Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
File:                     cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft (raw, json)
Hash identifier:          tTd/qoTvsTj2RyLU8ruHfAwKUsS7OqglGzd/Xq4XIOA=
Subject key identifier:   1F:5A:5F:F0:0D:F4:DA:53:79:F4:A6:0F:DA:1A:F4:27:88:C4:26:E0
Authority key identifier: 71:07:1C:85:A3:48:29:58:F8:7F:03:2B:64:63:19:8C:7F:D9:EB:07
Certificate issuer:       /CN=71071c85a3482958f87f032b6463198c7fd9eb07
Certificate serial:       0198737492D8E9524C4F154093E28BCBB978
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
Manifest number:          12E6
Signing time:             Mon 04 Aug 2025 05:01:16 +0000
Manifest this update:     Mon 04 Aug 2025 05:01:16 +0000
Manifest next update:     Tue 05 Aug 2025 05:01:16 +0000
Files and hashes:         1: cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl (hash: FJ88/Hf520OBAYcVHcENgKy7yyTAGpnqRNkM0Kwbkv4=)
                          2: oDKhHV25asaAZwnOhgVY2UWIJ6I.roa (hash: TBtdjF9kT0kXckzBss688u22tMu+NiF4J0DL0v5u2x0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:74:92:d8:e9:52:4c:4f:15:40:93:e2:8b:cb:b9:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71071c85a3482958f87f032b6463198c7fd9eb07
        Validity
            Not Before: Aug  4 05:01:16 2025 GMT
            Not After : Aug  5 05:01:16 2025 GMT
        Subject: CN=1f5a5ff00df4da5379f4a60fda1af42788c426e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b7:fe:d1:ba:62:2d:a7:64:cd:53:92:7a:c5:
                    4c:34:68:db:48:22:ad:91:f7:d5:44:56:06:87:bc:
                    21:9f:81:19:5a:56:1b:aa:e7:68:30:0d:17:e1:37:
                    2a:cc:d5:78:d0:fc:f0:06:90:45:2d:7c:c7:c2:5d:
                    80:db:c7:64:62:33:6a:3b:9e:39:c3:20:1b:77:ab:
                    c4:7a:9f:1a:78:46:0f:2f:e9:07:50:b8:09:68:e4:
                    3e:28:1a:aa:20:f6:e3:bd:0d:41:ca:9c:e8:a5:08:
                    91:c6:53:e1:fa:1e:f3:43:34:e8:b0:75:8c:88:64:
                    f5:d7:58:65:89:57:d5:3c:d8:d0:c8:81:67:2f:e7:
                    49:09:fb:75:2a:d0:df:3d:82:93:3b:cb:7b:4b:5a:
                    d7:db:5a:d2:2b:32:04:30:46:27:67:c3:c0:db:f2:
                    00:40:d6:64:fe:67:f1:d2:ae:bb:3a:9e:c9:a4:1b:
                    b0:5a:98:10:df:83:c7:3f:a7:e2:2c:6a:09:61:35:
                    fd:09:e0:e5:df:ab:ca:e5:b7:ac:94:2d:82:08:ca:
                    e6:5d:c9:3c:41:72:19:66:c4:ed:fe:ec:e8:c0:b1:
                    a8:c2:46:ee:5f:23:a5:40:a9:1c:cb:e1:48:bc:40:
                    89:ed:1b:28:f8:76:c2:bf:01:53:7f:2d:93:13:15:
                    a9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:5A:5F:F0:0D:F4:DA:53:79:F4:A6:0F:DA:1A:F4:27:88:C4:26:E0
            X509v3 Authority Key Identifier:
                keyid:71:07:1C:85:A3:48:29:58:F8:7F:03:2B:64:63:19:8C:7F:D9:EB:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:03:28:c4:b2:48:3b:35:e7:8b:16:56:ab:66:54:c1:77:33:
         af:1e:a6:15:c2:69:6e:ef:af:fd:e0:66:d0:ee:31:4a:8e:77:
         f0:48:74:fc:f3:9a:59:29:95:a8:5b:fb:c1:97:fd:9d:6b:97:
         48:f2:04:29:87:7e:48:8d:d3:2a:23:de:30:f6:93:59:ce:ad:
         37:a1:51:bc:0b:e1:57:49:c3:a0:10:0b:58:81:82:f8:0b:84:
         d4:3f:79:de:f8:b0:c5:91:60:ef:55:85:0f:85:fd:b6:16:0d:
         2b:64:53:0c:b4:f2:dd:4c:3e:64:e2:1e:ce:7a:60:16:ac:5c:
         a3:06:53:a4:49:25:b5:6f:b3:1e:05:94:66:bb:de:92:ab:ee:
         07:9e:a2:ab:aa:63:6a:a6:83:5e:2d:6b:40:b4:d5:ee:4e:e4:
         8a:70:41:11:a8:c1:16:3b:9b:cf:6e:5c:37:c2:ee:27:7d:b9:
         f7:9d:67:99:b1:9f:5e:ba:a8:fd:00:d6:c9:2b:d4:1d:50:fa:
         94:15:9a:a5:19:87:2e:52:a3:af:ed:c1:29:a0:dc:8b:af:78:
         ef:ec:0e:7c:88:86:1b:c4:98:62:b8:c9:d6:86:24:ed:ef:eb:
         6c:81:87:66:f6:5d:60:5f:0a:9f:be:3d:57:95:c4:3a:c6:aa:
         d3:9d:3c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:02 2025 by rpki-client