Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
File:                     8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft (raw, json)
Hash identifier:          HHbfTGjd4YBvwqk6yq9ZD85AAPU7Q+2IUavw+Sru02I=
Subject key identifier:   60:7B:8E:15:3B:FF:20:C0:EA:FE:CF:B9:09:27:58:48:A7:6E:60:FB
Authority key identifier: F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC
Certificate issuer:       /CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc
Certificate serial:       019896A4E53E0E9E363608B763BDD271145E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
Manifest number:          0299
Signing time:             Mon 11 Aug 2025 01:00:45 +0000
Manifest this update:     Mon 11 Aug 2025 01:00:45 +0000
Manifest next update:     Tue 12 Aug 2025 01:00:45 +0000
Files and hashes:         1: 5706RB7xeG9S4d5Ob5hAT-sWDQM.roa (hash: 3YUiY2PHwBycE1YPX5AAcbWdNPxFb9hnL/xR1TAUp9s=)
                          2: 8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl (hash: PRUD859lGrmMXNlgYRyHeM0pvTL/KVcM41q18tWyf0M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 01:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:a4:e5:3e:0e:9e:36:36:08:b7:63:bd:d2:71:14:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc
        Validity
            Not Before: Aug 11 01:00:45 2025 GMT
            Not After : Aug 12 01:00:45 2025 GMT
        Subject: CN=607b8e153bff20c0eafecfb909275848a76e60fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:23:0b:b4:d3:00:12:9d:24:de:a5:aa:74:1c:
                    19:97:6f:5d:76:23:c0:eb:63:6c:58:93:67:c3:f9:
                    6b:a6:5b:ad:52:1f:4a:79:70:55:14:61:bd:c6:4a:
                    a9:72:78:a6:a5:9b:ae:c7:6a:e0:1c:98:36:16:a8:
                    37:84:27:56:d7:a8:46:04:4b:d2:2a:1e:92:e4:c1:
                    5a:fc:c9:6d:16:76:85:ef:90:24:d4:81:29:36:53:
                    48:0e:0f:4a:4a:88:03:0d:1a:5f:38:5a:a0:c8:52:
                    75:79:35:48:51:ef:ab:f0:ff:fc:c6:16:2f:7d:d7:
                    14:a3:b1:f7:60:e7:ad:33:af:80:8d:25:aa:bc:a9:
                    6b:4a:8e:d6:e7:e2:1a:2b:00:b7:40:ce:68:89:85:
                    a8:76:0b:91:64:fb:bd:27:f4:6d:55:a8:51:6f:28:
                    8d:11:f5:e0:02:43:5d:8d:88:3c:66:65:a5:0d:1a:
                    57:5b:76:ac:5a:cc:35:96:bc:b5:07:3c:d1:5d:6a:
                    f2:08:7b:81:85:75:31:e9:2c:5a:16:3f:73:75:46:
                    0b:68:94:75:1c:ea:57:03:ab:a6:b4:28:ab:4e:65:
                    69:12:61:8b:1d:bb:40:f0:42:7a:13:b2:c8:af:30:
                    d4:a3:29:82:8b:7a:75:05:fb:05:4c:45:37:a8:c0:
                    3a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:7B:8E:15:3B:FF:20:C0:EA:FE:CF:B9:09:27:58:48:A7:6E:60:FB
            X509v3 Authority Key Identifier:
                keyid:F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:47:83:82:8c:2e:a6:0a:1a:51:26:1d:05:3b:df:82:24:2d:
         b7:5a:6e:1c:3b:25:59:bf:04:42:f8:6f:bc:d1:34:70:90:ce:
         f7:af:1b:27:51:71:03:7f:9d:04:7a:d8:10:fc:1d:eb:a2:0c:
         28:29:37:95:04:9d:d5:78:dd:58:80:97:ea:49:8e:46:13:e0:
         ca:94:ce:a6:08:fa:72:12:e0:2c:84:bb:09:3c:44:44:45:2e:
         a1:41:18:0e:2c:06:14:38:af:ae:40:a3:cb:21:3f:eb:fe:fe:
         74:36:9b:a7:99:82:49:f6:07:4e:1b:32:33:1d:e5:0e:ae:72:
         39:23:29:79:59:9f:95:2f:e4:3f:38:d6:b2:b7:a9:0a:49:29:
         e3:21:a1:26:1c:92:16:c2:11:d6:40:77:15:d6:fa:27:ab:df:
         0e:7d:b2:04:bc:c9:67:be:99:ae:30:d9:40:db:2e:17:0e:a9:
         d2:d2:f4:87:a0:03:83:0c:d8:29:d3:9e:8d:25:39:9b:94:d4:
         8e:df:db:5c:c6:af:43:e7:b5:32:4f:0d:97:fa:8d:7d:ed:3b:
         f9:6c:94:ec:79:98:df:2e:c0:c5:85:a4:6f:92:8d:6d:8a:11:
         44:a0:96:0b:be:f9:15:2c:76:8a:54:4a:fa:97:2f:a6:00:3b:
         1e:c2:4c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:26:08 2025 by rpki-client