Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
File:                     D48Gw1SUYI2azOsHCkzRarlf9qY.mft (raw, json)
Hash identifier:          bQxxdvVHOjcAfQlt1HODqUn0nq+TjluqPDI7NUabZl4=
Subject key identifier:   1C:C1:B3:8F:D5:42:04:68:18:F2:F7:BD:68:10:16:C0:14:AE:97:09
Authority key identifier: 0F:8F:06:C3:54:94:60:8D:9A:CC:EB:07:0A:4C:D1:6A:B9:5F:F6:A6
Certificate issuer:       /CN=0f8f06c35494608d9acceb070a4cd16ab95ff6a6
Certificate serial:       01987BD2497F1F501C7B102278FE5EBA45B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
Manifest number:          0221
Signing time:             Tue 05 Aug 2025 20:00:35 +0000
Manifest this update:     Tue 05 Aug 2025 20:00:35 +0000
Manifest next update:     Wed 06 Aug 2025 20:00:35 +0000
Files and hashes:         1: D48Gw1SUYI2azOsHCkzRarlf9qY.crl (hash: 1yjBFAPUlWs1c+jyksr93ohK/bVZXXFpbXZoGYcywq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:d2:49:7f:1f:50:1c:7b:10:22:78:fe:5e:ba:45:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f8f06c35494608d9acceb070a4cd16ab95ff6a6
        Validity
            Not Before: Aug  5 20:00:35 2025 GMT
            Not After : Aug  6 20:00:35 2025 GMT
        Subject: CN=1cc1b38fd542046818f2f7bd681016c014ae9709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:97:5b:35:b7:0a:94:99:17:28:23:5c:c1:c6:
                    a3:42:5f:9a:ca:8f:97:39:11:72:1a:3c:7f:18:d7:
                    5d:18:9a:3b:6d:cd:63:f6:58:41:3c:9f:c9:97:77:
                    1e:93:f6:d8:19:b1:09:97:f9:0a:a9:a1:34:7a:12:
                    91:ea:b6:9f:db:d4:55:27:b5:7d:65:48:b9:74:c7:
                    b3:74:4f:23:bc:c3:79:c5:69:0c:b9:cb:b2:2d:b3:
                    ff:bc:cd:97:2b:35:07:26:da:83:a4:d6:ce:9f:1e:
                    ac:aa:5d:41:1f:f0:92:62:6e:eb:a3:7d:ee:ce:e1:
                    56:a0:e2:4d:bd:05:99:5a:56:03:af:15:6c:29:3c:
                    8e:b2:01:0e:9f:53:7c:7b:34:b0:96:af:1c:86:7e:
                    ec:f0:23:78:bb:d6:d9:16:de:89:dd:03:51:db:97:
                    5c:b1:fe:e3:b2:3b:2d:11:ce:23:77:0a:fa:c5:f9:
                    1c:a0:18:1f:0e:70:75:ff:ca:03:de:fc:9c:eb:3b:
                    2d:d6:b5:c8:18:fb:ed:f9:0f:35:7a:e4:72:c6:5d:
                    a5:cf:07:a0:a6:5d:36:b1:5c:7e:3f:69:70:f1:f5:
                    66:92:c1:18:ae:87:08:15:91:19:69:0d:88:65:af:
                    c7:18:89:94:70:8a:9c:a8:f8:52:2a:f2:54:55:e2:
                    48:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C1:B3:8F:D5:42:04:68:18:F2:F7:BD:68:10:16:C0:14:AE:97:09
            X509v3 Authority Key Identifier:
                keyid:0F:8F:06:C3:54:94:60:8D:9A:CC:EB:07:0A:4C:D1:6A:B9:5F:F6:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:47:0c:80:5d:b3:5d:aa:53:9f:20:e6:13:96:77:2c:88:10:
         4b:b6:fb:a2:cf:32:8b:39:46:b9:ad:2a:d7:fc:59:11:10:b4:
         86:8b:b5:90:be:db:19:26:ef:b5:9a:a7:de:84:85:26:b0:f4:
         88:a2:e5:7f:fa:e9:35:f5:78:00:21:01:56:82:bd:00:ac:ec:
         cb:7f:91:e1:b2:5c:69:5d:4f:92:75:60:c9:d2:1e:4c:35:43:
         da:60:2b:ab:bc:19:15:a4:c9:8e:ca:8f:0d:6a:23:99:7a:01:
         35:f7:bf:6c:c6:87:83:8e:f8:e6:2c:a5:0b:63:d2:07:8d:de:
         a2:b7:08:51:00:38:8d:01:2a:6c:ba:55:28:5a:ff:90:f4:1e:
         28:5f:47:d4:f0:46:05:f1:53:5b:92:67:57:3f:de:ed:df:c5:
         ba:7a:5a:89:fe:3a:81:e3:17:a9:7b:91:e9:1e:24:c0:13:0d:
         68:99:7b:af:dd:be:a5:e3:6e:17:ed:13:3e:b2:9d:eb:6e:4d:
         f5:a2:be:15:79:c0:c5:32:b2:95:cc:00:18:a4:96:3a:88:aa:
         69:44:5c:89:62:fc:6d:fd:95:f3:7e:8b:1f:93:d2:23:02:31:
         c4:a8:ca:2b:33:92:87:58:0a:99:55:0d:5f:61:27:9b:bb:de:
         b5:e0:41:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:10:32 2025 by rpki-client