Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
File:                     CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft (raw, json)
Hash identifier:          KPU9nA6++YmfHmmyfkk9WY8QzQ5UptoJspaQUSiF6Dw=
Subject key identifier:   41:93:32:6B:FA:AE:90:AD:6C:A7:9B:2F:1E:70:F3:34:B7:20:10:A8
Authority key identifier: 09:C6:2B:5B:D8:71:82:E8:07:3C:B6:CC:0D:79:FE:EE:7B:DB:99:0D
Certificate issuer:       /CN=09c62b5bd87182e8073cb6cc0d79feee7bdb990d
Certificate serial:       01987CAE4F3A2ED508ACFB3152480A23EA22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
Manifest number:          03BA
Signing time:             Wed 06 Aug 2025 00:00:55 +0000
Manifest this update:     Wed 06 Aug 2025 00:00:55 +0000
Manifest next update:     Thu 07 Aug 2025 00:00:55 +0000
Files and hashes:         1: CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl (hash: AcKq2EE2foWrZmGh6M0NxkfjwIcNNuSiokuYDsv3sqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 00:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:ae:4f:3a:2e:d5:08:ac:fb:31:52:48:0a:23:ea:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c62b5bd87182e8073cb6cc0d79feee7bdb990d
        Validity
            Not Before: Aug  6 00:00:55 2025 GMT
            Not After : Aug  7 00:00:55 2025 GMT
        Subject: CN=4193326bfaae90ad6ca79b2f1e70f334b72010a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9c:51:ab:b5:cc:3d:71:3c:9c:30:b1:a3:c7:
                    d7:c2:da:0f:fe:60:dd:6b:57:c6:0f:4d:ca:85:ab:
                    84:1e:8c:a6:28:48:80:03:b1:b9:ec:8b:d8:5b:48:
                    5c:d0:15:d0:8f:f3:3e:b1:b8:ca:ee:c4:f2:a4:29:
                    72:de:f8:4e:a3:74:ad:fe:62:c9:47:59:5a:ed:51:
                    e8:22:91:2c:e1:9c:a4:82:f8:38:09:1b:b1:83:73:
                    6c:4c:6d:8a:77:2c:aa:00:91:bf:c9:e9:31:d6:92:
                    88:bf:a6:7c:be:80:cf:f9:74:51:90:61:22:e9:2c:
                    ee:73:60:4c:6a:be:78:4a:cc:73:52:f9:ab:c1:34:
                    2c:1b:f3:08:a2:97:3e:8e:34:31:9e:aa:34:db:08:
                    2f:88:df:ce:5f:60:0c:5b:2a:d7:5e:3a:67:8b:13:
                    84:21:86:09:52:84:13:bd:2f:38:5a:bb:59:72:e6:
                    0a:24:63:48:f5:9d:97:f7:eb:2c:8e:10:e5:52:85:
                    f7:9f:78:5f:c7:6c:fd:7e:c8:79:33:b2:51:0b:1a:
                    a9:ee:8c:a8:da:ca:7f:03:d1:b3:cd:77:26:f0:ee:
                    e2:86:21:b1:fb:58:5d:74:31:41:31:7e:8d:d2:5c:
                    2b:09:9a:90:5b:7d:4e:da:b6:57:9d:1b:96:88:1b:
                    02:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:93:32:6B:FA:AE:90:AD:6C:A7:9B:2F:1E:70:F3:34:B7:20:10:A8
            X509v3 Authority Key Identifier:
                keyid:09:C6:2B:5B:D8:71:82:E8:07:3C:B6:CC:0D:79:FE:EE:7B:DB:99:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:43:4d:8d:40:46:0e:96:36:2b:95:6a:5e:c4:88:c7:08:a9:
         f1:62:b3:bd:f7:5e:35:e0:54:80:61:b6:46:c8:ad:43:cb:eb:
         a1:61:4d:a3:96:7a:01:d8:11:24:c6:7c:cb:6b:11:66:c5:64:
         2d:2d:8b:a2:32:51:5f:3d:f3:4f:b6:fa:66:9d:97:db:56:48:
         99:19:d3:24:5d:6c:56:be:97:fc:e3:dd:eb:b7:66:89:90:98:
         27:3c:3c:73:36:d3:f5:56:7f:52:f0:c8:bd:bb:af:69:39:64:
         95:ed:c3:b1:ed:bd:af:a1:ae:28:af:4e:7c:75:ac:d3:97:e9:
         e9:f7:1a:56:cb:3f:33:b7:ef:d2:08:d1:4f:b9:76:16:ed:87:
         32:46:82:9f:22:76:a6:30:4c:ed:17:36:68:19:6e:5b:58:d1:
         e4:7d:22:ff:a7:35:14:5b:23:8e:00:a0:75:b9:2d:a7:04:f4:
         a7:a3:0d:d9:14:1a:0f:e2:b4:a3:50:5f:9c:ff:a9:96:99:79:
         7d:b0:fc:7d:cf:83:3c:ff:bb:1a:ab:a0:98:1e:f6:dc:26:35:
         5f:2d:77:d7:79:71:1e:13:70:59:0e:3e:2b:52:f9:69:8f:5e:
         17:d9:db:e2:8c:84:9d:a6:c9:85:0a:ae:13:52:79:f4:b0:70:
         c6:34:68:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:14:54 2025 by rpki-client