Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft
File:                     E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft (raw, json)
Hash identifier:          6sLuqjpZ8B23U1IDhafXrPscQSMWioKYUZEZohi2ljI=
Subject key identifier:   FD:8F:3D:35:D8:27:E4:EC:AF:D1:73:47:3F:1C:19:CC:2F:89:7A:D1
Authority key identifier: 13:C9:FD:37:C7:43:1C:E6:AA:3C:93:A6:95:2C:67:F0:F0:C9:84:6E
Certificate issuer:       /CN=13c9fd37c7431ce6aa3c93a6952c67f0f0c9846e
Certificate serial:       01987F78CF474C00A65A4D6B140977849848
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft
Manifest number:          161D
Signing time:             Wed 06 Aug 2025 13:01:20 +0000
Manifest this update:     Wed 06 Aug 2025 13:01:20 +0000
Manifest next update:     Thu 07 Aug 2025 13:01:20 +0000
Files and hashes:         1: E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl (hash: g7QbC5o/AyTPjra0bq2pfqKkIZ3p/fNveUZolyYEjII=)
                          2: YUczG5dGYRQf7s0wy9SzxbyGN1c.roa (hash: AUrq9hAikj9WxxWS78u0ChjSuDjwGem9EdzmHLzSliw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:78:cf:47:4c:00:a6:5a:4d:6b:14:09:77:84:98:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13c9fd37c7431ce6aa3c93a6952c67f0f0c9846e
        Validity
            Not Before: Aug  6 13:01:20 2025 GMT
            Not After : Aug  7 13:01:20 2025 GMT
        Subject: CN=fd8f3d35d827e4ecafd173473f1c19cc2f897ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a9:ac:68:c3:e1:d5:b5:41:48:72:fa:2e:80:
                    14:63:fe:8c:d5:5e:42:01:63:3c:e1:06:fd:a1:df:
                    21:56:be:02:60:08:05:a3:fb:59:c0:c4:7f:d0:de:
                    c5:20:c4:46:35:75:37:e6:75:2c:aa:bc:10:e5:ed:
                    47:48:30:f1:12:5e:b8:08:fc:78:3d:99:b1:6b:67:
                    4e:c2:49:59:fd:4e:6a:fb:24:e9:c5:fc:6b:bc:8f:
                    9c:b1:c0:30:e0:e9:3b:24:e7:a6:85:4f:dc:01:83:
                    74:15:dc:f0:35:c7:d2:07:c6:71:3a:47:d3:93:56:
                    b0:00:11:c4:3b:3c:2c:e9:c4:59:19:47:e1:ea:4d:
                    79:5c:91:20:22:49:14:26:1e:d9:ec:e9:5b:7a:83:
                    c1:d4:b5:32:76:f4:52:90:09:2b:ee:81:8a:c8:00:
                    af:25:4d:67:4e:76:bf:32:1f:a2:b8:32:3d:7f:ee:
                    6d:88:a0:b0:23:84:17:0c:55:dc:3d:eb:a2:78:9b:
                    46:05:25:54:2f:90:81:46:66:2b:95:2c:9c:8c:85:
                    e9:a0:15:b1:68:13:c0:9e:2e:e2:67:3b:7c:af:c1:
                    32:8a:14:34:81:10:db:a1:c8:24:c9:88:98:e0:48:
                    42:47:73:05:0a:89:36:00:dc:43:ff:66:b1:fa:8e:
                    fa:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:8F:3D:35:D8:27:E4:EC:AF:D1:73:47:3F:1C:19:CC:2F:89:7A:D1
            X509v3 Authority Key Identifier:
                keyid:13:C9:FD:37:C7:43:1C:E6:AA:3C:93:A6:95:2C:67:F0:F0:C9:84:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:8c:7a:18:3d:2e:9f:67:ed:fd:03:28:bf:52:84:a9:f4:77:
         98:0b:c5:2f:41:e1:b4:98:37:00:28:09:b9:e3:02:3a:bf:58:
         d6:74:c4:79:75:e7:da:7d:15:f3:12:b0:48:dd:10:7f:6a:92:
         c8:1d:31:d7:f3:96:bd:71:c5:be:76:d3:d5:d2:aa:d3:ba:b5:
         02:64:5f:7c:10:fd:ae:56:ed:76:57:3d:17:1d:db:27:75:45:
         ec:c5:88:2a:51:67:c3:bd:5d:94:28:bd:87:30:71:8c:18:46:
         43:5d:10:de:b6:2f:1d:9b:c3:d0:7c:71:3a:04:7c:b5:26:f7:
         30:1e:fe:96:0e:a9:82:ca:18:75:6d:80:d3:91:86:ad:7b:89:
         5e:f2:e5:43:03:40:bb:d5:cb:c9:84:79:a0:c0:fe:d6:0a:3a:
         f1:e1:42:e2:b0:14:2a:f1:6c:a9:4e:17:b8:0f:27:af:c2:b5:
         fe:68:f9:f4:0e:a6:4f:8b:6f:4b:53:e3:e4:a2:88:08:e2:55:
         e0:55:b0:d7:5e:07:7b:80:3e:9f:cb:2e:49:04:00:e9:50:0e:
         6b:89:b7:8e:00:b1:08:77:e5:7a:51:b8:01:05:2f:b3:c9:81:
         3f:e7:4a:6a:9e:a7:96:77:6c:06:71:d6:e3:5b:c0:00:e2:c3:
         89:da:fa:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:01:58 2025 by rpki-client