Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft
File:                     C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft (raw, json)
Hash identifier:          Nx1CNCrKoZ+z2TIv534p5jiWYzYISKKKE5kTVRCD+7o=
Subject key identifier:   63:DA:E9:4C:2F:AB:A5:0F:C9:56:3B:69:DB:0F:5D:46:9E:F7:8A:C3
Authority key identifier: 0B:CB:F7:48:E9:F4:99:86:85:D0:C9:65:D2:DF:DF:0F:36:2A:50:52
Certificate issuer:       /CN=0bcbf748e9f4998685d0c965d2dfdf0f362a5052
Certificate serial:       0198733D0B5CC791EC6AE031D7B15996DB9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C8v3SOn0mYaF0Mll0t_fDzYqUFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft
Manifest number:          12F3
Signing time:             Mon 04 Aug 2025 04:00:36 +0000
Manifest this update:     Mon 04 Aug 2025 04:00:36 +0000
Manifest next update:     Tue 05 Aug 2025 04:00:36 +0000
Files and hashes:         1: C8v3SOn0mYaF0Mll0t_fDzYqUFI.crl (hash: 6U91i7qj5vvq7sHEPRQ4ZSksqYEKwRVjgtm78yTqNLQ=)
                          2: VDV2mgvPqpRmmoenb9SaX1u1440.roa (hash: ivvVUYPgums0E545lnqR4Wp+TXCXyBK6qgVWasD11m0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C8v3SOn0mYaF0Mll0t_fDzYqUFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3d:0b:5c:c7:91:ec:6a:e0:31:d7:b1:59:96:db:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bcbf748e9f4998685d0c965d2dfdf0f362a5052
        Validity
            Not Before: Aug  4 04:00:36 2025 GMT
            Not After : Aug  5 04:00:36 2025 GMT
        Subject: CN=63dae94c2faba50fc9563b69db0f5d469ef78ac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:80:44:bb:3a:80:c7:38:9a:54:4c:c1:d2:f5:
                    21:08:63:ac:5e:af:88:d4:98:97:43:af:56:f5:67:
                    3f:eb:60:4f:24:f6:c0:48:d5:ca:26:bc:22:32:e7:
                    77:36:0f:a9:29:f7:5d:df:26:2b:66:71:8c:30:21:
                    ad:b7:a9:01:3c:f9:71:aa:bd:53:69:7c:14:16:04:
                    74:c6:be:0b:d0:35:ce:a7:77:39:2c:78:5c:3c:60:
                    2c:5a:2f:69:26:a1:f8:1f:e2:6b:f5:a8:f7:bd:56:
                    a9:d9:ac:37:35:47:ac:30:e3:e5:05:05:a7:62:3f:
                    14:e8:29:fd:c5:fa:98:58:8a:9f:bb:dd:0c:09:c1:
                    98:bf:88:b3:2f:4f:47:62:be:2e:9e:68:d1:e7:ba:
                    8b:68:93:79:08:84:34:d6:59:59:e8:f9:a3:7e:6e:
                    55:45:86:97:8b:b4:e0:ba:44:41:98:03:e2:dd:39:
                    5a:35:9c:45:71:cf:8d:f1:52:b9:d0:ec:a4:39:01:
                    a6:4c:0a:2f:f0:ae:e9:d4:85:35:b8:72:04:03:95:
                    0c:3a:67:99:a7:a9:f9:f1:5a:47:6f:9b:dc:1c:01:
                    b4:cd:1f:e5:59:f8:c1:6f:fe:6a:bf:cd:97:5e:9a:
                    9a:95:f5:e0:65:84:ab:db:6f:d5:e4:25:8e:2b:26:
                    68:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DA:E9:4C:2F:AB:A5:0F:C9:56:3B:69:DB:0F:5D:46:9E:F7:8A:C3
            X509v3 Authority Key Identifier:
                keyid:0B:CB:F7:48:E9:F4:99:86:85:D0:C9:65:D2:DF:DF:0F:36:2A:50:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8v3SOn0mYaF0Mll0t_fDzYqUFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:7a:60:fa:c5:ea:27:a8:e4:f8:2b:42:50:81:d0:03:aa:37:
         fa:fd:e2:a0:a5:6a:51:46:f8:51:b4:41:fb:a0:69:1e:96:8a:
         59:f5:73:38:07:15:2e:6e:01:e8:8a:7e:c0:f5:bd:b1:65:df:
         98:6c:ca:2f:b8:e0:94:6f:f8:33:ed:20:29:f9:47:f8:2a:34:
         80:25:0a:1a:f7:7e:e5:cb:a3:6f:8d:53:3f:7e:73:e4:91:f2:
         f1:81:bd:29:87:84:75:9b:a8:30:87:51:f2:f2:c6:87:97:de:
         ee:7f:3e:8f:0a:af:7e:ae:8e:2a:07:97:3e:3f:c7:3e:b7:74:
         c8:50:d4:bd:a8:1a:d0:b0:d1:51:fd:48:e6:7b:10:5b:4c:5c:
         3b:19:a4:86:97:7f:c3:dd:94:10:23:42:c2:42:02:2c:e6:fd:
         a8:8d:ff:bb:1e:6a:c1:af:33:ea:db:6f:f7:a0:53:bd:43:bc:
         23:ea:39:4a:05:fc:68:2c:46:c1:c9:6f:93:74:d8:86:ca:84:
         77:bd:14:20:99:99:e1:f6:08:5d:47:5f:fb:3c:4a:c8:3c:19:
         2d:3c:75:03:96:52:a0:ed:25:85:ab:4c:d7:4b:16:36:bd:ab:
         de:fe:99:30:57:b9:83:4e:d7:26:39:1d:c6:ba:7f:ce:95:93:
         f0:ad:44:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:31 2025 by rpki-client