Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
File:                     8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft (raw, json)
Hash identifier:          1zyMfo0/PYlIk9ogjuTEjO2lDrzag7QOXIOKPwo1WUo=
Subject key identifier:   23:2B:47:CB:4A:53:57:A8:61:98:FB:01:B7:F8:BC:9C:61:B8:4F:8A
Authority key identifier: F2:BF:FA:27:42:56:32:65:03:70:29:A7:8F:93:17:33:90:53:00:9C
Certificate issuer:       /CN=f2bffa2742563265037029a78f9317339053009c
Certificate serial:       0199228CBB8576E65056A5E12CC43857E116
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8r_6J0JWMmUDcCmnj5MXM5BTAJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
Manifest number:          0652
Signing time:             Sun 07 Sep 2025 05:01:12 +0000
Manifest this update:     Sun 07 Sep 2025 05:01:12 +0000
Manifest next update:     Mon 08 Sep 2025 05:01:12 +0000
Files and hashes:         1: 8r_6J0JWMmUDcCmnj5MXM5BTAJw.crl (hash: a67KNnkEkA5LgmNkYuJEXItmyiOiLC/UhEWklzm+QC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8r_6J0JWMmUDcCmnj5MXM5BTAJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:bb:85:76:e6:50:56:a5:e1:2c:c4:38:57:e1:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2bffa2742563265037029a78f9317339053009c
        Validity
            Not Before: Sep  7 05:01:12 2025 GMT
            Not After : Sep  8 05:01:12 2025 GMT
        Subject: CN=232b47cb4a5357a86198fb01b7f8bc9c61b84f8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d1:e1:74:44:41:ec:f4:11:2e:f0:6e:a7:5a:
                    f0:9f:57:dd:80:83:7d:e8:ab:64:77:28:a5:1b:9d:
                    cf:f8:57:62:7e:d1:65:47:c4:04:09:a1:84:20:6e:
                    4b:f3:91:e6:0b:62:06:b2:22:97:e2:4c:45:11:ed:
                    f3:36:ac:40:9b:f8:98:4a:1c:67:99:ff:45:36:b4:
                    b6:c1:ee:6f:a3:f7:6b:f8:fb:de:7b:99:ff:76:fb:
                    a4:fd:0b:b7:6e:a6:51:33:17:6b:ec:77:b5:3e:5a:
                    fd:28:75:06:3c:a9:9e:ae:0a:70:8d:76:14:5c:a2:
                    98:b7:c0:13:1a:e9:7a:41:ee:00:98:58:b2:a8:73:
                    9a:25:e2:41:06:50:28:a6:78:af:1a:7f:10:57:1b:
                    93:c7:56:9a:31:e7:4d:17:f8:68:fa:ce:2b:69:b7:
                    28:84:07:61:b9:5d:e2:14:55:92:64:77:cf:91:90:
                    17:82:21:66:1c:b3:48:24:cd:9f:83:67:1b:3d:95:
                    f6:95:92:02:a0:6c:b8:67:f2:40:8c:d4:e2:6a:4a:
                    9a:bd:ff:dc:cf:7d:30:a2:86:bb:f3:f0:89:cf:be:
                    90:bd:e4:76:21:f9:1f:19:ef:36:ec:d7:b8:a5:70:
                    c2:b2:cd:24:4d:fd:9c:f6:f6:7e:28:07:16:cb:c6:
                    21:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:2B:47:CB:4A:53:57:A8:61:98:FB:01:B7:F8:BC:9C:61:B8:4F:8A
            X509v3 Authority Key Identifier:
                keyid:F2:BF:FA:27:42:56:32:65:03:70:29:A7:8F:93:17:33:90:53:00:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8r_6J0JWMmUDcCmnj5MXM5BTAJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:02:65:e4:c7:d9:1c:ae:a3:ad:55:95:77:93:c6:c1:37:10:
         74:60:b2:5a:ba:cb:b7:97:5d:34:1a:9c:16:dd:0f:ac:1f:21:
         6c:76:ee:86:b3:90:e1:a2:bc:9b:96:53:41:19:ab:53:19:cc:
         a0:09:1d:7b:2b:a4:b0:18:e8:27:b2:17:8f:6f:9b:2a:b2:29:
         7e:6b:72:31:5a:12:89:be:92:81:9c:e6:76:4b:bf:d0:7e:67:
         ea:d1:c0:4b:ff:81:30:49:3d:8e:44:9b:3c:bb:b1:02:66:43:
         fa:14:58:f4:86:3c:e8:39:af:93:b9:57:dc:9d:5a:ea:14:b0:
         31:e8:c0:f8:24:d3:83:5c:aa:17:2b:da:51:62:65:0c:9b:c5:
         63:0f:4a:ee:fc:03:a3:2a:ed:c7:91:71:d0:1b:c6:fe:34:61:
         86:47:77:bd:d5:fa:86:80:24:1d:45:b4:33:67:41:79:a3:f9:
         52:eb:b8:52:0c:4f:bc:81:3d:5f:c1:cf:b2:22:88:93:83:5b:
         ca:a4:70:e4:98:29:c4:ed:24:dd:b6:b8:a5:82:24:4c:81:64:
         10:b2:b5:a1:eb:94:26:15:6b:86:ad:5d:69:ec:7d:30:7a:e9:
         99:f8:c9:8b:6d:0e:de:2c:c9:21:d9:dd:f9:66:2d:f6:10:e6:
         32:a0:85:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:38:14 2025 by rpki-client