Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
File:                     08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft (raw, json)
Hash identifier:          e6qUAHft0+DhVMWa/lRN+JGLus46xKA/jrgaQF1eYRY=
Subject key identifier:   37:4F:54:C2:A4:0A:E9:06:43:E7:93:BF:F2:23:A9:9C:08:7D:12:C5
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Certificate issuer:       /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial:       01987185CD20B2ED984943C735CB81597352
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
Manifest number:          0F1F
Signing time:             Sun 03 Aug 2025 20:00:50 +0000
Manifest this update:     Sun 03 Aug 2025 20:00:50 +0000
Manifest next update:     Mon 04 Aug 2025 20:00:50 +0000
Files and hashes:         1: 08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl (hash: DCcdTDcmQY5U/sEjdZXRoE0B7bIOda2qVJFv7EeV5t8=)
                          2: 7mmdjWWJmGS-vmCt9zKLVanQOig.roa (hash: v3B4itYx8bwIEJo8vTH9R8LfCusaaVboh9GULcqhFv0=)
                          3: 84x3PaWcAMu4m9T5fa870PeiheE.roa (hash: a/9oxv4KvgEVgoCDMjJiyZ098edxxir4zBlBcmgb+Nc=)
                          4: 8oVnFmnZQ6g3DgOCU4fa-xXKM0M.roa (hash: WAgABCVYzqzdS7ih7BzGE2XubSeh6oG7CHudT5s6okI=)
                          5: EwyH9BAjtoD2Z_-VeZDUnOsIv2Y.roa (hash: aPdNP9kPyO6s7X261JfkO9iTF/P50zRcpOMkSUNk4gw=)
                          6: LRBNHwJVIe5U-tx5ltJlZ1Y5Wnk.roa (hash: sNwZNLHLrboe1P+i7NUkF9wqk+vWL2VdAj76ljlm25k=)
                          7: funJ0mIYmkKs_8uVGo-vQCokonQ.roa (hash: qmb7QHLfc2zdqb0CIdCWUFtYQRPCloznt/XeNxyA8CI=)
                          8: z_xjUJTiEKv8bjMjchy_X7D7OCQ.roa (hash: BG1R3SjDVfF87nLXGEYo43+Amx8QhcAgHlV3s9chlbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 Aug 2025 18:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:71:85:cd:20:b2:ed:98:49:43:c7:35:cb:81:59:73:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
        Validity
            Not Before: Aug  3 20:00:50 2025 GMT
            Not After : Aug  4 20:00:50 2025 GMT
        Subject: CN=374f54c2a40ae90643e793bff223a99c087d12c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fb:e0:32:d3:a3:d2:f1:f2:aa:6b:46:85:cc:
                    d2:a0:56:91:07:c3:9d:42:2e:ee:8c:cb:d7:60:7f:
                    93:93:57:55:ab:a2:68:06:9d:bc:02:16:94:01:00:
                    27:ec:19:8e:03:e7:a8:11:d0:18:68:e3:ca:c0:7e:
                    1a:96:a4:d4:f1:bd:6e:ce:84:cb:e3:23:9a:82:1a:
                    b9:5c:28:31:b0:24:36:4a:83:ac:00:e9:38:25:33:
                    8e:34:ac:9d:d1:a7:0d:03:73:b5:2e:b0:66:42:21:
                    28:fc:10:4a:b5:7d:99:22:86:66:f7:1c:04:c1:4c:
                    b6:ba:46:50:4b:6d:21:fd:c3:a5:61:a2:85:41:8b:
                    7d:ac:90:d0:88:ac:50:69:d5:de:13:54:39:cf:7a:
                    84:95:d9:76:d1:db:99:54:4a:da:7c:fb:fe:98:d1:
                    7c:b8:fa:dc:53:c8:93:f7:95:ad:b8:57:1a:93:33:
                    0c:b1:a8:03:2c:0d:7f:7c:98:2e:02:cb:0e:86:4b:
                    fe:03:43:69:c1:de:0c:ab:e4:24:ef:4c:74:c7:d7:
                    42:60:ba:2b:3e:bd:fb:c4:28:c3:a9:3b:0b:0d:9e:
                    ff:0e:ad:7e:9e:47:77:87:d3:b0:8e:08:00:85:b6:
                    24:bd:cf:82:fb:8c:01:fe:ca:f8:63:ef:2f:fd:7e:
                    85:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:4F:54:C2:A4:0A:E9:06:43:E7:93:BF:F2:23:A9:9C:08:7D:12:C5
            X509v3 Authority Key Identifier:
                keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:78:10:cf:cf:5f:ec:04:68:83:7b:84:53:2d:a8:74:bc:07:
         2f:9c:6f:5f:33:26:19:e0:c3:37:87:b8:51:d1:88:d9:c5:66:
         35:3e:da:5c:82:a0:b7:c0:83:9d:a2:70:47:c3:1b:ad:8e:ca:
         92:ac:3c:2e:da:d8:05:26:e2:30:8b:6e:12:53:38:80:8d:0e:
         d8:34:4a:33:26:c7:55:b1:55:66:ea:d0:13:97:8d:d1:cf:95:
         53:08:29:8b:b7:4c:c2:f4:74:c7:e6:63:17:3a:44:a5:59:a2:
         3f:f0:14:0e:54:c9:97:08:71:45:cc:8e:d6:85:d6:9a:f7:12:
         b2:c0:d1:53:01:56:f3:fb:6d:7c:47:23:4e:58:11:a9:8a:9d:
         a1:53:3f:50:9f:bb:ea:0e:37:f1:2a:7e:5b:5d:cf:e5:bf:d7:
         24:2c:17:4b:b9:89:1a:3f:b7:92:51:f8:d0:60:a6:2d:c8:21:
         63:24:f0:0c:a3:eb:34:12:8c:cd:16:0d:aa:8b:f3:ee:25:3a:
         25:67:2c:aa:3f:5e:2f:46:27:3e:60:2d:a2:f3:40:09:a9:a2:
         5f:24:86:ac:71:85:fd:9a:9a:bf:96:7b:40:0c:ab:44:48:da:
         2c:9d:65:b5:6d:e5:15:e6:2b:c1:bf:27:d9:cd:47:2c:8f:36:
         7f:e7:b5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 03:25:00 2025 by rpki-client