Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.mft
File:                     1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.mft (raw, json)
Hash identifier:          DKJjIemwPMscjDysXRjlQwnCZ5eLtMjwEJMH12A5iGk=
Subject key identifier:   76:EA:9B:22:EC:1F:D8:B0:75:B5:37:C3:A2:43:E4:84:C2:FE:5A:7C
Authority key identifier: F8:26:FF:E9:6C:DC:41:EF:AA:8B:FB:31:25:86:2D:65:94:BE:98:27
Certificate issuer:       /CN=f826ffe96cdc41efaa8bfb3125862d6594be9827
Certificate serial:       019874F49DC0DE98BC0748791BD46342058B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.mft
Manifest number:          0EEA
Signing time:             Mon 04 Aug 2025 12:00:44 +0000
Manifest this update:     Mon 04 Aug 2025 12:00:44 +0000
Manifest next update:     Tue 05 Aug 2025 12:00:44 +0000
Files and hashes:         1: 1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.crl (hash: yLWsP78Kik22s63dnp+daO/MQVlUCW9S4u5D0QbMJrk=)
                          2: OyzZxs_hVYKW1cYJmnARu5WD5PU.roa (hash: Mxe+uv54doiDC6rq1qVmsEa8Vr9FlHaFSsIh3iiGLqc=)
                          3: YpJ4HYND8zUWDrh84VOwJrCjN64.roa (hash: YH9M+YVc2VsTqAzLHq7oW1kqlXcbhCJ/cLoedv2bt3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:f4:9d:c0:de:98:bc:07:48:79:1b:d4:63:42:05:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f826ffe96cdc41efaa8bfb3125862d6594be9827
        Validity
            Not Before: Aug  4 12:00:44 2025 GMT
            Not After : Aug  5 12:00:44 2025 GMT
        Subject: CN=76ea9b22ec1fd8b075b537c3a243e484c2fe5a7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:dc:28:97:39:ed:bb:fe:92:3e:d2:2f:ed:f6:
                    74:d9:c1:34:d7:f9:f3:96:7a:64:48:a6:be:a2:e3:
                    97:ef:e1:38:fd:90:81:f3:aa:d1:1e:41:2d:ec:06:
                    47:44:26:45:f0:cb:b3:5c:46:a2:41:d0:01:bf:75:
                    da:20:c9:ee:3c:7a:ab:10:46:81:c3:1b:84:b9:cc:
                    f0:c8:10:ef:fe:94:4f:1b:79:d2:67:cc:bb:96:20:
                    01:3c:74:d2:45:da:b2:f8:f5:68:42:6b:f1:89:2e:
                    ef:48:de:ac:64:0b:1f:a4:f0:4b:f4:36:8a:96:a1:
                    ae:e8:51:2d:8f:ed:e6:e8:3a:41:11:d1:62:82:90:
                    73:52:6c:93:25:ae:65:ce:06:fe:be:28:52:79:a0:
                    6d:fa:1d:c3:4e:22:75:91:e6:97:05:b0:69:15:e0:
                    6a:3c:c9:07:b1:d6:cd:02:c0:bf:d8:53:2a:2d:d6:
                    41:a9:11:54:b0:02:88:ba:5a:d2:01:a7:1e:04:4b:
                    3c:3a:68:30:82:31:ef:7c:7d:c1:74:2d:74:c0:cb:
                    ee:a7:c0:3c:45:c2:c2:06:4f:3c:99:4f:d2:87:30:
                    86:56:3c:ad:06:58:4f:e6:e0:ac:c4:97:d1:8c:af:
                    37:6c:2f:a2:84:25:50:fe:b5:03:aa:70:7c:30:23:
                    a3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:EA:9B:22:EC:1F:D8:B0:75:B5:37:C3:A2:43:E4:84:C2:FE:5A:7C
            X509v3 Authority Key Identifier:
                keyid:F8:26:FF:E9:6C:DC:41:EF:AA:8B:FB:31:25:86:2D:65:94:BE:98:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:52:36:d4:ce:c9:4b:bf:c4:51:cc:43:17:c2:a1:d2:16:eb:
         a3:28:86:43:8f:06:34:71:35:6c:56:1b:7a:e3:fb:cc:e4:cd:
         a6:49:b6:70:49:aa:17:d6:dd:01:7d:32:15:e8:24:ae:da:25:
         74:6d:56:8d:1b:a8:c6:d9:d8:5e:0e:44:38:ed:cd:73:06:37:
         34:08:37:dd:1f:e2:92:a9:63:6e:1b:cb:47:3b:59:74:d5:e2:
         fb:79:ba:c8:50:8c:46:40:91:ed:06:d3:84:d7:41:ff:7f:4a:
         23:d1:51:b2:da:f9:bc:be:f4:5b:55:0d:a0:ed:51:ec:8b:aa:
         82:68:08:2b:e2:8d:bd:4f:5e:94:e6:62:d9:cd:6a:03:32:20:
         f1:2a:e1:d8:18:84:69:fd:5b:92:73:ed:73:42:a2:4c:39:0f:
         0d:06:d2:08:92:39:8d:53:5d:35:f0:e5:f5:70:d7:c3:9c:7c:
         a0:2a:c4:58:b5:1a:5c:1b:a9:c0:3d:75:4b:b1:6f:cb:39:9f:
         fb:ba:37:d6:0f:0d:a8:f6:8c:4f:84:46:ed:9e:2b:9d:a2:48:
         ef:76:c7:14:3b:d7:ce:a7:96:a8:56:2c:39:38:54:01:12:c9:
         85:a2:32:76:31:eb:81:22:34:c7:ab:58:f7:af:33:43:f4:6d:
         23:c2:c8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:53:17 2025 by rpki-client