Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.mft
File:                     V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.mft (raw, json)
Hash identifier:          VL+Fo+5ZKeeZaVYWdWtb7vGxOybsMVi4d7udYSFKzEA=
Subject key identifier:   03:A5:94:F9:94:F0:FA:5B:7B:EC:AF:87:F0:1A:90:B3:2A:3C:04:03
Authority key identifier: 57:C3:5B:F2:0C:7E:43:31:2C:2F:08:DD:EC:7A:6D:E8:10:DD:F3:E5
Certificate issuer:       /CN=57c35bf20c7e43312c2f08ddec7a6de810ddf3e5
Certificate serial:       0199221F4ADCEE12B7BB7A124521C8180FCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.mft
Manifest number:          069D
Signing time:             Sun 07 Sep 2025 03:01:39 +0000
Manifest this update:     Sun 07 Sep 2025 03:01:39 +0000
Manifest next update:     Mon 08 Sep 2025 03:01:39 +0000
Files and hashes:         1: V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.crl (hash: wkIFYlm8KKJIldYxWz8HuzyZbF2ZuC1mvjPEV4lDhiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1f:4a:dc:ee:12:b7:bb:7a:12:45:21:c8:18:0f:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c35bf20c7e43312c2f08ddec7a6de810ddf3e5
        Validity
            Not Before: Sep  7 03:01:39 2025 GMT
            Not After : Sep  8 03:01:39 2025 GMT
        Subject: CN=03a594f994f0fa5b7becaf87f01a90b32a3c0403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3a:b5:33:55:f3:23:14:a0:ce:a9:b7:59:11:
                    b3:2b:c8:48:a2:54:b2:db:65:6b:80:c4:ff:44:b7:
                    b8:05:99:54:b3:d4:41:ac:33:dd:1e:e6:81:2f:ce:
                    0c:8b:fe:cb:e3:88:d0:6e:57:18:b0:06:8c:56:8d:
                    78:d6:c7:ca:69:b0:bd:46:23:c6:59:20:99:ba:84:
                    95:d2:c8:ec:c0:ee:35:fc:a1:2e:6f:2c:e3:61:8d:
                    05:a8:b5:ea:e2:e9:c1:98:3f:0f:02:76:a9:e6:4b:
                    e0:57:79:ab:21:3c:18:c8:07:61:16:f0:29:1b:e9:
                    13:52:d7:a4:06:3e:4e:ba:0c:46:2d:56:4b:97:7f:
                    d3:21:f8:3d:8a:63:97:fb:cc:cf:06:c0:09:06:c9:
                    6e:01:2e:98:40:4b:00:59:69:af:cd:48:5e:bb:84:
                    d0:a1:07:74:68:95:85:54:b5:77:09:53:e0:b1:d8:
                    6d:d5:18:3b:23:b5:f7:66:e1:01:a0:d7:d4:a5:0f:
                    f8:2a:e5:dc:14:c4:6f:2d:81:21:67:90:31:8c:62:
                    46:05:ad:d0:69:bc:5b:65:98:32:6e:1e:bf:e1:f9:
                    db:5b:73:94:20:3b:0c:91:c5:39:9b:27:a9:f9:78:
                    e7:fe:5e:b7:d3:19:78:95:b3:8e:79:4d:fb:6d:70:
                    d4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A5:94:F9:94:F0:FA:5B:7B:EC:AF:87:F0:1A:90:B3:2A:3C:04:03
            X509v3 Authority Key Identifier:
                keyid:57:C3:5B:F2:0C:7E:43:31:2C:2F:08:DD:EC:7A:6D:E8:10:DD:F3:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:c0:df:55:66:f4:a2:93:e8:3c:dd:2f:2b:21:5c:f1:85:e2:
         3e:7c:41:d9:54:f4:91:82:a0:7d:20:cd:92:f0:80:9a:7f:87:
         f8:3b:16:d7:0e:a9:c8:6a:5a:2b:88:5a:e7:35:cb:f9:b0:03:
         1d:be:b5:11:4b:35:1c:12:c2:6d:da:9e:00:23:eb:41:0f:6e:
         a7:2f:22:17:a1:bf:3e:cc:83:b1:6d:e0:21:61:e8:9b:3c:1b:
         aa:98:5c:6e:27:aa:9f:05:42:e8:5a:8a:2f:f6:93:ba:3e:56:
         2b:e7:15:a9:36:b6:54:d2:a8:dd:99:fe:fc:94:08:10:70:b5:
         e9:6c:bc:0f:f8:0e:a9:9f:81:e8:66:3f:49:09:b4:ff:86:18:
         24:b0:11:ad:c6:34:e2:64:cd:64:1f:76:79:67:36:28:cb:5d:
         43:9f:7b:d6:51:9c:31:be:0b:33:d2:b6:a6:5d:97:1d:98:08:
         e1:44:71:c7:04:2e:7e:f3:d7:b6:b4:3e:b9:6a:86:72:36:a7:
         df:19:8d:80:7a:d6:82:0b:fa:ed:ea:f8:ad:82:1f:b9:dc:90:
         d0:0f:1a:8a:4a:d6:6f:bd:3c:1a:40:7f:38:f4:0d:b7:20:11:
         02:af:25:fa:df:f5:40:61:0d:b7:ff:ed:59:06:0f:0d:ec:3f:
         9a:64:89:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:50 2025 by rpki-client