Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft
File:                     8EoYcV28tIU2j6_pm4riyfBK92M.mft (raw, json)
Hash identifier:          NL7wK0m/VBFkMD70To0eq33v4rvEzyzT+ykEGMFWA1Q=
Subject key identifier:   F6:05:9F:35:56:CC:BB:C3:DF:CF:DB:BC:61:D8:E7:8D:A6:CE:B4:00
Authority key identifier: F0:4A:18:71:5D:BC:B4:85:36:8F:AF:E9:9B:8A:E2:C9:F0:4A:F7:63
Certificate issuer:       /CN=f04a18715dbcb485368fafe99b8ae2c9f04af763
Certificate serial:       0198A04E04735631CCA9FD5D9245D1073A5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8EoYcV28tIU2j6_pm4riyfBK92M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft
Manifest number:          0D8E
Signing time:             Tue 12 Aug 2025 22:02:04 +0000
Manifest this update:     Tue 12 Aug 2025 22:02:04 +0000
Manifest next update:     Wed 13 Aug 2025 22:02:04 +0000
Files and hashes:         1: 8EoYcV28tIU2j6_pm4riyfBK92M.crl (hash: Wo0qZPeCFjY5BXVG2WCIlJc2Wb1DEzu72NrqXaHGXlg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8EoYcV28tIU2j6_pm4riyfBK92M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:4e:04:73:56:31:cc:a9:fd:5d:92:45:d1:07:3a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04a18715dbcb485368fafe99b8ae2c9f04af763
        Validity
            Not Before: Aug 12 22:02:04 2025 GMT
            Not After : Aug 13 22:02:04 2025 GMT
        Subject: CN=f6059f3556ccbbc3dfcfdbbc61d8e78da6ceb400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ea:51:60:32:ec:66:cd:90:c1:a1:df:86:11:
                    3a:05:bf:e2:3d:00:4f:91:c4:04:c9:ae:34:1f:d1:
                    4e:29:fa:71:ae:05:9f:6e:a8:34:ff:3f:1c:b2:e1:
                    78:6d:f3:5c:b3:28:f7:b4:39:19:5c:80:1e:4d:16:
                    78:15:53:dc:04:ab:bb:39:87:c7:4b:68:46:53:c5:
                    ca:7d:6f:72:ac:37:6e:55:e8:80:c8:f0:98:01:f9:
                    89:2a:1c:6c:f5:f7:21:fa:d1:0e:0e:60:27:c0:63:
                    8b:0a:97:74:b6:fe:30:84:ea:ee:01:7c:e7:40:d0:
                    f2:8e:36:ba:f0:d8:f6:65:45:c7:d3:53:6a:80:77:
                    a0:e7:4c:14:5a:05:d5:78:d4:bd:69:b7:02:de:7c:
                    8a:3b:04:64:76:a5:cf:87:fe:70:4e:5f:15:99:ea:
                    50:33:ab:de:d0:09:99:28:bb:c6:e4:0f:a3:e5:e0:
                    66:89:bf:7b:b6:9e:1b:ae:79:6f:4e:99:56:3d:59:
                    7d:ec:48:b4:23:00:05:fe:af:c7:93:a1:fe:74:31:
                    6d:96:f6:ea:d2:5c:7b:c3:cb:c9:70:3b:30:67:0d:
                    b3:1e:2b:5d:20:3e:89:45:20:fa:db:1a:61:4d:9b:
                    fd:b2:df:39:58:06:21:e6:89:1c:c9:42:f8:e3:c5:
                    2e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:05:9F:35:56:CC:BB:C3:DF:CF:DB:BC:61:D8:E7:8D:A6:CE:B4:00
            X509v3 Authority Key Identifier:
                keyid:F0:4A:18:71:5D:BC:B4:85:36:8F:AF:E9:9B:8A:E2:C9:F0:4A:F7:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EoYcV28tIU2j6_pm4riyfBK92M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:8a:97:83:9c:2d:b1:b9:f6:d6:c4:12:2b:bb:bc:70:46:d1:
         75:48:24:63:48:8b:28:57:2a:4b:71:24:09:ad:14:77:c0:ac:
         d7:d2:3b:ee:8e:26:5e:76:86:27:eb:fe:55:87:7e:66:de:51:
         4a:72:28:76:d3:12:28:9e:45:0d:8a:12:bf:bc:cd:c0:8e:d3:
         72:55:f8:78:f8:40:a3:08:41:77:ab:8f:35:a3:e0:ea:2b:c9:
         5b:ae:8e:70:e6:01:ef:04:93:38:27:ad:49:c5:ed:f6:74:1e:
         6a:7c:36:a1:9d:56:4a:a9:54:94:38:02:10:96:7c:84:7b:19:
         0b:be:d5:5f:31:ae:bb:0a:06:75:72:e7:49:07:94:1a:31:cc:
         12:c9:48:54:c6:ca:08:08:4a:48:0f:d4:58:29:64:4e:e6:a4:
         a2:98:3b:af:d9:3d:7e:59:f1:38:38:a8:09:cf:a5:0e:5c:95:
         c9:d8:5a:a0:8c:c9:6b:b2:d6:f9:41:8a:91:d3:0c:4c:1f:02:
         77:0e:a4:82:e3:49:2f:54:53:9f:65:a4:54:cf:a5:77:d2:c9:
         b4:3d:1d:61:ab:eb:38:8a:ef:32:c6:d0:95:c9:37:56:7a:08:
         2b:9e:7e:18:36:c2:f7:be:bf:91:8e:90:36:cb:8e:a0:7b:2b:
         37:cd:ca:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:37:03 2025 by rpki-client