Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft
File:                     8mJAZfhrTPmEjex9q4ak24bBXhE.mft (raw, json)
Hash identifier:          bU3tbaimYzUfmKpJbLOCsT/nkfREeHxeE0ZfxhOK60w=
Subject key identifier:   99:47:5E:2F:90:46:04:7C:60:AA:D5:0B:55:6B:FC:D9:32:6E:D0:5D
Authority key identifier: F2:62:40:65:F8:6B:4C:F9:84:8D:EC:7D:AB:86:A4:DB:86:C1:5E:11
Certificate issuer:       /CN=f2624065f86b4cf9848dec7dab86a4db86c15e11
Certificate serial:       0199221E2F51058AC29B85526D8A47562D76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mJAZfhrTPmEjex9q4ak24bBXhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft
Manifest number:          0260
Signing time:             Sun 07 Sep 2025 03:00:27 +0000
Manifest this update:     Sun 07 Sep 2025 03:00:27 +0000
Manifest next update:     Mon 08 Sep 2025 03:00:27 +0000
Files and hashes:         1: 8mJAZfhrTPmEjex9q4ak24bBXhE.crl (hash: SO4onTmESuwJfp7Q2KaU1wxuQ7hgGPJjJX3uo1ZT9Bc=)
                          2: cD-tw650Z_Y6Vmxx9pyza1DBukk.roa (hash: wcc3gJVDDM85KdHRToySGGF6W2lO6V1fBEScrl4XQJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8mJAZfhrTPmEjex9q4ak24bBXhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:2f:51:05:8a:c2:9b:85:52:6d:8a:47:56:2d:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2624065f86b4cf9848dec7dab86a4db86c15e11
        Validity
            Not Before: Sep  7 03:00:27 2025 GMT
            Not After : Sep  8 03:00:27 2025 GMT
        Subject: CN=99475e2f9046047c60aad50b556bfcd9326ed05d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:36:92:20:03:1f:37:52:d9:80:7c:30:85:51:
                    6b:a3:38:e2:2e:72:de:71:a2:31:28:86:a7:89:b0:
                    66:d6:5c:16:a4:27:7a:83:b3:24:90:37:a6:28:4e:
                    58:5e:1f:9a:8a:03:6f:09:ab:43:64:33:69:1f:0b:
                    6c:f7:8c:6e:6c:76:0d:c3:d5:ff:3c:ad:43:6a:32:
                    8d:08:e4:73:f8:83:88:bb:5a:86:01:b7:a9:d0:24:
                    c5:a2:e8:bd:5b:86:c8:c3:89:04:0f:5c:fd:ef:8a:
                    5f:65:f7:6e:14:0e:e7:52:e9:4f:8c:a3:e0:27:06:
                    5e:59:1e:f6:25:8b:0e:13:a2:a9:c9:7d:5f:92:05:
                    db:9a:87:81:6d:d0:d3:e3:04:c0:e6:c8:57:08:eb:
                    f4:f5:05:7a:3d:0d:8c:23:32:de:92:c4:d3:da:93:
                    86:de:26:fb:8e:b4:78:70:17:2a:92:69:68:46:a5:
                    97:4e:f9:03:1c:9e:c8:3a:7a:33:3a:10:14:d9:ff:
                    9e:7d:54:c3:79:5e:46:b4:f1:8c:b4:56:c8:de:90:
                    3a:8e:4b:5d:bb:e5:e8:ed:0f:17:69:b4:4b:36:47:
                    61:47:23:86:e1:31:52:5c:0b:67:21:3a:5d:95:96:
                    17:82:13:b7:27:3c:a1:e1:e7:fc:4d:49:ee:e8:70:
                    e1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:47:5E:2F:90:46:04:7C:60:AA:D5:0B:55:6B:FC:D9:32:6E:D0:5D
            X509v3 Authority Key Identifier:
                keyid:F2:62:40:65:F8:6B:4C:F9:84:8D:EC:7D:AB:86:A4:DB:86:C1:5E:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mJAZfhrTPmEjex9q4ak24bBXhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:e6:50:65:94:ba:85:51:6d:16:9e:30:fb:36:6b:4f:d6:9c:
         e7:92:4d:e2:43:99:b2:fa:55:17:b7:39:5b:9e:f6:f5:2b:20:
         f3:54:40:e1:95:ba:49:13:ca:fe:5e:c3:38:c7:6f:df:8b:30:
         53:42:4c:cd:b1:c1:ee:5f:a8:3c:ce:ec:d3:c6:e6:e8:1e:8a:
         e9:f3:f3:02:37:e8:d2:c1:59:7d:7e:dc:1a:4a:fa:db:9a:67:
         c0:c4:78:8c:a5:2c:c0:ac:fc:6e:e4:67:96:a1:05:45:ff:4c:
         ff:d7:8c:6a:c3:c8:81:0a:26:c2:56:86:53:e1:45:03:02:c9:
         07:2d:fc:73:91:8a:1e:e5:3f:81:7c:07:5e:53:38:8d:57:43:
         03:f9:d2:5a:f6:d7:02:40:80:b3:71:a5:cd:3c:05:a2:15:40:
         1e:5c:8f:a0:a0:e2:f3:60:81:56:d9:b8:ad:ad:c5:3e:05:8a:
         da:a1:cc:ac:11:f7:95:07:ad:69:91:bb:5c:c7:9b:03:70:da:
         f0:e4:b0:d8:8c:62:6a:fc:95:c4:41:0a:81:fa:d9:1c:d9:86:
         11:3b:31:f5:2c:3e:a2:ed:2e:28:05:46:6d:3a:aa:a3:63:85:
         9d:04:0e:9f:97:dd:84:a1:de:a3:4f:3a:01:15:84:cf:03:e8:
         cc:ba:b3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:46:13 2025 by rpki-client