Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft
File:                     8eV-NQ06bbilgFWSmfC504vMWVI.mft (raw, json)
Hash identifier:          /S2TxAEgIkCzI34Grd8Qjm3nKeXsTuiU23VdC5TsaYA=
Subject key identifier:   ED:49:1C:FC:EB:28:04:50:9D:EC:91:C7:B8:40:79:7B:48:D7:0C:97
Authority key identifier: F1:E5:7E:35:0D:3A:6D:B8:A5:80:55:92:99:F0:B9:D3:8B:CC:59:52
Certificate issuer:       /CN=f1e57e350d3a6db8a580559299f0b9d38bcc5952
Certificate serial:       0199221EB0FE98E2DD62340977BC81B19BDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8eV-NQ06bbilgFWSmfC504vMWVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft
Manifest number:          0207
Signing time:             Sun 07 Sep 2025 03:01:00 +0000
Manifest this update:     Sun 07 Sep 2025 03:01:00 +0000
Manifest next update:     Mon 08 Sep 2025 03:01:00 +0000
Files and hashes:         1: 8eV-NQ06bbilgFWSmfC504vMWVI.crl (hash: ZJaLZbA/kXxvVMWGHM/0F1VFbwirt/FEsvoTdqKelwU=)
                          2: sW8bwiGLsI7Vh96L_GlmvLQDJKY.roa (hash: zwPk0zZ0KWeH/lkVto00u9mSsOX9BDpbaWABcwD0yq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8eV-NQ06bbilgFWSmfC504vMWVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:b0:fe:98:e2:dd:62:34:09:77:bc:81:b1:9b:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1e57e350d3a6db8a580559299f0b9d38bcc5952
        Validity
            Not Before: Sep  7 03:01:00 2025 GMT
            Not After : Sep  8 03:01:00 2025 GMT
        Subject: CN=ed491cfceb2804509dec91c7b840797b48d70c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7a:63:7a:02:9a:b5:ce:23:e2:4c:e8:60:04:
                    ca:70:47:f0:90:89:cf:ce:e7:7d:75:08:a8:ed:36:
                    ae:37:e7:66:64:2c:a8:33:e4:a6:53:80:e7:45:0f:
                    f4:de:09:eb:50:c1:b5:7e:8f:6a:eb:81:88:a6:27:
                    0a:44:79:8b:6c:5d:04:98:fa:f9:c6:a6:59:52:eb:
                    2c:db:76:a8:83:4f:ce:fd:f6:ec:56:da:c2:57:9d:
                    27:c6:4e:af:7a:a2:df:db:ed:fc:6b:6e:b0:bd:35:
                    6d:5b:62:6a:b3:3e:d4:5c:b4:9b:b2:12:52:1f:9b:
                    2a:57:fd:15:8a:16:6f:9d:0e:ef:5b:25:eb:f9:ac:
                    7b:90:0e:a4:aa:1e:cb:3f:cb:56:09:fd:48:77:4b:
                    81:8f:68:fa:73:81:84:46:09:a9:4e:f7:ae:2c:fd:
                    10:25:97:d0:ed:24:9e:f7:4c:4a:bb:93:9b:11:53:
                    1d:5c:59:86:ec:ef:f7:87:a6:11:1c:4f:48:45:1f:
                    81:22:df:07:64:46:df:27:34:bc:61:67:a9:8a:e6:
                    31:d7:10:15:c4:03:bd:66:60:23:56:8c:20:dc:27:
                    43:47:4e:64:e4:66:63:df:90:99:b3:9c:17:0b:0b:
                    f8:f7:e0:ca:43:ef:1a:e4:e0:56:f7:65:ed:13:15:
                    30:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:49:1C:FC:EB:28:04:50:9D:EC:91:C7:B8:40:79:7B:48:D7:0C:97
            X509v3 Authority Key Identifier:
                keyid:F1:E5:7E:35:0D:3A:6D:B8:A5:80:55:92:99:F0:B9:D3:8B:CC:59:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8eV-NQ06bbilgFWSmfC504vMWVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:af:cd:08:93:ba:ae:26:29:85:87:be:46:81:c0:6e:31:12:
         3f:74:6a:1f:86:e2:06:bd:2d:d6:c2:a0:64:8f:82:ef:e6:d2:
         d3:87:4f:27:2b:e2:e4:89:3b:5b:82:89:a7:e6:a2:1a:5f:40:
         63:74:7e:ce:b1:46:60:de:e5:94:60:90:6d:5c:e0:0e:85:21:
         ed:64:59:a4:ed:3b:af:84:fe:14:c5:6d:6a:41:55:68:2e:d2:
         0e:2e:2e:3f:cd:e4:5d:75:9e:db:a6:67:be:f0:24:1d:87:3b:
         2b:7b:b6:f2:7b:51:b3:f1:88:15:da:b3:63:7b:bb:0c:fa:c7:
         47:1c:e6:58:72:89:e4:ba:cd:d7:1c:a6:29:be:97:58:21:f1:
         95:4a:cc:cc:a7:0f:3a:7f:59:28:86:7e:9e:8b:51:4c:4c:b8:
         5f:ef:14:6b:6e:bb:c8:29:c6:37:c9:35:2a:00:d5:38:fa:73:
         df:e1:69:5b:c5:77:bc:f5:95:1e:23:d4:ad:c4:a7:cc:76:32:
         38:87:42:a9:37:a8:29:64:ba:4b:07:7b:10:0c:c7:38:dc:7d:
         65:7f:1c:c3:76:4d:c0:32:b0:0d:75:15:80:58:c3:4e:a2:f0:
         98:6d:87:62:67:3e:70:6f:d7:51:20:1d:e6:93:9b:bf:ef:a9:
         27:7e:35:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:32 2025 by rpki-client