Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/8ihddApeiSzQvm8iT00_Tp1t0cQ.mft
File:                     8ihddApeiSzQvm8iT00_Tp1t0cQ.mft (raw, json)
Hash identifier:          3XRcKlIpo2nQrGe2noXy7X84hzZm3S3ACHU1P/8Kjlo=
Subject key identifier:   06:13:7D:E0:E7:52:BF:29:F1:1B:2D:28:EA:73:F8:40:07:1A:38:A9
Authority key identifier: F2:28:5D:74:0A:5E:89:2C:D0:BE:6F:22:4F:4D:3F:4E:9D:6D:D1:C4
Certificate issuer:       /CN=f2285d740a5e892cd0be6f224f4d3f4e9d6dd1c4
Certificate serial:       019A54BFD6CA180B47F765806BFE74E0B495
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ihddApeiSzQvm8iT00_Tp1t0cQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/8ihddApeiSzQvm8iT00_Tp1t0cQ.mft
Manifest number:          06C8
Signing time:             Wed 05 Nov 2025 16:00:49 +0000
Manifest this update:     Wed 05 Nov 2025 16:00:49 +0000
Manifest next update:     Thu 06 Nov 2025 16:00:49 +0000
Files and hashes:         1: 8ihddApeiSzQvm8iT00_Tp1t0cQ.crl (hash: xeiD0kvqlLX1z/EuIbD96xQbP4pCcLQ0NUA/T6feA94=)
                          2: MHj3Uc-p1kz3nu3McqkQnyvmX5k.roa (hash: jZ2LYvOeYYqufGXlqvtkULLXS9QyefT3nRWf2hFGUNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/8ihddApeiSzQvm8iT00_Tp1t0cQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/8ihddApeiSzQvm8iT00_Tp1t0cQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8ihddApeiSzQvm8iT00_Tp1t0cQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 16:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:54:bf:d6:ca:18:0b:47:f7:65:80:6b:fe:74:e0:b4:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2285d740a5e892cd0be6f224f4d3f4e9d6dd1c4
        Validity
            Not Before: Nov  5 16:00:49 2025 GMT
            Not After : Nov  6 16:00:49 2025 GMT
        Subject: CN=06137de0e752bf29f11b2d28ea73f840071a38a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:73:e2:72:14:61:1d:f4:49:37:3c:1d:78:12:
                    87:2f:23:32:fe:97:82:31:bd:7a:0a:90:f5:73:c8:
                    66:3c:76:cb:31:ea:2a:3b:49:4f:1c:3b:27:00:74:
                    c9:87:c9:13:11:86:b7:44:b9:b5:1e:26:e3:69:89:
                    be:05:75:88:e8:58:8f:1f:6f:47:ca:f5:e6:23:12:
                    2d:ad:cd:10:e5:c9:4c:41:33:96:e3:a1:cf:7d:af:
                    e7:9a:61:7c:5a:01:b4:89:dc:a0:b9:2b:65:bc:06:
                    30:1e:cb:e2:2b:f0:c2:fe:d6:73:0d:37:39:10:40:
                    30:bc:70:27:2f:14:ae:02:d3:af:77:59:7a:37:69:
                    d5:18:91:9d:9d:90:9a:37:78:3a:3c:a0:70:7b:e1:
                    c6:b6:23:b3:8a:0a:a9:0d:a5:77:60:47:8a:b3:29:
                    47:ea:a7:b9:12:91:b0:13:6d:de:a3:ab:c8:23:e0:
                    47:2f:96:e5:ee:77:a7:c9:70:ee:d3:d3:0f:90:e8:
                    1f:98:53:e9:7b:38:1b:07:2d:36:3a:92:03:f5:d3:
                    1d:ef:4a:0d:0c:a7:16:71:95:d1:84:a4:10:ad:10:
                    a5:57:e6:98:d1:c9:69:f4:ce:28:ae:b3:54:85:3d:
                    9d:73:b0:47:2b:05:bf:1c:fd:6a:aa:ec:9e:be:54:
                    4f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:13:7D:E0:E7:52:BF:29:F1:1B:2D:28:EA:73:F8:40:07:1A:38:A9
            X509v3 Authority Key Identifier:
                keyid:F2:28:5D:74:0A:5E:89:2C:D0:BE:6F:22:4F:4D:3F:4E:9D:6D:D1:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ihddApeiSzQvm8iT00_Tp1t0cQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/8ihddApeiSzQvm8iT00_Tp1t0cQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/8ihddApeiSzQvm8iT00_Tp1t0cQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:e1:68:0f:1f:64:cd:51:14:7c:55:2d:57:86:97:82:ac:9a:
         cd:eb:9c:78:cd:d2:ab:e7:9a:01:04:e7:ea:ec:dc:92:97:04:
         ef:7a:e1:fe:71:59:a9:0d:72:35:c3:c0:bc:83:ae:d4:27:87:
         d5:2f:90:c8:ef:c2:7e:0f:f3:b2:62:5d:02:c3:8d:1b:c6:e7:
         61:c0:61:1f:1b:fd:45:19:78:67:00:8e:c4:2a:6a:81:21:c8:
         5a:58:8d:24:ca:88:32:16:10:a3:bb:db:bd:e2:33:73:eb:3f:
         31:fd:f8:28:a8:43:66:87:f7:7f:74:97:2b:41:c8:69:6b:c7:
         6c:83:44:8c:fd:83:bc:ab:b2:c5:d5:7a:8b:b2:f3:be:29:8c:
         9e:a1:d7:6d:82:66:54:b0:c8:03:16:6f:64:28:d1:8c:04:3c:
         80:bc:b2:a8:82:58:da:22:25:3b:5f:c9:55:02:27:5c:0f:ff:
         43:43:68:8a:30:5e:85:ab:da:20:9b:27:6c:9c:93:8c:59:9e:
         2f:f0:4f:08:54:57:34:44:09:27:ed:21:90:ec:1b:73:97:cf:
         fd:e2:28:5a:ae:5e:7e:51:11:d6:c5:86:76:3e:30:6b:0d:09:
         81:83:b4:ce:6b:41:f4:d5:99:d6:14:8f:af:16:25:bd:9e:71:
         2e:54:dc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:50:07 2025 by rpki-client