Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
File:                     i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft (raw, json)
Hash identifier:          79lewpkEz0/yECuKlH1a2uVGmxIJ8gq3JFkaqmMDuSM=
Subject key identifier:   D0:A0:61:57:CA:94:E4:42:46:C1:B9:8A:1E:8F:27:6B:0A:B3:F5:5E
Authority key identifier: 8B:8A:F6:AF:57:DD:FC:5C:7A:A8:28:CF:22:5F:98:DC:E9:59:04:A0
Certificate issuer:       /CN=8b8af6af57ddfc5c7aa828cf225f98dce95904a0
Certificate serial:       019894EE17BAC4CCB27C0E6BFC6322B271DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
Manifest number:          0930
Signing time:             Sun 10 Aug 2025 17:01:28 +0000
Manifest this update:     Sun 10 Aug 2025 17:01:28 +0000
Manifest next update:     Mon 11 Aug 2025 17:01:28 +0000
Files and hashes:         1: i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl (hash: 6gBty8Z/MFK+vPxROUBdSvJYR+AfZe28q34k/3y+01Y=)
                          2: stIrfyQj0_eTZw5LKQkMNxuFxgI.roa (hash: eqwBV8CXGai5haR4OF0T1dC++87tM0y7pi8XDxr8OrQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:94:ee:17:ba:c4:cc:b2:7c:0e:6b:fc:63:22:b2:71:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b8af6af57ddfc5c7aa828cf225f98dce95904a0
        Validity
            Not Before: Aug 10 17:01:28 2025 GMT
            Not After : Aug 11 17:01:28 2025 GMT
        Subject: CN=d0a06157ca94e44246c1b98a1e8f276b0ab3f55e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:12:b5:e7:7f:df:fb:aa:36:63:c6:7c:be:91:
                    89:36:4f:69:6d:ba:4d:ea:de:5f:8e:07:5f:d3:32:
                    24:6e:7d:1b:87:bd:21:14:ba:08:5f:c8:cc:ca:bc:
                    89:7a:c3:b7:69:38:f7:d9:b7:17:61:8e:a6:0e:e3:
                    5a:96:45:da:3c:d6:6b:1d:1c:2b:b9:c3:83:4d:7c:
                    55:f4:b2:e9:57:e6:f3:57:62:9c:68:b6:52:80:fb:
                    6f:82:46:f1:a8:64:6d:81:d0:37:31:92:24:60:e0:
                    2b:3d:cb:6f:27:1d:e7:af:90:6d:75:0b:94:13:96:
                    f6:95:5e:a4:12:0d:7c:97:5b:b4:50:2f:97:01:95:
                    a6:28:24:67:6f:59:2f:31:9a:78:72:14:0b:c9:ee:
                    08:94:d6:d6:70:1f:f8:e8:ad:f7:a9:d3:cd:f0:e6:
                    50:f1:d7:a6:77:7f:bd:81:cb:96:71:1a:8b:94:bd:
                    2a:cc:43:41:f2:f6:86:8d:1f:4f:2c:14:d7:48:04:
                    1a:df:47:83:71:0b:2e:c2:9d:9a:9c:e3:0b:44:93:
                    eb:d8:b6:c5:c6:2f:09:03:65:e7:07:85:3f:cf:87:
                    d0:fd:76:94:15:5d:ee:89:2b:2b:9d:ea:fc:cd:3a:
                    a8:b2:6d:33:f7:c8:d5:d6:67:c9:8b:9f:68:44:55:
                    50:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A0:61:57:CA:94:E4:42:46:C1:B9:8A:1E:8F:27:6B:0A:B3:F5:5E
            X509v3 Authority Key Identifier:
                keyid:8B:8A:F6:AF:57:DD:FC:5C:7A:A8:28:CF:22:5F:98:DC:E9:59:04:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:83:44:a6:de:c7:63:20:fc:61:45:09:8f:7d:d5:90:fc:bc:
         a5:95:e0:a2:49:03:d6:12:10:de:1e:d8:6b:62:39:b6:ac:8f:
         ea:f4:73:76:84:87:6b:19:4a:2e:38:86:94:db:b9:61:63:a2:
         3a:2e:17:29:93:ed:a5:b8:7d:bc:bd:52:16:f5:9a:7b:89:29:
         7a:f0:98:8c:be:19:52:0c:46:90:56:7f:a5:10:83:5a:bf:03:
         83:77:13:64:ee:f1:4b:0f:e7:58:44:3a:41:ad:20:f0:e8:f6:
         59:b3:1a:08:db:55:b8:35:ea:68:df:85:f6:a4:4c:f1:ae:9c:
         19:c4:df:31:d7:47:59:b1:b1:26:82:5e:b9:79:f3:b2:ea:36:
         be:ba:61:ab:bb:64:d2:cb:7d:67:6f:e8:88:45:20:ff:13:5c:
         2d:fb:7b:c4:5f:c3:19:11:03:62:69:97:7f:dd:15:9b:f2:11:
         95:e7:45:bd:cb:44:71:a8:88:e6:12:68:ce:60:a9:7a:4d:67:
         19:72:e7:1e:42:bf:8d:1b:d1:91:76:ab:35:71:db:5f:e2:41:
         c8:1a:09:6a:ce:6e:ab:e5:be:dc:2b:3e:fc:43:a5:64:7a:06:
         72:34:f9:2a:6c:41:bd:b0:b2:e9:a7:2b:58:9e:f2:34:75:b7:
         e5:32:71:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:44:32 2025 by rpki-client