Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
File:                     8XShpC1Ap_uCpsCM6XZRy2ar83A.mft (raw, json)
Hash identifier:          ZTc7O3HG0wfyLsQF3P8AKkJSnUF9GCgQYvDSw8HmxwQ=
Subject key identifier:   F8:4C:7C:97:2D:D8:A9:BC:01:57:9A:9A:5C:D9:10:27:3A:27:63:16
Authority key identifier: F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70
Certificate issuer:       /CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
Certificate serial:       019874504644A97613DAA3C0430A0DE1E947
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
Manifest number:          0A17
Signing time:             Mon 04 Aug 2025 09:01:14 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:14 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:14 +0000
Files and hashes:         1: 8XShpC1Ap_uCpsCM6XZRy2ar83A.crl (hash: 4wjKCIvQHR0BYr+oWXxijCLV1bX9GwwsLJZzWxjKrn4=)
                          2: Jzc1N5JK_K9rsqLLazjrhQAzn9E.roa (hash: c37u7+7V7zO9cUACPw1X9wuITqfc2J+4zg3NEuS9Gzw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:46:44:a9:76:13:da:a3:c0:43:0a:0d:e1:e9:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
        Validity
            Not Before: Aug  4 09:01:14 2025 GMT
            Not After : Aug  5 09:01:14 2025 GMT
        Subject: CN=f84c7c972dd8a9bc01579a9a5cd910273a276316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8d:cd:4e:f0:f1:b8:c0:d7:24:8f:e8:c1:e4:
                    99:bc:3a:bf:2d:6b:71:1b:56:6a:ba:b2:c9:15:ff:
                    f9:e2:f3:07:f6:4a:85:b1:c6:3e:74:bd:69:a1:b6:
                    4f:40:93:d7:98:cb:23:1d:cf:ee:a6:69:02:f5:13:
                    5e:30:4d:22:10:5a:33:a9:a4:31:f9:37:c8:7c:8a:
                    d3:9c:9f:18:ed:1c:c6:95:56:4e:3b:cc:7a:93:96:
                    45:30:b7:3c:0b:44:06:9a:bf:1a:25:90:68:c0:74:
                    33:de:81:11:fc:5c:d3:6c:d0:b4:ec:ae:fa:29:ce:
                    1f:5e:12:4d:e8:f6:97:8f:b3:78:70:4e:89:6c:0f:
                    10:24:ec:e0:1c:90:91:6b:f9:e7:62:e4:ab:da:9b:
                    ac:8d:2a:d2:6c:05:4e:17:70:af:89:93:66:19:94:
                    48:ec:71:c6:ba:ac:f3:0d:56:f8:a9:d1:f5:c8:ec:
                    63:03:f9:56:13:4d:c0:45:fc:40:09:9c:ef:46:de:
                    17:f0:ad:29:ea:94:c4:48:d0:1b:4c:7d:da:79:0e:
                    11:ce:59:91:7c:b9:09:6b:7c:10:56:21:da:c4:71:
                    d2:df:b9:3b:7d:f2:32:b7:c1:fb:95:13:53:ab:0c:
                    79:75:6b:12:09:da:29:14:fa:80:94:72:73:21:b7:
                    f6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:4C:7C:97:2D:D8:A9:BC:01:57:9A:9A:5C:D9:10:27:3A:27:63:16
            X509v3 Authority Key Identifier:
                keyid:F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:15:db:b7:04:22:f4:78:9e:bf:2d:24:30:01:02:1a:a4:07:
         a7:62:26:fa:8c:c0:d9:0e:22:68:1e:af:10:ca:ad:5e:06:e0:
         0e:25:be:b8:21:c7:2a:64:54:1d:39:26:30:cd:ba:6b:79:47:
         44:f7:25:12:0c:01:a0:2a:d0:45:ef:c0:99:39:82:c1:eb:ee:
         db:f9:e0:3d:cf:09:01:e6:a6:45:54:ac:6f:73:f6:e0:e0:10:
         78:72:c7:35:06:07:eb:f9:53:aa:fa:8a:c3:d7:0a:9c:f9:9f:
         85:98:fe:58:57:30:67:df:d0:db:4b:70:aa:4f:95:ab:41:6f:
         0a:f2:56:73:c0:f2:c8:01:ed:63:fa:6b:e6:10:9c:14:07:20:
         66:eb:71:94:36:8d:93:2f:01:e8:8d:a2:fb:65:17:8a:dd:8a:
         e4:0d:8a:6c:c0:42:46:76:de:c3:4e:4f:2b:13:86:b3:2c:1d:
         75:73:79:34:8c:c6:65:02:e1:4c:2a:14:5c:0e:08:1e:a6:5e:
         ad:9a:47:c9:8b:dc:7b:7c:2f:f9:4b:5b:fa:8e:a9:21:f2:7f:
         4e:c4:e3:56:69:c5:4b:0e:91:bd:d6:c1:34:88:9b:48:c1:48:
         d8:7e:a9:dc:ad:60:f9:83:ce:0f:d5:26:b3:32:75:a2:a1:07:
         c0:89:7b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:18 2025 by rpki-client