Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft
File:                     8WBdCa0sbEN7bC-Gg___viF0_mw.mft (raw, json)
Hash identifier:          kLnsNBhjg+lWydiisioTIS3NPxVsGHmWnjoCPgv/Haw=
Subject key identifier:   81:E5:4A:02:03:30:21:E6:DC:BE:2F:BE:35:A5:AF:2B:A1:34:3E:77
Authority key identifier: F1:60:5D:09:AD:2C:6C:43:7B:6C:2F:86:83:FF:FF:BE:21:74:FE:6C
Certificate issuer:       /CN=f1605d09ad2c6c437b6c2f8683ffffbe2174fe6c
Certificate serial:       019872CF36DA01FCA11CF296715296D0D8D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft
Manifest number:          0F81
Signing time:             Mon 04 Aug 2025 02:00:39 +0000
Manifest this update:     Mon 04 Aug 2025 02:00:39 +0000
Manifest next update:     Tue 05 Aug 2025 02:00:39 +0000
Files and hashes:         1: 8WBdCa0sbEN7bC-Gg___viF0_mw.crl (hash: aKSFbW4dIazfNUQOmk3h05afCXSvAKQBDgDEtCXaOOw=)
                          2: j3qkWwGkWnrxhLgyGwrcFzXJWM4.roa (hash: tCyqkdV84n1oHfUiO9Wnf9/3f5vZVsXyCuIYwhEsEzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:36:da:01:fc:a1:1c:f2:96:71:52:96:d0:d8:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1605d09ad2c6c437b6c2f8683ffffbe2174fe6c
        Validity
            Not Before: Aug  4 02:00:39 2025 GMT
            Not After : Aug  5 02:00:39 2025 GMT
        Subject: CN=81e54a02033021e6dcbe2fbe35a5af2ba1343e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d4:22:61:af:a4:b6:1c:c4:dd:ed:92:18:a2:
                    68:9d:46:bc:d8:41:11:1d:38:eb:7f:e2:ec:f0:c3:
                    ae:0e:77:8b:85:b8:1a:0d:98:f1:09:9f:20:02:eb:
                    3f:83:03:e9:10:ef:ad:05:58:d9:38:cf:d5:f9:af:
                    59:c2:4e:e9:c3:2a:f6:dc:3e:41:ed:7c:f3:4d:cb:
                    ea:a8:6a:de:6a:66:d5:93:dc:ec:c6:79:16:48:65:
                    ec:10:36:08:76:65:06:db:dc:76:e5:76:f1:97:a5:
                    c5:12:63:4d:42:aa:d0:26:61:3e:a1:dc:a3:27:4e:
                    8d:9a:33:dd:35:af:a5:40:43:09:78:b6:34:ac:e7:
                    5a:b7:3d:5f:91:92:6c:02:01:49:db:2d:ff:12:fb:
                    56:5b:09:09:d0:48:b9:83:93:0f:60:2c:2e:2d:63:
                    14:1e:88:70:b3:14:6a:bb:4b:83:dc:d3:fd:3c:c5:
                    76:bc:ac:02:d0:95:af:50:65:cb:56:70:85:9f:6f:
                    6f:0e:05:ba:9e:06:da:5c:3d:aa:23:e2:2c:d4:b9:
                    b9:dc:66:e9:34:0f:85:7d:91:b1:d8:fc:75:06:1f:
                    97:73:30:f1:30:f5:fd:30:a4:91:d9:b0:69:8d:33:
                    b4:a9:d3:17:80:ae:f0:5c:b3:54:08:fd:cf:6e:33:
                    7d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E5:4A:02:03:30:21:E6:DC:BE:2F:BE:35:A5:AF:2B:A1:34:3E:77
            X509v3 Authority Key Identifier:
                keyid:F1:60:5D:09:AD:2C:6C:43:7B:6C:2F:86:83:FF:FF:BE:21:74:FE:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:b8:a1:fb:4c:c3:15:be:c0:d4:93:10:34:6d:0a:4b:a5:e5:
         72:67:d5:e5:14:83:77:71:0c:25:56:16:a2:ae:4a:74:2f:6e:
         06:2e:fa:eb:6d:77:49:39:e9:01:e0:e3:58:1f:0a:88:b7:62:
         bb:2c:fc:44:6f:58:06:07:bb:ac:b1:ec:01:fc:6f:4e:d7:84:
         01:54:9f:aa:5a:73:9c:a6:64:e6:a4:52:a1:8c:6f:78:99:a2:
         6b:8f:e1:49:44:03:b2:06:4e:f0:ff:a6:be:15:c1:1e:12:11:
         bc:31:d4:90:51:d5:9b:c5:c8:84:66:a7:cd:8f:9a:53:41:ae:
         37:87:6d:cc:11:ef:18:25:a8:1e:6c:47:10:44:f4:b5:b0:4d:
         12:aa:a1:e2:33:52:54:b0:a1:e6:8d:47:3d:04:15:0c:a9:6e:
         88:02:fe:2a:42:19:e5:d6:df:73:9e:72:28:0d:f6:d4:33:eb:
         e0:b3:42:13:49:95:c0:e7:a1:92:ab:25:bf:30:76:67:54:01:
         d0:09:5d:62:fd:0f:59:ee:d5:63:f6:cd:3f:66:8e:92:50:2d:
         11:7b:17:e3:a7:9c:33:58:77:57:c6:4a:0a:c7:0f:92:3a:f1:
         a9:ff:9f:01:fa:41:16:5e:c9:3a:c9:08:e4:93:2e:fb:4d:e1:
         51:9e:90:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:41 2025 by rpki-client