Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
File:                     8UPRPHu9KqFfVnfBOawzyGeHnyw.mft (raw, json)
Hash identifier:          3WNLNBDkQSlbHDo/Q4Dl5oAoOmALYEOqXRA/R/WlKNE=
Subject key identifier:   4E:23:16:BE:87:8D:AF:F7:24:56:04:91:C1:CF:C7:00:6D:C4:F3:86
Authority key identifier: F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
Certificate issuer:       /CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Certificate serial:       01987D1C85E04AC5792170AB5CBB94D73457
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
Manifest number:          066C
Signing time:             Wed 06 Aug 2025 02:01:17 +0000
Manifest this update:     Wed 06 Aug 2025 02:01:17 +0000
Manifest next update:     Thu 07 Aug 2025 02:01:17 +0000
Files and hashes:         1: 8UPRPHu9KqFfVnfBOawzyGeHnyw.crl (hash: qN3mkx2A6Sslb4RSEZZ/jm2tGeS1TaOBjo6EAdzvCnE=)
                          2: UMmv-WY7B5qYJViInJvlNV476mE.roa (hash: jHHOgpNZRXbrpDROEuRDFCxUXMl5uaCZV9NM+NW4eXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:1c:85:e0:4a:c5:79:21:70:ab:5c:bb:94:d7:34:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
        Validity
            Not Before: Aug  6 02:01:17 2025 GMT
            Not After : Aug  7 02:01:17 2025 GMT
        Subject: CN=4e2316be878daff724560491c1cfc7006dc4f386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:09:79:8c:4c:fe:76:15:1b:c5:3a:07:d1:e3:
                    16:8d:d2:b8:e1:26:a8:b9:bf:8f:32:1e:01:83:43:
                    90:43:05:f2:fa:b7:3d:2c:0e:a0:2f:fc:3e:f3:4b:
                    23:1f:16:27:da:c5:ce:7d:99:c6:e3:6f:22:62:d7:
                    97:fd:57:c0:c0:56:cc:e9:c6:9c:e3:e6:f7:28:df:
                    ee:da:8d:81:0c:0c:da:6e:65:5c:83:cd:b5:be:c9:
                    50:9d:be:12:6e:2d:00:24:e4:bb:cc:51:d9:42:2d:
                    9e:50:71:5b:4a:92:5b:86:dc:a8:bd:b9:69:a8:7a:
                    c1:15:36:02:65:02:cb:f6:2a:a1:d3:f0:9e:d4:95:
                    78:da:c1:e5:15:89:ff:e0:51:8c:4d:f5:bb:1f:c7:
                    a0:fd:61:07:64:3d:4d:1d:2a:fd:49:c1:19:e3:df:
                    7f:88:3a:94:0e:ce:0b:e0:4e:60:a4:2d:0b:db:1a:
                    2a:2f:96:9a:df:3f:72:d8:2a:d1:4e:a8:10:c1:75:
                    bb:b0:bc:ff:c9:15:f0:f0:1d:0e:06:22:0a:bb:ee:
                    26:6f:a9:e5:aa:4a:69:e6:72:ce:bc:08:e4:14:af:
                    93:54:b5:06:63:69:c0:1a:41:20:6e:13:a2:25:81:
                    e9:6b:88:88:08:f9:c1:ee:75:db:3b:d5:e5:fa:6a:
                    76:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:23:16:BE:87:8D:AF:F7:24:56:04:91:C1:CF:C7:00:6D:C4:F3:86
            X509v3 Authority Key Identifier:
                keyid:F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:df:41:e8:30:e8:37:ab:bf:0b:b0:be:50:d4:a4:82:35:a7:
         aa:fa:ad:56:e8:69:78:40:c7:6b:61:c1:8b:89:db:09:78:1c:
         38:ad:b6:8c:3c:c7:d4:55:ff:ff:67:6f:90:96:6c:15:99:d1:
         6c:3e:ef:ce:8b:fe:0d:79:fd:6f:35:84:dd:8d:d7:ef:8a:93:
         31:ce:3e:9a:28:9c:bb:6a:76:df:c7:94:0e:fc:61:89:9c:c9:
         a1:5a:e4:d5:d0:61:5f:a2:95:72:20:af:c9:62:8c:2a:19:19:
         34:5d:17:99:25:ff:17:2a:dc:cd:67:1e:b1:83:3d:a5:9d:a4:
         86:5b:b8:71:22:57:98:62:54:3b:cc:e4:02:17:cb:4f:f4:d8:
         a3:0e:37:6d:49:fc:64:80:8b:c5:75:e7:7c:c8:a3:29:90:c9:
         fe:3f:49:7d:e4:19:9a:a4:da:1d:64:30:81:8d:04:0f:3e:2b:
         48:02:f0:d1:15:f0:b3:98:ed:d6:31:49:8b:e9:c1:66:aa:d0:
         ba:ac:04:1e:61:b9:27:89:82:f1:33:3f:ca:d2:51:c6:45:ce:
         8b:e2:16:fa:1f:7b:15:6d:8b:05:1b:3b:44:62:2d:e9:23:c1:
         e7:c0:6c:9c:0e:6d:d7:85:b4:77:15:37:93:3a:7a:9e:a9:d1:
         93:ef:f1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:07:45 2025 by rpki-client