Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
File:                     8o-houRJGJHBmw8QsIb2VZhPWHk.mft (raw, json)
Hash identifier:          r31tvu+M/P3xgcuiKHbtz8HuOmemjdSyMnmW1MQjDTo=
Subject key identifier:   0F:3E:FD:A6:3C:59:7A:CD:2A:AB:71:97:4C:C2:DC:9F:5B:4F:E4:2B
Authority key identifier: F2:8F:A1:A2:E4:49:18:91:C1:9B:0F:10:B0:86:F6:55:98:4F:58:79
Certificate issuer:       /CN=f28fa1a2e4491891c19b0f10b086f655984f5879
Certificate serial:       019879AD9AB3790C2AF5922125AD2605FCD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
Manifest number:          0A6B
Signing time:             Tue 05 Aug 2025 10:01:17 +0000
Manifest this update:     Tue 05 Aug 2025 10:01:17 +0000
Manifest next update:     Wed 06 Aug 2025 10:01:17 +0000
Files and hashes:         1: 8o-houRJGJHBmw8QsIb2VZhPWHk.crl (hash: jpjDeX7Y6Zucq9QFbu8HS6KfAbiNpCaR3fDVxYatMek=)
                          2: IAJBt24rgV_us-DgHGqft-brDOM.roa (hash: EYG4N8j/B/VmDjgrJQXF6wEvv1LkIhmvGFmYVI9Ke7s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 10:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:79:ad:9a:b3:79:0c:2a:f5:92:21:25:ad:26:05:fc:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f28fa1a2e4491891c19b0f10b086f655984f5879
        Validity
            Not Before: Aug  5 10:01:17 2025 GMT
            Not After : Aug  6 10:01:17 2025 GMT
        Subject: CN=0f3efda63c597acd2aab71974cc2dc9f5b4fe42b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:18:59:b7:1b:78:6a:96:70:9b:b5:32:f9:69:
                    b5:27:3c:65:9f:10:3c:56:e8:72:cb:47:80:95:6e:
                    86:70:0d:46:0d:f1:47:d0:8d:6c:7e:cf:7a:01:8c:
                    40:62:be:0f:2f:7d:d4:43:32:98:e9:20:97:09:4a:
                    6c:8a:d8:72:a1:cb:ef:f4:9d:9f:ac:63:ba:54:64:
                    43:69:18:44:a7:d1:f3:2c:1e:77:e0:f2:f8:d2:a5:
                    04:57:37:1a:b3:29:1b:a2:f1:ae:2a:65:9c:1d:2f:
                    8b:6a:0a:3d:34:3c:be:c7:a4:c2:ce:4b:92:a4:f1:
                    a6:9a:1c:de:d7:90:21:ae:d2:7c:0e:66:cb:c2:fe:
                    ee:e1:04:10:9b:37:4c:77:75:8d:cf:6e:5f:88:0d:
                    8c:ca:59:d1:3d:e1:f5:a4:d7:74:13:20:bd:d4:15:
                    0c:e4:91:0f:b1:7b:e9:02:13:5d:70:74:6d:0f:5f:
                    9e:ed:f5:99:ef:76:04:5e:e6:cc:10:6e:92:ec:db:
                    d0:d4:84:c6:97:c5:4d:af:18:c3:58:fd:d4:de:af:
                    b9:8f:5f:c5:21:2e:ce:d8:0b:41:a5:80:af:32:99:
                    a1:79:98:cc:d0:93:f8:07:dc:fb:76:7c:37:8f:05:
                    5a:a2:b5:3c:67:5e:d4:1a:fb:6d:4a:95:a8:75:ae:
                    48:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:3E:FD:A6:3C:59:7A:CD:2A:AB:71:97:4C:C2:DC:9F:5B:4F:E4:2B
            X509v3 Authority Key Identifier:
                keyid:F2:8F:A1:A2:E4:49:18:91:C1:9B:0F:10:B0:86:F6:55:98:4F:58:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:01:62:47:11:d3:d8:48:0d:27:78:77:0e:60:95:f3:f0:66:
         39:ef:9a:95:92:9c:42:bc:c4:1d:d4:fd:7d:8d:b8:43:66:08:
         0b:c8:a3:76:c3:0a:dc:68:01:7d:7e:4d:88:46:91:a4:ff:18:
         f9:89:6e:de:e2:45:5f:49:c6:48:20:c4:6a:16:f3:2c:55:1f:
         12:46:d1:de:a0:56:96:41:1f:a3:30:b4:0f:21:4b:eb:07:f1:
         ad:4a:c3:10:b2:59:35:88:7c:67:c6:20:bd:64:17:c1:09:0a:
         2e:ec:8c:6c:cc:a9:40:0e:cd:5e:a1:a4:0d:a6:01:99:5a:a2:
         21:13:1f:ea:e9:18:69:c6:fe:a4:e9:f9:d7:31:0c:54:bf:ab:
         97:40:93:5e:60:f9:00:18:cd:29:b4:55:b4:75:8c:8d:3d:72:
         e2:73:c5:e8:76:74:7c:6c:19:30:92:de:78:68:7b:20:c6:72:
         1d:b7:50:b4:ee:fa:7c:20:bc:f3:2d:d2:ae:fb:e7:2a:69:51:
         36:4a:77:ff:f2:87:c3:57:08:a3:7c:b1:e6:84:97:c2:62:2d:
         0d:81:3c:80:22:18:95:78:3d:e4:06:c3:a2:10:03:91:7b:d6:
         db:b9:ee:17:6a:7e:44:eb:49:dc:6e:9b:5a:b9:bc:be:2d:ff:
         ff:16:3d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:13:15 2025 by rpki-client