Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft
File:                     8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft (raw, json)
Hash identifier:          fPcfunlytabWvNNsAFuNaiuSe4Rru1IslS9rwa1CA0k=
Subject key identifier:   7C:35:F2:4C:86:51:FC:1C:26:15:CE:FC:58:E9:BE:61:2E:8F:B2:88
Authority key identifier: F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0
Certificate issuer:       /CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0
Certificate serial:       01988BEA72A0AA7C1B5FDD876A7760B1EC84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft
Manifest number:          14FA
Signing time:             Fri 08 Aug 2025 23:00:54 +0000
Manifest this update:     Fri 08 Aug 2025 23:00:54 +0000
Manifest next update:     Sat 09 Aug 2025 23:00:54 +0000
Files and hashes:         1: 8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl (hash: HQGVfRh1NKh5tEoU0wk21nFSYFtfX8ER/X1z8rpc4mo=)
                          2: kvZo-BdFpFiAumpYOAN_8hogK54.roa (hash: B0ogmfmwZkernYmKh+SkwXZzEeGWetiV/fs+CFuZhi0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:ea:72:a0:aa:7c:1b:5f:dd:87:6a:77:60:b1:ec:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0
        Validity
            Not Before: Aug  8 23:00:54 2025 GMT
            Not After : Aug  9 23:00:54 2025 GMT
        Subject: CN=7c35f24c8651fc1c2615cefc58e9be612e8fb288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:00:d1:d1:23:4a:b4:f3:e1:70:5a:8f:2e:ac:
                    88:f4:92:e9:ba:50:a4:de:6d:0d:74:d8:40:4f:10:
                    c1:bf:dd:e9:bc:81:67:60:a8:e3:33:db:c8:3a:2b:
                    8f:42:41:4e:ba:db:7c:c1:38:1b:67:7f:5d:13:a3:
                    8d:dc:36:47:d9:6d:e9:03:b9:c3:66:81:f2:d0:f1:
                    7d:82:68:c2:1e:fe:e5:49:96:99:7e:43:12:0b:57:
                    ad:12:e5:f0:67:09:47:45:50:52:84:6a:0f:c7:67:
                    34:e5:0f:52:87:dd:e0:c2:55:20:3b:6d:f5:34:1a:
                    b9:5a:b7:0e:45:fe:53:10:69:3b:e4:2b:7d:ff:ed:
                    5e:6c:06:46:f4:ce:bc:9b:55:08:54:3a:2d:d1:5e:
                    8c:13:bf:1d:e3:18:ad:84:d1:f6:84:a1:d4:fe:1b:
                    11:34:be:8a:db:65:16:e8:21:95:42:43:c6:b2:6d:
                    a9:a2:2f:31:6d:79:c2:96:fd:5b:f6:39:44:d3:92:
                    e4:9a:de:73:0a:7c:e1:50:b3:fe:94:44:63:ae:72:
                    05:b3:5f:19:75:a0:09:0c:99:19:bd:10:6e:8c:4a:
                    6b:f2:9b:38:31:61:39:4a:69:f3:cd:f9:0a:2f:03:
                    ff:2d:cc:ed:4f:1e:0a:70:f3:7a:4b:13:26:61:7c:
                    2d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:35:F2:4C:86:51:FC:1C:26:15:CE:FC:58:E9:BE:61:2E:8F:B2:88
            X509v3 Authority Key Identifier:
                keyid:F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:a2:53:13:d7:e0:87:01:5c:8c:ce:30:5a:e1:a1:5c:54:fa:
         3b:36:e5:e6:c5:31:49:cb:e8:f4:ca:92:7e:5e:70:c4:b6:d0:
         b3:9c:a1:c6:ef:c9:f8:dc:14:6c:81:55:bc:4e:8d:ff:ff:32:
         3a:88:67:bc:7b:25:62:a0:2c:59:65:05:1a:3e:00:65:74:48:
         07:29:88:97:8c:8d:7a:28:39:f3:88:f7:12:76:97:6a:ad:47:
         5f:ba:33:78:66:45:41:06:99:b6:16:55:05:66:03:9a:b2:6b:
         d4:22:6a:af:46:79:13:36:43:d2:fd:7a:78:e0:44:11:f0:51:
         63:f3:b9:84:28:99:21:48:47:ed:8d:c1:ac:0d:b3:aa:c9:b7:
         09:06:2c:dd:40:89:56:44:57:d8:42:53:5c:17:64:c5:4f:9d:
         0c:b2:2f:c0:65:87:79:ee:ef:7c:9b:4f:ee:d6:20:4f:25:81:
         6f:23:ad:8d:36:f0:3d:d1:27:30:7f:9e:b0:a8:c6:68:d4:ab:
         ca:cc:e9:40:2e:71:3c:c9:9a:72:cc:c3:34:aa:b4:8a:13:94:
         de:f7:4a:a0:ff:ff:69:a3:04:9f:ea:e1:0d:6b:1b:e6:26:3e:
         bb:c0:59:da:aa:a6:2e:d7:fb:b5:ab:06:a1:1e:3e:6f:f8:e0:
         f9:79:98:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:51:54 2025 by rpki-client