Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
File:                     c8_hHopwk73JW8AeINtDduIqpRY.mft (raw, json)
Hash identifier:          sNhGZj8C61WLzR9IVFqcwtm9Z8vxKwTYnE7ZzUBBr+E=
Subject key identifier:   F8:46:82:6C:CC:95:28:33:4F:63:4B:DA:A0:23:CD:4B:DD:52:5B:A8
Authority key identifier: 73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16
Certificate issuer:       /CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516
Certificate serial:       01987450476F927F02C1B236F98DA8DF04C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
Manifest number:          032A
Signing time:             Mon 04 Aug 2025 09:01:14 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:14 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:14 +0000
Files and hashes:         1: SVFNCXAgs-J1Ur0M2wuVWaTBzQI.roa (hash: rGZg6LxxY7ku4GUoLGf94rOsH2eH6eg3rUYHF4vWHMk=)
                          2: c8_hHopwk73JW8AeINtDduIqpRY.crl (hash: H9X5c8TSHe+OPmjWGAJGphzjQQ+/ONbxton6hMYIUIw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:47:6f:92:7f:02:c1:b2:36:f9:8d:a8:df:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516
        Validity
            Not Before: Aug  4 09:01:14 2025 GMT
            Not After : Aug  5 09:01:14 2025 GMT
        Subject: CN=f846826ccc9528334f634bdaa023cd4bdd525ba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bc:6a:86:88:7c:fe:ac:e2:60:73:f0:11:28:
                    4b:67:bc:8f:7f:c1:72:48:15:18:0b:69:a3:f4:d3:
                    1c:27:4c:5d:63:20:aa:8d:f1:41:8f:a7:58:2e:f2:
                    bc:c6:23:58:03:e9:b7:4d:04:df:c3:03:a5:18:93:
                    f3:70:8e:4e:a0:fa:00:4f:17:af:78:bf:62:6c:e6:
                    55:e3:c3:1e:2b:45:05:01:d9:f5:61:61:fd:d2:51:
                    0b:b9:cb:16:03:5d:0f:f4:0d:a5:e6:f4:63:38:c2:
                    44:8e:f2:0c:40:fc:66:49:f7:37:61:02:5f:0f:4e:
                    0d:e5:c5:fd:25:92:f1:6d:bb:a7:61:80:b8:a4:6a:
                    fa:98:03:43:a5:32:42:c1:d3:09:74:cb:45:af:cb:
                    5c:4b:c6:94:18:aa:19:5f:c9:62:ae:e0:1e:fc:4e:
                    dc:47:1e:ac:c7:99:c1:5e:e6:e3:bd:d7:64:b9:fe:
                    af:86:45:23:ca:d6:1d:7f:34:53:a3:9a:b4:25:1a:
                    a4:6d:05:ff:3a:cc:eb:eb:9e:d5:73:65:75:fc:79:
                    eb:d5:65:41:4e:8d:b4:cf:04:7b:01:9b:b4:e6:8f:
                    ca:2d:8f:60:a3:5a:8c:3c:c9:ed:36:8c:8f:e7:94:
                    cf:38:40:60:b1:f5:3f:ee:4e:e9:bb:dd:c4:c2:70:
                    45:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:46:82:6C:CC:95:28:33:4F:63:4B:DA:A0:23:CD:4B:DD:52:5B:A8
            X509v3 Authority Key Identifier:
                keyid:73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:13:e8:0f:89:8b:72:c7:ea:8a:a0:e2:53:e5:12:0d:d4:3f:
         fd:19:4b:80:c9:b5:19:3c:53:35:35:62:c2:4f:60:0c:37:92:
         40:b5:a5:ea:38:f7:a6:e7:a7:17:de:9e:53:c2:e3:11:20:29:
         0f:79:6e:0c:f7:8c:c6:76:2d:fb:b8:39:d2:dd:1d:bc:d0:47:
         18:eb:cb:1e:43:d7:39:0e:34:1b:d4:f6:c1:3e:b8:75:7f:27:
         cc:78:71:a4:75:7e:92:f6:c2:a9:77:27:04:f9:65:13:57:5f:
         0e:a7:50:11:ab:5b:65:14:86:9a:5f:3d:af:ea:63:f7:34:60:
         40:6d:da:14:5f:3e:0a:74:ad:e3:09:f2:86:8e:d9:f7:27:94:
         40:86:48:0b:cc:76:85:a0:3e:67:73:10:21:11:fc:30:7c:dd:
         8f:db:06:c3:00:fa:7a:49:f9:02:8a:c6:34:29:9b:b1:7a:ac:
         ac:5d:15:b5:dc:b2:0c:10:1b:85:a9:00:2d:6c:aa:d1:0f:22:
         94:e7:91:69:c5:de:98:47:0c:66:2e:d1:20:e7:c9:0c:7b:1c:
         af:c0:ae:f5:7d:0d:fd:87:fe:9b:57:6b:0a:22:b3:63:d2:2d:
         84:60:60:82:ee:5e:39:ce:49:c0:9c:73:14:76:37:28:e8:c8:
         79:5c:4d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:24 2025 by rpki-client