Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
File:                     8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft (raw, json)
Hash identifier:          oN+k21UyP4rjIezlACpHSl5thcUbsF4zimOVjQcd1LQ=
Subject key identifier:   76:F9:E8:FB:FC:49:AD:1D:34:4C:0D:78:1E:8E:37:74:DD:5E:C4:79
Authority key identifier: F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5
Certificate issuer:       /CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
Certificate serial:       01988732F9D11F270C3183525E388EE2D260
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
Manifest number:          1011
Signing time:             Fri 08 Aug 2025 01:02:01 +0000
Manifest this update:     Fri 08 Aug 2025 01:02:01 +0000
Manifest next update:     Sat 09 Aug 2025 01:02:01 +0000
Files and hashes:         1: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl (hash: TZKJJCAqUEM/oHqxxloDx15RLkHtU/V2OZb+Rlcp6ew=)
                          2: qPfR7RG57f18LNEfOXECDUWuxuU.roa (hash: QgXqOHY45cNI3RJ9Yex5GhM6/GX8GPU2S0Ij2p9Y640=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 01:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:87:32:f9:d1:1f:27:0c:31:83:52:5e:38:8e:e2:d2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
        Validity
            Not Before: Aug  8 01:02:01 2025 GMT
            Not After : Aug  9 01:02:01 2025 GMT
        Subject: CN=76f9e8fbfc49ad1d344c0d781e8e3774dd5ec479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:18:a5:9f:3e:0b:32:ca:a6:a6:39:70:b0:35:
                    18:81:6b:20:8b:5b:c9:ac:92:b4:ca:1f:8a:62:58:
                    db:eb:87:66:f9:9d:c6:19:97:07:2b:0f:26:2b:fb:
                    c6:4d:85:da:46:82:c9:33:75:3e:ae:04:8f:a4:0a:
                    2c:9b:43:3e:d0:6b:cb:38:16:cc:bc:c1:a2:79:56:
                    bf:7e:1b:d7:37:69:26:23:19:f7:57:95:07:a0:b0:
                    33:b7:44:02:e7:28:5a:1a:1f:44:8e:e9:9a:3b:38:
                    81:3d:d8:9f:9a:07:0b:a2:25:e5:a9:3c:19:69:c1:
                    fb:d3:ee:df:a7:df:93:bf:d8:06:e4:a9:4e:40:20:
                    10:11:94:13:12:69:94:f7:1e:b3:93:f3:53:73:12:
                    c1:0c:19:07:a9:02:55:2e:00:ed:a5:32:71:d0:0c:
                    f6:84:f7:ba:57:84:76:4e:19:64:cc:c1:9d:62:19:
                    d4:17:63:89:2a:07:7b:43:c6:10:18:97:bb:b3:0a:
                    ee:5a:15:03:20:34:df:69:6b:2d:a7:c3:82:e5:d7:
                    88:2f:00:c3:53:f8:ed:fe:0e:49:53:bd:b9:5b:f1:
                    c6:53:df:7f:13:29:e8:7a:68:d9:ad:33:9a:f7:b7:
                    77:2c:ff:3b:6e:40:24:5e:a9:01:7a:45:17:43:82:
                    39:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F9:E8:FB:FC:49:AD:1D:34:4C:0D:78:1E:8E:37:74:DD:5E:C4:79
            X509v3 Authority Key Identifier:
                keyid:F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:b9:cd:64:55:df:c4:e3:d3:81:ab:5b:de:b4:a6:26:24:99:
         71:28:a6:87:32:c0:29:5c:53:5f:7a:8a:6c:c4:a1:5f:59:94:
         27:c1:91:6c:9a:80:7f:48:00:99:26:0f:dd:ef:bf:ba:ba:0a:
         d7:9a:00:17:5c:1c:3c:34:f4:2c:79:ac:d6:7f:3d:35:93:6b:
         92:d7:6e:76:31:7a:9c:9b:d0:7f:d9:59:fa:71:7c:96:00:8c:
         24:9d:68:fa:95:15:85:ed:74:2b:23:05:cf:0e:34:89:b6:fb:
         9c:01:e1:8c:fa:3d:9e:9c:8a:42:cf:0c:da:fb:ca:1c:b6:ec:
         4b:0c:7f:fc:4a:62:48:e6:15:3d:85:52:22:5d:6e:cd:76:0f:
         e9:92:6b:d4:f2:ec:c9:62:28:1e:13:35:30:fd:99:e5:c3:38:
         d9:1e:70:cf:5d:8d:fa:1a:ca:c2:20:af:01:a0:c8:84:82:87:
         b7:ec:36:0d:07:4d:c0:fe:fc:6f:78:08:73:28:83:70:33:1f:
         7e:28:7e:e5:04:1b:44:88:a9:94:bc:78:7a:06:40:f8:15:2e:
         5b:2e:cb:ac:0e:a8:25:b9:ff:de:14:fd:4a:61:e6:3c:b3:af:
         dc:c5:c9:5f:51:f0:79:40:02:71:12:6c:63:68:60:2f:53:99:
         73:b0:2a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:13:20 2025 by rpki-client