Manifest

$ rpki-client -vvf rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft
File:                     8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft (raw, json)
Hash identifier:          MtEVxjbe6nkN3k6Ho2wrBQfX53BbVw90o9Er84/HOJ8=
Subject key identifier:   E0:7E:7F:12:42:18:79:91:4E:CA:B3:51:66:C4:AF:2D:13:D8:8D:3D
Authority key identifier: 8C:0F:9F:7A:A9:3B:A1:73:5F:59:A0:04:E3:77:10:C5:1D:FB:B5:93
Certificate issuer:       /CN=8C0F9F7AA93BA1735F59A004E37710C51DFBB593
Certificate serial:       65BE762F0FC1AF8A73EDC1327895C80E3E7FFDB9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer
Subject info access:      rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft
Manifest number:          8D
Signing time:             Wed 08 Oct 2025 07:43:06 +0000
Manifest this update:     Wed 08 Oct 2025 07:38:06 +0000
Manifest next update:     Thu 09 Oct 2025 07:58:06 +0000
Files and hashes:         1: 326130363a313238323a3a2f33322d3438203d3e2030.roa (hash: vJ0qkMWpV2OnLAFXaBz+BxlK7kNKmj7zan157wdGWzQ=)
                          2: 38392e3138372e36392e302f32342d3332203d3e20323035383438.roa (hash: htr7q3jqwGtRhcinI8choYJGldgn6DHWcxEmRIqoS04=)
                          3: 326130363a313238323a32303a3a2f34342d313238203d3e20323035383438.roa (hash: XIquqk5eatu7MDG7vJzzV3gWKxyFgt5TX70n+ScWh0Y=)
                          4: 326130363a313238323a3a2f34342d313238203d3e20323035383438.roa (hash: r2TeINFddDk6FLNy1P02Sojy5Y0A05B3sX9lm7yGZIc=)
                          5: 32372e302e3233342e302f32342d3332203d3e20323035383438.roa (hash: Hbng6Qs3gtMCfgNOvlhVaZG81qH5D1zb+3kXz9K52lY=)
                          6: 38392e3138372e36382e302f32342d3332203d3e20323035383438.roa (hash: XXcmCcNAJFyusTP4fLJdInjZVJsyLkvh3OAm7Ll9RAg=)
                          7: 32372e302e3233352e302f32342d3332203d3e20323035383438.roa (hash: DCknWSFkXEL9nevlPCXr7YdoenSsMMYUI7/Zj/O4jvs=)
                          8: 8C0F9F7AA93BA1735F59A004E37710C51DFBB593.crl (hash: 8RwcaGkrKtNtpijrFYMp1l7FYTGtrt5fdSoYUQ55uu4=)
                          9: 326130363a313238323a33303a3a2f34342d313238203d3e20323035383438.roa (hash: ONwiyOYFzhgKKPFJfWzCUzPFz/scs7X8q3Hvxa24A0Y=)
                          10: 326130363a313238323a31303a3a2f34342d313238203d3e20323035383438.roa (hash: ysQzKr2LfpHKgKtqaoHWNDP3ZdvLo0/OVzWjgd0/KDE=)
                          11: 326130363a313238323a34303a3a2f34342d313238203d3e20323035383438.roa (hash: tycFKYP/anx2JiNOOjsQ3oPM2wjVx4azas7m8j+efRE=)
Validation:               OK
Signature path:           rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.crl
                          rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Oct 2025 07:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:be:76:2f:0f:c1:af:8a:73:ed:c1:32:78:95:c8:0e:3e:7f:fd:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C0F9F7AA93BA1735F59A004E37710C51DFBB593
        Validity
            Not Before: Oct  8 07:38:06 2025 GMT
            Not After : Oct  9 07:58:06 2025 GMT
        Subject: CN=E07E7F12421879914ECAB35166C4AF2D13D88D3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d6:58:77:32:8a:40:d3:c9:e0:1d:a3:1e:0d:
                    1c:9c:89:e5:3c:ac:b5:aa:49:67:e4:25:b7:d0:d1:
                    50:af:98:66:d1:8f:02:88:9f:82:9e:0d:98:25:22:
                    62:2d:e3:4f:c5:94:9d:e6:b3:d3:34:43:85:fc:d0:
                    9d:dd:f5:4d:24:fb:67:11:bb:ef:9b:87:f4:74:27:
                    1b:cc:3c:3b:97:c6:ec:14:13:01:41:4e:4f:dc:a4:
                    3f:79:68:50:8e:7d:0c:d2:4f:58:2a:90:d3:27:6c:
                    e0:46:8a:00:f3:b8:7b:c2:9e:c1:75:aa:d5:3b:1b:
                    5f:ee:23:27:4e:9b:5e:14:dc:63:c5:1a:bb:d3:8d:
                    e2:66:c4:35:f3:d9:8c:ab:ac:97:0e:d4:c7:41:a6:
                    12:b1:1c:2b:be:c1:b1:e9:8d:ec:3d:ce:a1:a2:94:
                    1f:a7:45:82:dc:bc:88:a0:42:a7:bd:5f:37:dd:3b:
                    f7:06:1c:f1:12:c1:bb:14:37:9a:df:21:5e:b7:1a:
                    80:82:4b:82:24:b6:76:c1:e3:e5:73:4d:f1:f2:c2:
                    6a:c1:f9:89:b3:c4:51:02:d6:4b:5e:ef:24:58:4b:
                    b3:e3:5e:64:e7:94:85:6f:cb:42:77:33:4b:3a:d0:
                    39:4e:81:cc:cd:ae:96:ce:e8:e5:93:7b:81:b4:52:
                    31:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:7E:7F:12:42:18:79:91:4E:CA:B3:51:66:C4:AF:2D:13:D8:8D:3D
            X509v3 Authority Key Identifier:
                keyid:8C:0F:9F:7A:A9:3B:A1:73:5F:59:A0:04:E3:77:10:C5:1D:FB:B5:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:c1:85:7f:0a:f0:09:55:ee:7a:f0:f3:3e:b6:c4:29:87:6f:
         41:8f:3d:6f:b4:50:2e:83:28:46:a1:1e:ac:ad:bb:08:c8:ab:
         32:09:8c:af:cf:51:fe:73:4c:68:6b:d4:66:76:5f:e5:40:a7:
         12:e2:2c:64:7e:0d:67:5f:b9:4f:97:66:fb:6d:38:27:ac:a7:
         ae:ce:89:95:68:38:d5:bc:1c:e7:83:55:7c:4f:36:25:02:c5:
         86:8c:62:49:c0:24:b7:2e:70:68:a6:a8:0d:e2:a2:2e:ba:ed:
         e0:d5:55:33:05:30:d8:95:15:e8:ac:68:17:0e:6f:6c:89:68:
         da:7f:03:d6:51:f3:3c:de:c3:19:a5:46:51:56:81:a3:78:35:
         34:0b:0c:37:52:20:bb:60:bc:ca:df:8d:43:99:8c:5f:27:2c:
         89:48:4e:f4:5f:bd:de:16:c3:59:59:8f:bd:ad:15:be:05:cd:
         51:e6:07:90:9a:18:a2:87:95:f9:2f:78:80:2f:1e:1e:c9:b8:
         c1:7a:1b:68:73:83:15:86:9b:8c:1c:df:ab:9a:a9:93:98:f1:
         ef:78:66:97:d2:43:34:34:81:91:e6:8b:32:f7:67:38:58:32:
         67:38:03:54:26:d6:83:e9:39:b4:58:70:e2:f6:fd:e1:54:df:
         9b:53:80:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 17:25:20 2025 by rpki-client