Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft
File:                     P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft (raw, json)
Hash identifier:          zNapNfdls2pA49AmZe4HZDvEcZU1dOA1I7llFcslcKc=
Subject key identifier:   BF:BC:37:2B:B2:F4:39:87:FB:66:95:97:27:F3:90:92:D7:9E:88:F1
Authority key identifier: 3F:CF:F9:8A:AA:5B:48:DC:61:58:D2:FC:65:F2:5C:50:97:B5:E2:6A
Certificate issuer:       /CN=3fcff98aaa5b48dc6158d2fc65f25c5097b5e26a
Certificate serial:       019894B7BD3BF4793E29C3E2954A14A8C527
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P8_5iqpbSNxhWNL8ZfJcUJe14mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft
Manifest number:          0340
Signing time:             Sun 10 Aug 2025 16:02:06 +0000
Manifest this update:     Sun 10 Aug 2025 16:02:06 +0000
Manifest next update:     Mon 11 Aug 2025 16:02:06 +0000
Files and hashes:         1: P8_5iqpbSNxhWNL8ZfJcUJe14mo.crl (hash: uiIXGzslmO30/RzdBLY9i389QTMdtYT96bC1cLC3aTE=)
                          2: PQ28rfbk5yXRYjcz-QOCkZ4ENM0.roa (hash: YSotQz0qiTv7LM37y7e6zhLaYImvG6ufZU+Z40/a72I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P8_5iqpbSNxhWNL8ZfJcUJe14mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 16:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:94:b7:bd:3b:f4:79:3e:29:c3:e2:95:4a:14:a8:c5:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fcff98aaa5b48dc6158d2fc65f25c5097b5e26a
        Validity
            Not Before: Aug 10 16:02:06 2025 GMT
            Not After : Aug 11 16:02:06 2025 GMT
        Subject: CN=bfbc372bb2f43987fb66959727f39092d79e88f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:67:17:91:ec:5b:03:2c:99:60:56:65:ba:fa:
                    94:75:0c:05:13:fc:54:20:0e:ce:46:d4:d6:73:f3:
                    f5:cc:a5:27:21:25:1d:6c:e0:1c:34:c7:d0:1f:de:
                    d9:7c:11:89:2e:de:4a:3e:c5:14:c1:83:13:e8:d6:
                    82:c3:ce:d7:77:cb:71:11:ac:98:9e:25:2b:37:f8:
                    74:ec:a3:e2:5e:68:ed:c9:63:a3:5b:6f:cf:75:86:
                    8d:42:98:dc:50:a6:bc:71:a4:a0:79:e4:7a:af:ac:
                    1c:93:b9:51:6b:5b:29:fd:0a:47:c2:e3:6f:40:a2:
                    a0:fa:92:68:bf:4b:63:05:be:85:c6:48:75:6b:14:
                    11:54:b4:59:e7:6c:b4:94:cb:73:32:e1:27:e5:3b:
                    03:d2:43:bb:6e:c9:a2:7e:dd:47:3b:ed:1c:e7:ba:
                    af:26:de:0c:9f:9f:f6:4f:38:bc:72:4f:da:11:98:
                    57:d2:0f:d5:15:e8:0d:9d:f3:8e:27:40:af:c6:5a:
                    7e:e2:8e:79:13:17:5c:c5:25:b2:bc:04:a3:5b:e0:
                    d5:9f:ae:b7:0b:a9:3e:da:74:ad:6e:dc:4c:a6:8d:
                    d5:77:0d:ab:84:0e:18:57:e0:ef:e1:1b:6b:14:1f:
                    3a:84:0b:b2:83:90:f7:5c:44:fc:dc:2b:00:43:b1:
                    22:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:BC:37:2B:B2:F4:39:87:FB:66:95:97:27:F3:90:92:D7:9E:88:F1
            X509v3 Authority Key Identifier:
                keyid:3F:CF:F9:8A:AA:5B:48:DC:61:58:D2:FC:65:F2:5C:50:97:B5:E2:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P8_5iqpbSNxhWNL8ZfJcUJe14mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:c7:2a:72:72:58:82:53:ef:72:d5:a1:f8:9f:e8:8f:55:b2:
         40:2e:d2:a9:e2:16:69:af:c1:81:0d:d3:c7:62:88:1b:a2:93:
         46:7e:71:25:f2:5f:f6:23:bb:16:d2:f3:a9:d8:02:f5:a7:b3:
         f0:74:ef:63:30:c4:60:27:ff:09:16:57:c5:78:2b:2e:84:35:
         d6:90:db:a3:35:ec:02:ef:38:0e:c7:22:0a:06:7c:87:50:96:
         bb:5b:c2:60:90:c6:e2:af:23:62:10:ad:be:55:dc:6a:5d:5b:
         b5:f3:5d:aa:e1:d7:53:e9:0d:2d:a6:b2:94:22:20:d9:be:a9:
         95:a7:21:dd:98:f0:80:a0:c1:ae:2c:70:35:f8:ae:3d:44:51:
         50:00:de:8e:14:92:bb:e5:3a:5e:fd:f5:13:9e:a4:b8:f6:94:
         df:d3:f3:9b:62:3f:80:76:1f:e9:b9:7e:77:fe:ac:bb:e5:c1:
         bc:84:b3:70:8d:fc:42:8a:96:6c:55:90:43:81:33:4e:5a:74:
         0c:15:ec:81:00:8d:ea:34:af:5f:00:46:37:68:c1:de:bf:20:
         cb:e6:f0:5e:00:f6:1e:76:f8:fa:80:1e:ea:a6:99:aa:9c:38:
         14:5e:2e:29:e6:44:de:09:d2:9b:11:88:50:4c:9a:8b:2f:b8:
         f9:3a:ae:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:47:34 2025 by rpki-client