Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
File:                     8L-tMcFMk9qlNEugT0tSNUaW368.mft (raw, json)
Hash identifier:          roPTZDPiLILIIr98XgusobaMvPNQ00fSZ/OeGI/zpbo=
Subject key identifier:   9F:0D:A4:46:84:E2:88:55:94:13:21:3F:5E:AD:E3:8F:A4:24:60:6A
Authority key identifier: F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF
Certificate issuer:       /CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf
Certificate serial:       01987E9CFCC0C9E60A2EDE825E8B9EF1C8AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
Manifest number:          161D
Signing time:             Wed 06 Aug 2025 09:01:14 +0000
Manifest this update:     Wed 06 Aug 2025 09:01:14 +0000
Manifest next update:     Thu 07 Aug 2025 09:01:14 +0000
Files and hashes:         1: 8L-tMcFMk9qlNEugT0tSNUaW368.crl (hash: +iLu1qaynDG6IBpMkKmPAwSvESjmiV+pXtdX08QyjmM=)
                          2: UW4EyDU9bcfR_a5RruA-KGiV3Uw.roa (hash: yNneGYRFbH3ZhAuncPonvd3a6cecW1xrZDzoeBjGnHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:9c:fc:c0:c9:e6:0a:2e:de:82:5e:8b:9e:f1:c8:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf
        Validity
            Not Before: Aug  6 09:01:14 2025 GMT
            Not After : Aug  7 09:01:14 2025 GMT
        Subject: CN=9f0da44684e288559413213f5eade38fa424606a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6c:01:49:3a:e8:60:20:cd:1e:32:0d:f2:3a:
                    dc:0d:fe:d5:4d:42:78:40:7d:19:4c:c3:04:43:83:
                    fa:b6:40:29:29:78:73:f0:2d:f0:bd:1e:61:0b:1f:
                    41:d6:3f:cb:b9:66:1c:39:e0:25:fd:02:2d:82:5a:
                    45:9b:12:2b:e0:c1:d4:16:e9:e6:a6:25:2d:33:d3:
                    63:1e:e2:cf:26:22:33:d4:b5:79:e2:3f:6a:31:31:
                    d3:ec:ac:9a:b8:56:8e:39:eb:14:96:cf:0f:42:84:
                    b2:a2:12:a4:9a:03:e8:49:06:8b:0d:9d:f9:8e:f7:
                    76:71:7e:d3:ba:59:26:27:38:76:4e:8f:0e:46:18:
                    9e:44:60:65:cc:a0:bf:b0:98:aa:0f:7c:53:a2:a5:
                    51:b8:56:60:61:34:58:1a:ef:c9:58:d7:55:f0:f6:
                    c9:86:cd:58:4f:7b:7d:ee:0d:38:de:3f:25:5c:48:
                    70:6c:8b:83:70:4d:eb:a8:a4:53:20:b0:dc:07:eb:
                    9d:d1:76:cf:72:a3:6f:36:7b:43:f8:66:7c:bb:e7:
                    26:e7:74:8b:43:18:02:1d:a6:bc:47:68:d4:6f:de:
                    dc:65:63:06:75:b4:af:40:71:08:eb:ff:ee:43:4b:
                    c5:0b:58:2e:c3:22:12:80:a1:81:d1:9d:01:b0:8a:
                    3c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0D:A4:46:84:E2:88:55:94:13:21:3F:5E:AD:E3:8F:A4:24:60:6A
            X509v3 Authority Key Identifier:
                keyid:F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:9e:08:0a:b3:59:b6:f6:4d:30:ba:fd:8e:aa:bd:30:96:ae:
         98:cc:b4:9b:97:82:c4:76:05:92:e0:a7:0b:6c:c9:27:d7:3b:
         05:67:f7:59:b8:84:5f:3d:54:ec:37:e2:ae:35:c5:9b:1c:09:
         ec:c1:ad:42:d5:e9:9e:57:9d:f9:de:dc:4b:47:3a:7f:f3:66:
         74:33:99:ac:61:9d:6b:9f:b8:db:a8:61:24:ee:2f:1d:bb:06:
         13:84:76:55:70:c8:09:e0:ef:de:15:b6:d8:ee:1d:e8:68:ed:
         98:3d:3b:8e:3d:6f:f8:ab:fc:db:4e:43:17:b2:e8:04:ae:bd:
         5d:1b:81:4d:ba:a9:92:27:a6:75:c8:b1:b9:cc:c8:94:7d:95:
         6a:2e:f5:ce:a1:aa:93:84:17:2a:39:1e:6d:d6:ab:9d:15:c6:
         b8:53:7d:e9:27:00:a5:79:1d:ff:73:27:2a:15:b8:b9:ab:30:
         41:d2:82:09:7c:82:e9:ee:12:11:ee:2b:2a:8f:54:48:b2:d6:
         93:ae:bd:ed:8d:f4:fb:b8:7b:72:1b:03:90:cb:25:87:bd:2c:
         f2:8e:b5:d3:cc:dc:ec:f0:ef:9a:60:40:f7:2e:dc:e7:9c:f5:
         50:7b:7c:e7:5a:b2:de:f1:bd:bd:63:05:2b:bd:72:07:d6:c6:
         e9:1b:28:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:12:34 2025 by rpki-client