 2025 01:00:40 +0000
Manifest next update:     Mon 08 Sep 2025 01:00:40 +0000
Files and hashes:         1: 8H-pjVIdhMKNrsion3SIu86AAhU.crl (hash: 9K43ETPXOov518DpOVxsigpmMQ2J1ELHWnfaT9n5Wmo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8H-pjVIdhMKNrsion3SIu86AAhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b0:83:9f:f5:58:03:d7:c2:db:8d:40:f5:82:04:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f07fa98d521d84c28daec8a89f7488bbce800215
        Validity
            Not Before: Sep  7 01:00:40 2025 GMT
            Not After : Sep  8 01:00:40 2025 GMT
        Subject: CN=f6197a037cceb7865ec75c9f1185b0f97f502b9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:70:9d:1e:28:d3:1f:95:e9:bc:90:81:15:09:
                    7b:eb:a0:72:4c:ee:33:12:fd:17:59:f5:6c:35:ac:
                    85:82:b4:96:61:14:cb:23:1a:7a:df:85:23:53:83:
                    97:a2:0b:01:21:89:17:b2:ba:f4:9b:1c:1c:60:f9:
                    38:fd:02:ce:58:44:1b:aa:f8:a1:20:13:bd:ef:a1:
                    4e:ef:e7:09:7f:ba:b4:34:16:af:6c:86:5b:e1:1c:
                    19:58:a0:29:38:8e:bd:e0:b0:52:16:67:de:69:4e:
                    96:01:c5:01:ed:b6:57:75:05:f3:48:93:08:a5:cc:
                    ce:7a:fd:d8:b2:69:bd:32:be:f3:83:16:36:9b:f3:
                    3c:9e:12:55:14:f9:c6:4d:93:e7:87:c1:dc:86:b2:
                    44:2f:a4:fb:83:28:e2:f4:fe:ff:cd:85:ab:3d:8f:
                    96:88:fe:09:bb:10:ca:b4:c4:73:c8:70:0b:72:5a:
                    2c:9c:9d:57:ec:9f:71:48:a4:05:64:88:e1:bd:ad:
                    31:2a:4a:8a:76:e0:e9:56:52:57:7a:a6:c8:00:45:
                    17:42:59:24:18:9b:76:5b:e1:e2:a3:60:6a:ea:f5:
                    68:fb:70:0c:c4:48:f6:29:3c:d6:13:5e:4f:af:ea:
                    08:09:df:18:5b:04:41:20:69:bf:da:24:83:de:a7:
                    67:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:19:7A:03:7C:CE:B7:86:5E:C7:5C:9F:11:85:B0:F9:7F:50:2B:9A
            X509v3 Authority Key Identifier:
                keyid:F0:7F:A9:8D:52:1D:84:C2:8D:AE:C8:A8:9F:74:88:BB:CE:80:02:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8H-pjVIdhMKNrsion3SIu86AAhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:70:be:af:50:28:36:30:d8:3a:09:fd:0f:06:9f:b9:49:7c:
         71:4f:28:77:06:86:35:b4:3c:59:a7:65:5a:29:f5:16:00:6a:
         e7:21:70:cf:07:fa:fe:53:0f:b4:fd:97:32:ba:99:ff:12:d3:
         e6:33:6c:8a:12:04:98:af:8a:1e:9b:ed:a1:fd:e1:a4:19:7d:
         28:24:db:b3:e0:d6:dd:bf:89:f7:6b:50:6a:58:b7:cb:b6:40:
         ce:8b:39:68:ea:9c:6f:17:ac:95:d2:35:54:ea:da:86:ae:71:
         f5:ac:2a:de:f7:2a:89:48:4d:e9:7e:a8:52:eb:db:12:c0:2c:
         1b:dc:0d:11:0c:3f:44:19:c7:6b:ed:89:b5:f2:27:c1:4a:f9:
         53:2d:1e:57:02:f5:1a:7a:83:1b:c4:43:9a:c2:9d:bc:fb:d4:
         3d:bf:67:29:cd:e8:86:5f:c9:19:46:33:33:a9:ae:2c:a5:41:
         8a:8f:a6:e0:ba:cc:6c:58:b8:3c:e4:01:33:78:db:0b:3e:a2:
         9c:a4:b5:bc:7a:ca:f1:a0:ab:d4:da:54:3a:af:f8:c3:d7:eb:
         6c:39:e6:65:39:9f:fa:4d:69:d9:87:87:62:6b:8c:1d:56:f9:
         6a:ec:7c:3f:18:c7:51:19:f2:cf:78:76:91:92:7d:66:eb:55:
         7f:24:d4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:53:06 2025 by rpki-client