Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
File:                     K8J94IFvfguHpzPdMZkInlN_Jhw.mft (raw, json)
Hash identifier:          dwCH4GtZVpd3svKbFQz9D+ptVegveW/eULRAltTQjQg=
Subject key identifier:   C8:52:89:31:C6:3D:92:5F:A0:CE:B2:99:DC:50:69:C1:B7:ED:56:B6
Authority key identifier: 2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C
Certificate issuer:       /CN=2bc27de0816f7e0b87a733dd3199089e537f261c
Certificate serial:       019897811B94C0DC4A2267F32F05D5060491
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
Manifest number:          0C1A
Signing time:             Mon 11 Aug 2025 05:01:17 +0000
Manifest this update:     Mon 11 Aug 2025 05:01:17 +0000
Manifest next update:     Tue 12 Aug 2025 05:01:17 +0000
Files and hashes:         1: 37DCbHhm2sTXZoKnRAO3SOggtQQ.roa (hash: +uLJpv1JAEXe6w9bK9Js8rFmAHbw+aILnxdKvgw5Rzc=)
                          2: K8J94IFvfguHpzPdMZkInlN_Jhw.crl (hash: cEBPHUsYDcRr0RQG4a4rmnMiH3A/HbQ92IaaYZUe7A4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:97:81:1b:94:c0:dc:4a:22:67:f3:2f:05:d5:06:04:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc27de0816f7e0b87a733dd3199089e537f261c
        Validity
            Not Before: Aug 11 05:01:17 2025 GMT
            Not After : Aug 12 05:01:17 2025 GMT
        Subject: CN=c8528931c63d925fa0ceb299dc5069c1b7ed56b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0d:42:b6:9d:5a:bc:39:a9:2e:d9:cf:fb:2f:
                    1f:57:49:49:3d:84:e6:36:f4:34:88:b8:12:ea:f5:
                    53:72:6e:36:f7:dd:63:25:60:8d:13:9d:9f:ef:82:
                    f4:1f:6c:9c:71:68:c0:ea:eb:f7:e7:82:4f:e6:76:
                    12:21:15:f1:1e:fa:6a:05:a3:78:cb:29:7c:fd:1b:
                    2a:b3:1f:28:8b:a3:5d:72:e4:7b:6b:6d:73:b4:f8:
                    d8:ed:30:e1:55:36:eb:b9:d1:f3:1e:44:61:5b:b0:
                    90:f5:17:3f:8c:9c:46:e8:fe:fa:e2:47:0d:b5:1b:
                    67:7e:6f:14:1e:00:9b:96:59:1a:7b:6e:76:b3:2f:
                    27:2b:87:65:ff:d9:8b:8d:a5:20:b4:f2:57:ee:0a:
                    3c:66:e5:51:eb:64:c5:76:2f:72:b3:34:fa:68:05:
                    5a:42:a2:ad:ae:a0:e1:c2:3c:9f:a9:b1:05:01:3c:
                    d3:06:31:9a:f8:9d:ee:a4:5e:bd:82:7b:b3:de:75:
                    a7:cd:a2:25:38:1a:4f:f5:f5:bb:7d:47:bc:d4:87:
                    ab:57:93:28:ac:94:32:80:32:dc:70:dd:cc:d9:45:
                    c9:10:4b:a9:28:ec:f3:58:00:f1:6e:5f:9f:93:de:
                    98:14:a4:bf:65:a3:05:cf:bf:c8:be:5b:26:a3:d1:
                    df:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:52:89:31:C6:3D:92:5F:A0:CE:B2:99:DC:50:69:C1:B7:ED:56:B6
            X509v3 Authority Key Identifier:
                keyid:2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:9d:ef:20:c7:3d:6a:b7:65:0f:04:02:11:b9:5b:e3:04:b2:
         66:58:2c:16:c2:3a:07:35:1a:ec:7a:5f:d3:92:cb:52:da:54:
         e3:05:c3:55:ed:76:5f:6c:58:55:e1:fb:44:28:f9:da:f1:2c:
         57:6d:94:c9:8a:65:44:dc:54:99:9d:3f:ee:23:91:7f:76:19:
         60:7d:f6:e2:7a:42:87:ee:87:c3:e2:42:97:93:1c:50:2c:c5:
         44:84:27:50:60:bb:7b:66:e3:9b:60:9c:b5:9d:6a:8c:a1:bf:
         61:05:11:10:e6:55:19:56:ac:40:fe:87:24:57:6d:f3:79:ba:
         53:ba:ab:ed:53:7c:0c:f2:8b:29:95:69:e7:c8:54:03:a6:a3:
         8a:1f:9a:45:9a:32:0f:df:7a:cc:13:bb:cd:cc:40:56:95:50:
         bf:a6:49:3b:b6:9f:8a:2f:74:c4:b4:25:a5:13:d9:be:44:73:
         30:df:76:75:44:da:34:5f:83:25:67:63:49:47:64:9b:70:ff:
         d9:c1:7d:11:9d:bf:c0:65:42:48:5d:73:8d:d8:72:e1:75:bd:
         3b:86:28:8e:ca:3f:6a:37:9f:2f:5b:34:eb:61:de:99:bc:00:
         95:eb:d6:52:eb:e7:d7:49:b2:6e:81:a0:b3:64:a0:7f:ec:25:
         21:ef:32:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:33 2025 by rpki-client