Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
File:                     8rwR5uzToK8-5DlNy7ez75AYfTA.mft (raw, json)
Hash identifier:          38OK8qX4R8dI/QiuglLJPGTR5LszTTH8IQ8s3rnyDYs=
Subject key identifier:   E8:7B:35:36:80:22:D7:F1:16:55:5C:C8:B2:3F:F8:1D:C0:8D:F1:32
Authority key identifier: F2:BC:11:E6:EC:D3:A0:AF:3E:E4:39:4D:CB:B7:B3:EF:90:18:7D:30
Certificate issuer:       /CN=f2bc11e6ecd3a0af3ee4394dcbb7b3ef90187d30
Certificate serial:       01992255A1ACF088A65578C658A1C8C124C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
Manifest number:          09F4
Signing time:             Sun 07 Sep 2025 04:01:01 +0000
Manifest this update:     Sun 07 Sep 2025 04:01:01 +0000
Manifest next update:     Mon 08 Sep 2025 04:01:01 +0000
Files and hashes:         1: 8rwR5uzToK8-5DlNy7ez75AYfTA.crl (hash: EiP7SsJfBN202hw0glZdlnjjAgDuYH7poJdDFiiarPc=)
                          2: Jt10BH3qKoOGqx6R1oafXbYBRvg.roa (hash: 9VB1KYRqUDPucDZfXSnHKaNbHiQLBOlnBbvyv/YEMkA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:a1:ac:f0:88:a6:55:78:c6:58:a1:c8:c1:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2bc11e6ecd3a0af3ee4394dcbb7b3ef90187d30
        Validity
            Not Before: Sep  7 04:01:01 2025 GMT
            Not After : Sep  8 04:01:01 2025 GMT
        Subject: CN=e87b35368022d7f116555cc8b23ff81dc08df132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f2:69:c7:6f:50:60:aa:8a:4b:6a:ff:a8:10:
                    f7:7f:a0:6b:e4:73:96:18:6c:ef:51:60:f5:d3:c6:
                    a5:26:e2:27:ae:13:66:51:7d:fd:f9:15:4f:0d:e3:
                    1a:e1:84:58:c3:d3:5e:28:94:17:dc:f1:fa:ed:25:
                    c5:48:9b:3f:d0:64:24:0f:dd:24:f8:47:f9:bf:b9:
                    51:9a:9b:f0:18:8c:19:a9:36:b8:7a:f5:31:21:04:
                    ee:23:ea:ca:48:1c:c6:a3:03:cf:c4:9b:08:a0:0f:
                    71:7b:81:91:8c:04:1e:46:25:d6:5d:10:b9:9f:d2:
                    c2:d9:c1:20:94:19:da:58:41:b9:f1:cc:1c:47:58:
                    e5:c3:ab:dc:84:fd:80:20:2a:9a:3c:3f:01:7d:87:
                    2f:ae:c6:02:3a:95:71:a0:c8:46:2d:2a:99:87:8b:
                    93:47:84:30:4a:ef:fd:5c:b9:2c:0e:3d:04:27:57:
                    d0:8a:88:4b:2b:c2:52:e8:f1:00:da:df:c5:4e:8d:
                    a3:3d:b2:f5:41:68:1e:ed:fe:1c:fb:20:a4:1f:95:
                    56:24:b3:c1:e2:71:70:e2:63:ff:81:8e:98:85:ee:
                    a2:2c:9b:4d:ad:5d:d1:34:fa:28:b2:f3:24:f1:2a:
                    6d:c0:6f:d5:15:93:28:77:65:f6:a3:ce:23:f7:46:
                    7e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:7B:35:36:80:22:D7:F1:16:55:5C:C8:B2:3F:F8:1D:C0:8D:F1:32
            X509v3 Authority Key Identifier:
                keyid:F2:BC:11:E6:EC:D3:A0:AF:3E:E4:39:4D:CB:B7:B3:EF:90:18:7D:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:7a:96:de:f5:ec:a8:b1:65:33:79:a4:25:fa:47:f5:e5:21:
         ad:b2:e4:13:b6:19:ea:a9:c3:02:a8:00:d5:d4:cf:56:27:bf:
         7c:3f:8a:61:cb:b5:76:8f:89:8b:10:47:ae:d3:23:da:a3:f4:
         4d:e5:8c:45:75:ac:3d:b8:dd:85:1f:52:6a:c4:2b:fa:22:a1:
         0c:cb:f5:bc:52:be:da:5c:c0:5d:48:ba:b7:ce:71:88:2a:10:
         61:40:ad:79:8c:64:9d:55:e2:16:f4:53:c2:b8:96:d0:c2:44:
         54:bb:19:cd:58:2f:a8:a5:7f:c0:a4:9c:48:d5:2b:39:ff:62:
         0a:de:5b:d3:24:4c:a8:ef:58:d8:e8:a7:03:73:1a:2a:96:22:
         a1:4b:de:56:11:7e:6b:35:9d:2c:6f:a3:60:61:cb:6e:4d:7c:
         31:dd:1e:6d:83:11:3a:a5:50:5d:c1:1a:3a:b8:70:cc:4a:d2:
         4f:01:ae:4b:ae:ac:c7:6d:ec:78:fb:de:7e:55:4c:3e:11:b5:
         63:08:18:c7:24:e6:45:07:16:fa:82:cd:53:00:7f:d6:69:24:
         fe:78:15:cb:90:70:c9:30:2e:dd:37:3c:bb:73:56:0f:a9:19:
         29:dd:fe:9c:50:c7:23:ea:d7:8d:1d:f1:5d:0b:ea:ae:3c:f4:
         b7:3a:52:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:26 2025 by rpki-client