Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft
File:                     RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft (raw, json)
Hash identifier:          uUpddQ+QBMMdzv4SI/3t6Bkfqu6v8cB7UF8QvpS7En0=
Subject key identifier:   7A:73:7D:A7:90:EF:10:3B:B9:AA:48:D5:E4:F2:B0:15:E4:01:21:24
Authority key identifier: 44:CF:3F:A7:07:4E:73:04:B1:F3:2E:16:64:AD:5F:71:57:D6:5D:62
Certificate issuer:       /CN=44cf3fa7074e7304b1f32e1664ad5f7157d65d62
Certificate serial:       01988922170E6768D22EEDF1D386DA711B89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RM8_pwdOcwSx8y4WZK1fcVfWXWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft
Manifest number:          1625
Signing time:             Fri 08 Aug 2025 10:02:49 +0000
Manifest this update:     Fri 08 Aug 2025 10:02:49 +0000
Manifest next update:     Sat 09 Aug 2025 10:02:49 +0000
Files and hashes:         1: RM8_pwdOcwSx8y4WZK1fcVfWXWI.crl (hash: euNPxaa6PxczYWMtHNsYamwp0lSEYlwovZ83nIHCgus=)
                          2: eIPu-oRSt6i1dIgnDCklFRUAlSQ.roa (hash: Sgde8KLLocp16u9bpO8WIWMRQrBpRylsfdhGYkOvJ1g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RM8_pwdOcwSx8y4WZK1fcVfWXWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 10:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:22:17:0e:67:68:d2:2e:ed:f1:d3:86:da:71:1b:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44cf3fa7074e7304b1f32e1664ad5f7157d65d62
        Validity
            Not Before: Aug  8 10:02:49 2025 GMT
            Not After : Aug  9 10:02:49 2025 GMT
        Subject: CN=7a737da790ef103bb9aa48d5e4f2b015e4012124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0f:0e:c6:60:86:5a:59:d6:15:e5:93:fc:5f:
                    34:ce:9b:85:21:9b:5e:19:6f:e8:44:61:72:37:1a:
                    2b:9d:2a:80:12:c2:f2:7d:98:1d:6a:25:54:17:0e:
                    f4:00:b7:21:9f:05:41:70:4f:da:e4:f7:48:da:c9:
                    41:43:46:e2:9a:64:13:ea:aa:2e:1a:d5:89:b5:17:
                    49:f6:8b:48:cc:65:43:22:96:f6:9d:50:74:1f:be:
                    25:ee:3a:36:02:4a:26:70:ad:17:9b:38:3c:7d:bf:
                    1e:9a:c9:4a:d9:b9:15:0d:5a:13:48:35:79:74:70:
                    ef:70:cf:26:10:c3:f0:c8:58:e1:1c:8c:5f:b0:20:
                    9a:36:6b:4a:a5:d6:9e:39:03:46:db:56:fb:e7:06:
                    bf:56:02:41:4f:fe:8e:f9:89:9a:0b:d2:30:52:c9:
                    82:15:3f:b3:7c:f1:4a:5b:8d:ec:06:eb:32:c6:2c:
                    c1:69:98:d0:b2:16:20:80:2b:ae:04:de:0d:4d:1d:
                    f3:9f:2a:28:81:89:96:ee:b5:c0:e5:bf:ef:5b:8e:
                    79:6c:05:ef:1a:17:ba:bd:b8:b2:f8:cd:15:72:3d:
                    74:8e:55:69:d0:5d:3d:8f:29:f6:bf:3a:d2:19:d5:
                    0a:16:a9:4a:9a:ea:56:a1:a2:37:7c:2d:66:e5:87:
                    24:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:73:7D:A7:90:EF:10:3B:B9:AA:48:D5:E4:F2:B0:15:E4:01:21:24
            X509v3 Authority Key Identifier:
                keyid:44:CF:3F:A7:07:4E:73:04:B1:F3:2E:16:64:AD:5F:71:57:D6:5D:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RM8_pwdOcwSx8y4WZK1fcVfWXWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:51:b5:77:0e:b4:2a:32:98:05:a8:32:de:5b:0e:94:cc:a6:
         62:b1:ff:da:25:32:79:4d:9d:ea:e6:76:d6:62:25:94:b2:68:
         ab:1a:34:79:90:57:fe:d8:20:bd:b1:78:d6:ea:a2:25:48:da:
         73:80:ae:18:e7:2d:11:ee:1c:a4:97:fb:3f:36:1e:33:10:56:
         5a:19:c1:28:68:b4:ed:f6:bf:cf:d4:31:43:25:58:3b:42:11:
         77:80:38:d5:ee:4a:84:64:93:65:54:9e:c3:4d:0f:28:67:5d:
         4b:f5:f8:35:dc:56:ca:b5:b3:86:eb:88:a3:3a:89:74:85:cf:
         c6:f3:dd:af:6a:81:25:7e:fd:6c:bd:bd:30:b7:1a:b7:02:b3:
         47:81:e3:82:09:34:c3:54:14:68:86:85:b4:d2:7c:d5:8a:38:
         9c:13:24:33:bb:28:56:6f:6f:17:ca:92:79:fc:1a:47:6e:62:
         7b:05:4d:2a:63:7b:4f:42:44:04:c1:2d:e6:d2:e5:36:f0:93:
         3c:c1:fa:dd:dc:d9:28:4b:f4:e6:39:c7:a3:2a:b1:62:34:1f:
         98:a5:dc:b4:88:29:e3:27:04:bb:d9:5b:cf:9a:20:a8:54:4e:
         60:a2:fd:bc:e0:0f:a2:6f:7a:bb:0b:c1:c1:d3:5d:11:96:38:
         f0:40:75:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:40:19 2025 by rpki-client