Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
File:                     8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft (raw, json)
Hash identifier:          SS5V73jK920BpgXsL2Ex+4GoLhrTnrTi2+F5l11ZPcQ=
Subject key identifier:   10:A0:A0:BD:CC:35:77:1E:54:D1:8A:DE:32:16:7F:48:8D:5B:FC:51
Authority key identifier: F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
Certificate issuer:       /CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Certificate serial:       0198838C81028A8DC0CF21E1969C86FF0A13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
Manifest number:          15C8
Signing time:             Thu 07 Aug 2025 08:01:20 +0000
Manifest this update:     Thu 07 Aug 2025 08:01:20 +0000
Manifest next update:     Fri 08 Aug 2025 08:01:20 +0000
Files and hashes:         1: 2_G9MV3MarApcSIaC14zzAbTXto.roa (hash: Xsc0Q6TWSpbouB+us1TXP5dMLNVqwF4nhlITaZf4sco=)
                          2: 8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl (hash: dm6gNVhT8PyY33veKpF79Bg9WR4JtmGKRuwN+oxB59U=)
                          3: f4A325yGj48RuMfkjcKdx35IWgg.roa (hash: j8y8oC78Ayis+Zl1DL+FUWPv5N+us3D0FIOg/cZJpDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:83:8c:81:02:8a:8d:c0:cf:21:e1:96:9c:86:ff:0a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
        Validity
            Not Before: Aug  7 08:01:20 2025 GMT
            Not After : Aug  8 08:01:20 2025 GMT
        Subject: CN=10a0a0bdcc35771e54d18ade32167f488d5bfc51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:83:59:0f:d4:fc:23:da:50:a8:97:ad:21:98:
                    32:c9:e0:e4:42:91:32:6f:62:f8:c7:90:6d:d3:1f:
                    3b:d1:0a:8c:5f:45:f9:70:86:1a:3c:da:57:21:f7:
                    0c:d0:49:93:1b:23:e0:9a:db:5d:82:8f:99:22:28:
                    19:bb:43:2d:a9:ea:eb:5b:02:46:97:1b:1c:78:31:
                    1c:42:92:2b:15:8a:e6:07:a1:c8:ba:0f:62:52:72:
                    d8:4b:49:62:a8:4d:8e:da:cb:f4:63:64:71:16:dc:
                    52:2a:31:b9:50:21:5a:00:76:3c:89:a4:c5:e3:95:
                    29:6a:08:cd:d1:db:30:21:ef:a7:33:56:7c:6f:d7:
                    dd:e0:0e:53:25:82:20:0b:ee:29:2f:40:41:9f:f5:
                    3a:7d:c9:60:26:0d:48:26:0a:0b:75:9a:e0:23:ec:
                    e7:b6:35:f2:11:f3:e6:74:04:00:81:ee:83:00:4a:
                    96:db:9a:ff:98:3b:55:ee:61:a4:6a:f7:c6:ac:90:
                    59:e3:c6:5a:c0:0e:73:ca:b9:ff:aa:12:be:cb:f2:
                    d3:50:f8:20:ba:fa:2f:e6:42:2d:57:95:e2:4d:3c:
                    48:03:c1:d7:a8:58:0f:95:69:19:09:a7:8b:bb:ba:
                    51:6b:51:d9:5e:00:97:a2:72:06:89:88:50:f2:a1:
                    b0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A0:A0:BD:CC:35:77:1E:54:D1:8A:DE:32:16:7F:48:8D:5B:FC:51
            X509v3 Authority Key Identifier:
                keyid:F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:7f:2e:74:2f:45:03:db:4c:b3:3b:bc:f8:8f:cb:cd:3e:55:
         6d:2e:2b:e1:c6:cf:fa:28:94:47:f3:99:d2:ac:72:b5:42:d8:
         f7:f4:6e:70:b5:e6:74:2f:63:68:62:c0:e4:78:81:21:81:5e:
         c6:0e:1d:54:cd:a0:73:cf:ac:37:d8:85:bb:77:23:d8:67:a7:
         e3:6c:19:03:07:2b:25:1e:d9:02:22:1f:0a:d3:5f:e6:bf:8b:
         0e:5d:5d:5d:5a:05:3f:6c:60:71:0e:24:5e:ac:7f:ac:f9:dd:
         ad:13:91:08:7b:a4:90:9b:0d:43:85:89:09:83:1f:db:ea:d2:
         55:24:db:53:2d:c4:48:fa:04:14:18:e4:e5:2d:41:d2:a7:08:
         d2:1e:44:72:b2:6b:e9:70:79:cc:ec:d3:a3:5a:c0:5c:5c:4c:
         8c:1a:f7:17:59:0a:df:1d:85:8d:9d:17:9a:a6:e5:bb:9d:38:
         da:67:ec:bf:12:be:e2:9b:2c:a5:cd:f3:4d:d4:14:49:86:d9:
         a3:e5:23:ce:db:f6:be:0f:1c:88:bb:34:04:dd:1f:60:6f:20:
         ca:21:08:37:de:c0:19:e0:f6:75:a0:f0:b4:6f:62:50:d8:0a:
         ee:46:b9:cc:8c:90:31:57:ce:dc:79:6f:37:6d:09:1c:3b:e0:
         cf:62:e7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 13:07:00 2025 by rpki-client