Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft
File:                     8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft (raw, json)
Hash identifier:          swuyf2N1l49vU/QwxLfZULkZNHfYfUpkPCn4TyT+gtM=
Subject key identifier:   20:AB:BB:80:EB:63:96:91:09:97:55:78:97:72:99:C6:81:6C:61:9D
Authority key identifier: F3:EF:6A:6C:FC:E3:43:F9:14:C9:AD:94:C3:41:0D:A0:0A:7C:D1:CC
Certificate issuer:       /CN=f3ef6a6cfce343f914c9ad94c3410da00a7cd1cc
Certificate serial:       019875D172E971CCCCE43FC3A8F4599E6298
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft
Manifest number:          1571
Signing time:             Mon 04 Aug 2025 16:01:57 +0000
Manifest this update:     Mon 04 Aug 2025 16:01:57 +0000
Manifest next update:     Tue 05 Aug 2025 16:01:57 +0000
Files and hashes:         1: 8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl (hash: 0wCBDkX1T5XcQyNruakbpd3/9vx5jnVsB0odGY93wVM=)
                          2: C3nJIzqXqtfT9J07ejsBxjCr7Es.roa (hash: 0iPZreySqxS1TmgmvlfhSgIdLiwkUUv4lfeOkL5knpY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:d1:72:e9:71:cc:cc:e4:3f:c3:a8:f4:59:9e:62:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3ef6a6cfce343f914c9ad94c3410da00a7cd1cc
        Validity
            Not Before: Aug  4 16:01:57 2025 GMT
            Not After : Aug  5 16:01:57 2025 GMT
        Subject: CN=20abbb80eb63969109975578977299c6816c619d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8c:44:25:a7:1f:5b:82:a2:ab:68:16:b3:c0:
                    d8:3b:d0:6e:bc:7e:54:2c:53:d0:02:15:cf:7f:53:
                    05:6b:4e:14:f7:67:8d:e4:1d:c5:34:72:98:91:b9:
                    ae:3f:13:a9:c4:68:ad:94:f8:5c:a6:1d:4c:23:47:
                    1a:c5:05:f1:d2:84:5f:5b:48:a1:20:29:31:c8:74:
                    c0:3c:f2:0c:57:da:97:cb:ee:85:d9:aa:95:74:72:
                    6f:5a:83:dd:9c:2f:4c:b7:0a:70:51:c2:1b:b0:2a:
                    26:da:da:a8:bf:c0:f5:6c:74:0b:58:f3:e1:15:e5:
                    f5:86:22:85:89:97:95:f5:27:d1:aa:04:92:62:06:
                    50:a2:72:03:30:1b:d9:d4:de:0b:8b:7d:3a:3f:35:
                    ef:79:f2:d9:2f:b5:6c:ab:04:2f:13:0f:38:36:7e:
                    c3:56:cb:74:50:55:72:49:4f:e5:94:2a:11:13:7b:
                    28:26:b1:c4:5f:f1:f7:50:e1:e9:f6:ef:35:11:d8:
                    fd:b2:41:2d:a5:ab:65:9e:6c:f3:cb:e1:2f:98:b7:
                    38:f3:3b:22:71:26:92:b5:5f:c7:47:de:54:5b:e3:
                    55:50:f6:cf:8f:6b:3e:f2:39:59:09:a5:91:d1:b8:
                    0e:92:ef:44:c4:b5:47:3d:f3:ca:08:ff:90:96:07:
                    b7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AB:BB:80:EB:63:96:91:09:97:55:78:97:72:99:C6:81:6C:61:9D
            X509v3 Authority Key Identifier:
                keyid:F3:EF:6A:6C:FC:E3:43:F9:14:C9:AD:94:C3:41:0D:A0:0A:7C:D1:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:3e:21:75:1b:26:47:d8:8e:c8:e9:d0:d6:e3:ac:1c:e3:9d:
         36:89:c0:fe:68:5f:af:e8:23:76:88:5d:0b:e7:28:23:ce:2e:
         cf:f6:ec:39:e0:a9:be:cd:a7:d0:9a:e5:0f:01:b6:be:56:cd:
         ee:2e:b5:69:51:05:c6:78:39:17:20:2c:fc:12:65:94:9f:55:
         b6:58:27:1d:61:62:01:ea:de:a7:8d:2b:1e:f8:3d:7c:b6:4e:
         ae:4b:45:91:cf:bf:97:12:27:ac:df:50:66:23:d5:53:00:76:
         af:08:6c:16:e6:14:c4:a2:44:cb:65:be:64:24:c5:fc:37:4d:
         19:4c:ce:ea:d6:c8:c6:f7:0b:1f:97:31:ca:4b:49:4e:d0:da:
         64:b8:8c:82:5a:7f:b4:fa:78:d1:67:cf:0d:e2:2f:9d:b2:aa:
         eb:53:9e:75:e6:d2:96:63:ee:fc:ae:4b:cf:a0:a9:d9:b1:c8:
         0d:e0:da:ca:43:e1:df:09:fc:1f:18:eb:27:b5:78:32:5a:60:
         f3:71:43:8f:d3:8e:de:44:7e:54:e1:3d:bd:46:c3:4c:f4:9b:
         72:f4:97:f0:8d:fe:2f:6c:d2:8a:04:ff:12:8c:cf:bb:4f:ba:
         1c:3e:2f:ed:bc:6a:0e:29:7a:cf:3d:71:c7:55:09:4e:83:6f:
         9d:bd:0d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:23:20 2025 by rpki-client