Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft
File:                     8PsSySmy8FuZ1Jf68VUdvF2AflE.mft (raw, json)
Hash identifier:          QtbsLn8puLtqSWmXLLBk2d7Y3Z+AFFc385KNkoOA98M=
Subject key identifier:   0C:AB:9E:61:F4:0E:CC:72:3F:52:97:F2:64:CA:67:E7:E9:9F:B2:5E
Authority key identifier: F0:FB:12:C9:29:B2:F0:5B:99:D4:97:FA:F1:55:1D:BC:5D:80:7E:51
Certificate issuer:       /CN=f0fb12c929b2f05b99d497faf1551dbc5d807e51
Certificate serial:       019873E2C5CD559C62393EF3290697AC4EBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8PsSySmy8FuZ1Jf68VUdvF2AflE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft
Manifest number:          0BAB
Signing time:             Mon 04 Aug 2025 07:01:38 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:38 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:38 +0000
Files and hashes:         1: 8PsSySmy8FuZ1Jf68VUdvF2AflE.crl (hash: ujhwzjb6vwJfWICzEHWhWeWlrxuMqaQY/H14Qwt4Mxo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8PsSySmy8FuZ1Jf68VUdvF2AflE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:c5:cd:55:9c:62:39:3e:f3:29:06:97:ac:4e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0fb12c929b2f05b99d497faf1551dbc5d807e51
        Validity
            Not Before: Aug  4 07:01:38 2025 GMT
            Not After : Aug  5 07:01:38 2025 GMT
        Subject: CN=0cab9e61f40ecc723f5297f264ca67e7e99fb25e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b9:dc:c9:34:80:60:06:fd:14:de:50:ea:9e:
                    ac:1a:15:14:ae:c1:06:00:e2:d4:7c:ce:98:ce:b5:
                    2c:5d:bb:06:40:86:dc:89:e5:fe:dd:8c:87:b4:11:
                    c0:12:dd:af:46:82:8b:f4:8b:13:85:43:ff:c4:51:
                    a4:42:f8:4d:1d:b2:02:05:9e:b7:96:75:38:06:9f:
                    cb:b4:8a:0e:35:45:62:54:7b:07:2a:44:4b:5b:95:
                    30:ff:6c:ba:e1:2b:44:d8:a7:6f:d8:5c:fe:f2:74:
                    17:9d:b8:51:72:e7:62:b6:0d:18:d1:36:ae:7c:84:
                    1b:c6:a3:c8:27:67:60:ff:c9:32:d1:a7:c5:af:bd:
                    26:3e:83:94:4b:74:76:a9:53:83:a0:81:bb:d3:19:
                    7a:c1:ad:55:b4:7f:1c:65:11:2f:46:ae:bf:9b:bc:
                    21:21:91:02:2b:59:d3:fb:1c:10:8e:d5:88:c0:28:
                    71:e2:b2:1d:61:62:e1:a3:c0:e7:72:27:7a:f3:50:
                    bf:a3:e9:e3:14:62:73:99:89:f6:73:5f:a1:18:51:
                    50:d9:70:31:01:18:7d:c0:52:18:01:49:e4:16:73:
                    18:a7:80:93:33:d9:bf:3b:6b:5f:51:6d:d4:6b:7c:
                    2d:ca:0f:33:de:ba:9d:1c:55:07:d8:b8:4c:f3:dc:
                    4a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:AB:9E:61:F4:0E:CC:72:3F:52:97:F2:64:CA:67:E7:E9:9F:B2:5E
            X509v3 Authority Key Identifier:
                keyid:F0:FB:12:C9:29:B2:F0:5B:99:D4:97:FA:F1:55:1D:BC:5D:80:7E:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PsSySmy8FuZ1Jf68VUdvF2AflE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:cf:86:a4:61:b5:6f:c1:da:1d:25:6d:dc:cf:56:ab:0b:fd:
         6b:c6:73:b7:fe:3a:91:6e:d1:7c:9a:58:75:28:fd:48:f2:cc:
         0c:53:f9:1b:19:f0:6d:2a:b1:3a:72:b6:4d:a7:f4:f9:a4:dd:
         ef:d9:e6:f9:6d:db:e1:e3:86:30:72:44:dc:85:fa:3e:4c:32:
         fb:f2:f7:4e:3e:14:26:f0:bf:6e:4b:7d:fc:1f:d0:68:cd:9a:
         c5:8e:81:e9:43:b8:ba:6d:02:ba:d9:2b:e3:6b:36:24:72:df:
         e8:ff:5a:cb:82:6d:cc:5a:1b:9c:b6:4c:43:92:a8:93:19:c8:
         44:e8:92:5f:3b:06:db:2e:01:f2:e9:1f:f5:6c:37:24:f8:32:
         3b:2e:ab:6b:7c:c9:73:9b:ec:fd:85:f9:52:db:34:64:9d:6e:
         2d:66:1c:f2:fb:0d:0e:e1:5e:39:20:41:5c:6f:6b:c1:a7:9d:
         1a:32:4f:2c:4e:21:21:17:46:7d:ff:f1:f1:85:54:05:6b:2a:
         ad:f4:f3:51:b7:9b:0d:40:51:75:bb:94:a3:e6:75:e5:b1:1a:
         a2:2d:19:5d:0a:32:0d:49:1e:8e:9d:44:ef:7e:de:d8:d6:15:
         ae:46:55:83:71:bc:c9:31:ea:a8:85:9d:ce:10:0b:45:5f:48:
         c9:c7:c4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:05 2025 by rpki-client