Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
File:                     Ac8qcbLHv1QcbMBBUc0CB402mSY.mft (raw, json)
Hash identifier:          3+mLFWDoZKV2I0+A1w7qX4v99IR8rAarBhgPEb40rqo=
Subject key identifier:   88:0F:53:D4:50:E8:87:02:70:4F:1A:16:B6:CA:71:6E:84:18:16:F8
Authority key identifier: 01:CF:2A:71:B2:C7:BF:54:1C:6C:C0:41:51:CD:02:07:8D:36:99:26
Certificate issuer:       /CN=01cf2a71b2c7bf541c6cc04151cd02078d369926
Certificate serial:       01984A778F60886E0496BE46F5754598CF9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
Manifest number:          0308
Signing time:             Sun 27 Jul 2025 06:00:05 +0000
Manifest this update:     Sun 27 Jul 2025 06:00:05 +0000
Manifest next update:     Mon 28 Jul 2025 06:00:05 +0000
Files and hashes:         1: Ac8qcbLHv1QcbMBBUc0CB402mSY.crl (hash: 3cmQJwuO/KsXwNmPZzputp6OManlNDdlHDPiN2DHp2E=)
                          2: rygZTFCBNWEkh81f14PWqNNI1kI.roa (hash: Nw/ZIl2uHVeZMov8V5+Nv9xGTV5/WVlGxw5x2u+Et/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:77:8f:60:88:6e:04:96:be:46:f5:75:45:98:cf:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01cf2a71b2c7bf541c6cc04151cd02078d369926
        Validity
            Not Before: Jul 27 06:00:05 2025 GMT
            Not After : Jul 28 06:00:05 2025 GMT
        Subject: CN=880f53d450e88702704f1a16b6ca716e841816f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e6:e0:9c:8f:9f:4b:09:d6:f3:3f:90:49:3b:
                    19:7b:87:17:70:06:04:8d:1d:90:ad:79:45:a4:26:
                    b8:21:22:32:d6:11:b0:91:7a:af:4a:71:0e:f1:9d:
                    0d:59:04:22:77:ff:20:b8:7e:c6:3e:2b:94:3d:e7:
                    02:aa:89:45:c8:82:fb:27:f8:cf:a4:c4:d7:f5:38:
                    08:42:b8:e8:96:a1:26:12:eb:4e:cc:8a:c0:01:d3:
                    d0:1f:7e:05:cd:2a:56:9e:da:39:1b:ac:a5:69:fe:
                    6c:75:61:a3:3f:28:74:28:a3:a7:f2:7b:ec:17:de:
                    29:78:5a:6e:d8:86:76:84:11:52:2e:42:5c:73:5f:
                    31:fa:fd:32:7f:4a:dc:0f:dd:7e:22:6e:55:5d:30:
                    08:35:9d:e1:2c:53:d9:3d:0a:5e:71:8a:5f:ec:68:
                    4e:bf:07:fa:9b:f2:8f:3b:15:d7:95:b8:06:c4:f2:
                    ee:84:67:36:78:5c:72:bd:99:6a:d2:99:6f:d7:55:
                    bd:97:db:1a:00:3d:db:98:ca:09:04:9e:c4:2e:f3:
                    83:64:5f:04:50:e4:81:59:e9:c9:7e:84:23:73:fd:
                    45:6a:28:c1:e8:dc:88:6c:aa:bb:0b:cd:0a:c0:cd:
                    42:82:58:4d:53:78:5b:4d:04:76:f9:d4:81:da:85:
                    e6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0F:53:D4:50:E8:87:02:70:4F:1A:16:B6:CA:71:6E:84:18:16:F8
            X509v3 Authority Key Identifier:
                keyid:01:CF:2A:71:B2:C7:BF:54:1C:6C:C0:41:51:CD:02:07:8D:36:99:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:9c:ff:53:c7:53:97:35:e4:c3:1a:11:d5:c3:94:9e:98:d8:
         3c:de:d1:a3:bd:31:78:6d:a0:13:66:a7:aa:20:b8:9c:fa:23:
         21:a3:65:4b:2e:2d:d1:62:b9:ea:fb:2b:17:49:e3:20:f6:c6:
         11:4a:4a:a7:33:3a:c6:e5:28:26:0f:de:13:ee:d2:22:ab:10:
         1c:c8:dd:fc:42:e0:db:96:b6:11:d4:91:e4:c6:05:18:a8:de:
         11:18:e8:34:2e:04:20:94:bb:55:8d:45:4e:48:b1:37:80:0d:
         c5:19:3c:8f:a1:13:8d:bf:1a:61:af:24:a1:de:9c:ce:5a:fe:
         5b:a3:ad:03:56:b5:60:8f:8d:a6:6f:d1:d9:3a:58:2a:69:7f:
         ed:e8:77:06:77:f6:cb:2d:f2:b0:cc:b4:b5:04:38:e7:93:83:
         c5:59:70:2b:31:54:6c:5a:6e:d0:ee:17:de:bf:ff:3d:a9:bf:
         f7:1e:f7:d9:77:a5:f0:fc:23:de:a2:48:10:3a:d0:21:19:90:
         b2:e0:2a:94:42:58:ce:b7:68:16:85:96:91:d4:f0:89:26:8c:
         16:5b:5e:b6:32:03:1c:b4:39:28:b1:34:a0:aa:72:84:b6:5a:
         82:b8:73:76:a3:7a:95:fe:13:2c:9f:58:0b:c0:0d:b9:71:94:
         27:ee:fb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:11:23 2025 by rpki-client