Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
File:                     o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft (raw, json)
Hash identifier:          8Tnyd8pVIY+smPUPvlExQOMavfgjNo3VcIMUUPRv+3g=
Subject key identifier:   56:F4:35:74:01:A4:6B:58:20:A8:FB:A4:88:85:4D:48:A2:46:CB:45
Authority key identifier: A3:C5:6E:C1:30:D9:8A:F2:D0:D2:94:59:F2:0F:A7:9B:D6:35:90:15
Certificate issuer:       /CN=a3c56ec130d98af2d0d29459f20fa79bd6359015
Certificate serial:       0198955B72F1FA52A7E9312808EE7FAB88BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
Manifest number:          05AC
Signing time:             Sun 10 Aug 2025 19:00:54 +0000
Manifest this update:     Sun 10 Aug 2025 19:00:54 +0000
Manifest next update:     Mon 11 Aug 2025 19:00:54 +0000
Files and hashes:         1: o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl (hash: ugQccZUijUVtKc8RuQrgtw9p9RBgpkGSKZFamO68tPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:95:5b:72:f1:fa:52:a7:e9:31:28:08:ee:7f:ab:88:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3c56ec130d98af2d0d29459f20fa79bd6359015
        Validity
            Not Before: Aug 10 19:00:54 2025 GMT
            Not After : Aug 11 19:00:54 2025 GMT
        Subject: CN=56f4357401a46b5820a8fba488854d48a246cb45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:78:b2:9b:be:a9:64:ae:b8:8f:b7:27:da:d5:
                    23:b2:96:17:e0:51:2a:24:58:d6:d0:59:cd:77:9d:
                    8e:7d:b3:eb:c7:9d:0d:99:4e:1b:e7:d3:4f:65:82:
                    ad:79:39:e7:cf:6f:9f:56:d7:4d:74:70:d4:c6:f3:
                    dd:de:76:ff:5f:04:de:d7:89:c7:b7:ca:00:51:68:
                    c9:f1:76:39:1a:44:a8:75:cd:7e:69:f9:76:6b:18:
                    85:1c:a8:86:ea:ef:39:5b:9f:10:3e:ae:55:6c:64:
                    6c:29:65:4e:29:78:eb:b6:0b:c1:4f:0e:90:6d:8e:
                    2e:6e:a6:e6:f0:bd:dc:a0:05:0f:a1:b5:b1:b3:4c:
                    6c:5f:59:1c:54:75:0f:28:4d:e3:1d:2b:6a:17:f4:
                    93:33:e0:e4:54:76:4b:14:a0:16:95:7a:da:db:1d:
                    7c:3a:01:88:8b:37:4a:b8:b2:a7:dc:3e:99:39:1f:
                    0b:69:ab:92:ba:4a:d0:42:c7:32:35:9a:90:7c:2f:
                    98:41:fc:4c:cf:86:c9:17:78:59:df:76:87:d5:81:
                    1e:3a:e4:6c:eb:ef:ec:47:83:e5:81:37:d4:38:3c:
                    d2:99:70:60:1d:f6:a8:be:15:c0:7a:b8:c9:ca:b7:
                    f5:85:98:1a:13:49:8c:d7:5e:6e:5d:96:25:cd:7c:
                    e3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F4:35:74:01:A4:6B:58:20:A8:FB:A4:88:85:4D:48:A2:46:CB:45
            X509v3 Authority Key Identifier:
                keyid:A3:C5:6E:C1:30:D9:8A:F2:D0:D2:94:59:F2:0F:A7:9B:D6:35:90:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:59:1a:e2:97:50:3d:06:49:83:2b:30:54:81:f8:00:a9:d1:
         53:e4:9b:88:04:91:50:a5:4d:b0:bf:b0:03:d1:41:22:09:62:
         93:38:d4:3f:50:f4:60:eb:b8:51:85:d5:c5:68:d7:44:4e:85:
         80:71:67:a5:e7:ad:95:09:5e:54:19:fd:0f:60:f6:ba:6b:1a:
         9d:9d:9c:37:7c:86:69:79:b9:f2:db:d3:26:a5:c6:d7:95:c1:
         d1:83:89:76:df:f4:94:eb:ea:2e:2e:cf:8e:47:93:a2:ab:30:
         01:31:80:46:77:a6:9b:66:af:6c:df:a9:3a:e3:5c:f0:f8:99:
         90:a4:bd:df:65:b1:b0:bd:ad:7d:cf:d0:7b:d5:44:3b:25:d0:
         f5:8b:4f:1a:50:c9:17:87:15:b2:15:08:dd:bd:f2:b1:3d:9e:
         dc:1c:6e:08:24:37:2f:33:6b:88:99:ce:9f:28:00:d8:ba:35:
         87:2f:7b:f9:ae:f3:87:d9:ef:15:2c:d3:09:92:3d:2f:d6:6a:
         f3:4a:93:e1:f6:2b:c2:49:95:32:6e:49:d7:cb:73:9a:76:e9:
         b3:30:94:f8:87:3e:04:44:52:cb:13:ab:1f:c8:83:cb:b3:c6:
         21:c3:d7:53:6a:88:e1:9e:ef:95:96:d4:79:18:9a:40:0d:06:
         39:d2:74:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:18:47 2025 by rpki-client