Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft
File:                     mXFUBuche_wTgSpHBMYq4JnnyP8.mft (raw, json)
Hash identifier:          gfbh+2gNKKa/SZ1S7KExPRZRdSqhR2wTM6pnfiuqgEk=
Subject key identifier:   26:C6:B6:39:7C:58:9F:FF:0E:45:3C:C3:4D:7D:11:FC:76:96:EB:A8
Authority key identifier: 99:71:54:06:E7:21:7B:FC:13:81:2A:47:04:C6:2A:E0:99:E7:C8:FF
Certificate issuer:       /CN=99715406e7217bfc13812a4704c62ae099e7c8ff
Certificate serial:       0198960096FF0AB6AA8426F77B16BA8C71F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mXFUBuche_wTgSpHBMYq4JnnyP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft
Manifest number:          0346
Signing time:             Sun 10 Aug 2025 22:01:17 +0000
Manifest this update:     Sun 10 Aug 2025 22:01:17 +0000
Manifest next update:     Mon 11 Aug 2025 22:01:17 +0000
Files and hashes:         1: mXFUBuche_wTgSpHBMYq4JnnyP8.crl (hash: t+IqqJWHsg+Z4FgKhujfWn8aWsPDKTSKI/fwA/wyybU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mXFUBuche_wTgSpHBMYq4JnnyP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 22:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:00:96:ff:0a:b6:aa:84:26:f7:7b:16:ba:8c:71:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99715406e7217bfc13812a4704c62ae099e7c8ff
        Validity
            Not Before: Aug 10 22:01:17 2025 GMT
            Not After : Aug 11 22:01:17 2025 GMT
        Subject: CN=26c6b6397c589fff0e453cc34d7d11fc7696eba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:25:2c:8f:53:1e:65:57:76:47:e9:c9:1d:b4:
                    a1:13:71:d7:74:92:8c:97:40:75:26:f1:2e:7b:ec:
                    7a:54:85:54:de:20:8c:fa:1c:e2:14:38:4d:bc:cc:
                    8c:6e:44:7f:71:1e:7f:70:6d:04:38:d8:20:e7:10:
                    1e:b1:9e:f6:fa:15:30:5a:1f:ae:df:f4:e7:43:53:
                    67:9e:48:a1:8b:9e:f5:09:51:1a:9e:eb:4b:7a:0f:
                    64:e8:08:5c:15:8f:41:6c:40:a2:17:a1:6c:2f:6f:
                    f3:5e:fa:ed:51:6a:ef:20:c8:1a:d8:39:f4:b2:36:
                    00:d1:b4:e0:c3:32:85:d1:bb:21:a3:9a:bf:09:94:
                    75:6a:cd:3d:79:64:09:bd:86:95:5c:f9:a1:1c:46:
                    d3:81:fb:e1:1f:34:3b:7a:11:c2:e6:17:ba:22:17:
                    0b:fd:67:83:41:28:c8:ce:54:72:9f:71:05:0c:df:
                    db:ea:5e:88:4f:5c:a6:bd:8d:7e:79:8a:6e:e1:04:
                    1a:21:f0:43:78:93:22:04:93:b9:85:9f:e6:af:fc:
                    92:12:0c:87:02:5e:12:60:ac:14:d8:ab:e2:0a:17:
                    4c:64:99:20:f0:32:e5:fb:41:25:57:25:15:14:11:
                    a3:b5:0e:53:be:f5:c4:4b:d4:bc:2f:45:a9:79:6b:
                    2e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C6:B6:39:7C:58:9F:FF:0E:45:3C:C3:4D:7D:11:FC:76:96:EB:A8
            X509v3 Authority Key Identifier:
                keyid:99:71:54:06:E7:21:7B:FC:13:81:2A:47:04:C6:2A:E0:99:E7:C8:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXFUBuche_wTgSpHBMYq4JnnyP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ce:05:11:06:59:98:e6:b1:14:aa:70:a4:31:59:ba:bd:ba:
         cc:0a:b8:10:c0:eb:df:ce:fb:be:a1:ae:aa:30:88:85:32:c1:
         f8:05:e0:82:9e:1d:60:a0:3b:15:28:81:9b:d2:86:8a:af:d8:
         81:b8:4f:22:9f:d5:ba:2d:7f:10:02:60:ee:0d:d6:96:3a:e4:
         e6:1a:23:5e:a9:34:e2:1e:66:28:cb:4b:1c:48:4b:fd:23:00:
         c8:7c:67:b2:ca:2f:e9:aa:87:bc:6c:7e:3b:e5:9e:b8:20:60:
         02:73:f2:3c:f3:d0:73:ea:30:39:0b:6a:dd:be:ac:5a:1b:4c:
         10:8b:24:c6:96:01:40:f5:7f:59:97:49:5e:4b:51:4f:e2:64:
         9b:cb:30:3b:9d:3f:54:dc:d2:5a:f0:c0:cf:91:69:e0:17:62:
         a2:a9:98:a4:ba:0c:e3:9c:e0:f3:0f:2f:83:83:cf:30:3f:de:
         5a:1d:ef:93:7e:f0:66:4f:db:4b:0d:33:76:79:1f:aa:58:d8:
         79:54:fb:28:8d:2f:5d:3b:e9:5c:5d:79:f0:7a:6d:db:18:55:
         ed:d9:43:0b:f3:10:76:19:49:7a:8c:1f:9b:c8:a7:1e:44:2d:
         36:aa:7b:8d:8e:81:44:61:09:96:58:d7:8c:75:2e:ae:6d:03:
         fa:6b:70:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:24:02 2025 by rpki-client