Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
File:                     1SGSgT0i76BLy7JOC_D-NNjfukg.mft (raw, json)
Hash identifier:          3Zkq7zeV20sskjxv6aBd9whngfDgUAPtjai8tDRVp1M=
Subject key identifier:   CD:A1:A3:DF:D9:DE:4C:78:08:B6:26:B9:66:81:25:0B:BE:82:94:63
Authority key identifier: D5:21:92:81:3D:22:EF:A0:4B:CB:B2:4E:0B:F0:FE:34:D8:DF:BA:48
Certificate issuer:       /CN=d52192813d22efa04bcbb24e0bf0fe34d8dfba48
Certificate serial:       0198D5BB7DE03568342E78FB5FF39E086022
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
Manifest number:          026C
Signing time:             Sat 23 Aug 2025 07:01:31 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:31 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:31 +0000
Files and hashes:         1: 1SGSgT0i76BLy7JOC_D-NNjfukg.crl (hash: 7ZRm4TKTmXbOZvkXsObtHCyOCYKXKU85S/cX5LgRysQ=)
                          2: eDQ7Rqa20D_hI8gI5USdLHd-gF8.roa (hash: r3EJNmKQgbbo4j5pe3uk2ZFcWeVkHRAZ7TxCivW3QgQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:7d:e0:35:68:34:2e:78:fb:5f:f3:9e:08:60:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d52192813d22efa04bcbb24e0bf0fe34d8dfba48
        Validity
            Not Before: Aug 23 07:01:31 2025 GMT
            Not After : Aug 24 07:01:31 2025 GMT
        Subject: CN=cda1a3dfd9de4c7808b626b96681250bbe829463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:34:a7:c2:2c:fe:4f:6c:76:88:89:f6:2e:4c:
                    d9:aa:91:d7:d2:c9:6b:0c:9f:fc:47:f9:49:40:e9:
                    3e:c7:29:78:6f:28:5f:f1:a5:f6:1f:24:62:7d:8c:
                    07:e4:5b:e7:b6:29:56:7f:7d:19:9e:87:3e:11:40:
                    b1:b4:54:40:20:4d:c1:8e:67:7e:d9:24:a5:4a:49:
                    6d:15:c2:9c:6d:f3:19:d5:ac:f1:14:f9:15:19:ec:
                    d4:21:6f:80:aa:40:7b:43:6d:a2:29:2d:7c:cc:24:
                    45:3d:99:89:80:62:3f:34:13:cc:f0:4e:4a:23:49:
                    59:1f:dc:9b:b7:ab:98:df:15:d4:d9:48:5f:b2:19:
                    b1:53:de:a1:eb:fe:4e:13:16:8b:b9:75:fc:5b:b6:
                    5c:11:0e:ad:9e:b4:05:b4:2c:8c:ff:a1:f3:89:cc:
                    54:53:b1:35:8a:14:c5:20:96:62:8d:ee:26:13:86:
                    63:af:f5:4b:8a:55:85:f3:a3:97:2b:e5:33:c4:77:
                    7b:82:35:90:67:51:51:e4:62:a9:be:b2:22:e0:07:
                    74:6d:e1:a5:f6:1b:e2:21:52:9e:42:3b:27:9e:ed:
                    4d:7a:39:e4:aa:70:47:59:ff:ad:67:8b:21:01:cd:
                    7f:a4:d7:b4:ba:3f:5c:0f:97:51:45:d8:fb:99:48:
                    f7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A1:A3:DF:D9:DE:4C:78:08:B6:26:B9:66:81:25:0B:BE:82:94:63
            X509v3 Authority Key Identifier:
                keyid:D5:21:92:81:3D:22:EF:A0:4B:CB:B2:4E:0B:F0:FE:34:D8:DF:BA:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:dc:61:1d:e9:21:44:d9:a4:cb:97:44:4c:12:2c:b1:63:8a:
         b9:11:d8:e9:13:c1:80:5d:53:75:d4:59:11:9e:3a:7d:df:e2:
         8f:65:be:f5:0e:74:62:fb:f2:b9:34:f9:ef:55:09:3d:59:27:
         1a:6e:71:d0:43:c9:89:e4:91:e0:61:4d:3c:f0:cb:1a:63:b6:
         38:5e:bd:31:91:d4:d5:e1:60:4d:0e:25:22:e6:43:33:07:96:
         a3:44:ed:ef:5b:c9:0d:d3:7b:23:45:fc:7f:88:91:a1:d3:a3:
         17:c6:ca:f3:23:7f:d6:70:20:ba:7c:44:4c:ef:88:5e:02:25:
         5e:e5:21:f8:2b:8c:55:55:a9:ef:8d:3b:0c:16:b4:d3:cd:7f:
         a4:9a:ba:55:9a:8a:ad:fa:39:dc:c9:de:7c:02:ad:4b:b2:ee:
         d5:35:c3:2e:a7:94:2a:57:5e:7f:6c:fe:2f:3d:ce:1b:11:fb:
         e7:2a:f8:8c:51:58:21:7f:d5:20:ee:47:f2:35:35:84:b3:e1:
         b8:c4:15:c5:86:d4:a0:0a:33:38:de:a2:4e:17:e6:4a:ea:ec:
         00:f0:6f:a6:3b:f9:dd:77:a7:0f:fc:eb:73:d9:44:d4:0a:4c:
         63:b2:25:1f:e6:a4:03:2e:b2:aa:b7:3f:05:da:b8:cc:fa:c1:
         03:01:74:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:46 2025 by rpki-client