Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
File:                     Cs1OLATDntskKmcFG4tYEmNDbnk.mft (raw, json)
Hash identifier:          fNWTwhbjfMY4i2CJ7b7Ym7EYCbZOYWZIsnChhzBPLF8=
Subject key identifier:   DB:C6:6D:C2:08:D6:DF:4C:44:51:83:7E:2D:69:FA:77:6B:51:DA:AC
Authority key identifier: 0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79
Certificate issuer:       /CN=0acd4e2c04c39edb242a67051b8b581263436e79
Certificate serial:       0198D47415AB80FD79C965CEE9598E937132
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
Manifest number:          11CD
Signing time:             Sat 23 Aug 2025 01:03:54 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:54 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:54 +0000
Files and hashes:         1: Cs1OLATDntskKmcFG4tYEmNDbnk.crl (hash: cPqIkCW3nCvNkOoulVmBn7wcL6zF3jKl0aqz+x6W8AE=)
                          2: bbpg3V6ZZAXBeCd1yQ2Usxzc5uc.roa (hash: zEd/mqbUQwwKdBV4qgniA93ml7cpqC5pfS1X8ei6QF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:74:15:ab:80:fd:79:c9:65:ce:e9:59:8e:93:71:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0acd4e2c04c39edb242a67051b8b581263436e79
        Validity
            Not Before: Aug 23 01:03:54 2025 GMT
            Not After : Aug 24 01:03:54 2025 GMT
        Subject: CN=dbc66dc208d6df4c4451837e2d69fa776b51daac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:67:11:ce:de:e7:00:43:54:61:97:7b:2f:bb:
                    cd:43:1c:1b:d1:6d:2c:db:ed:86:cc:20:15:9e:fb:
                    bd:e0:3b:7f:6a:a5:7c:c4:fa:62:c2:3b:f1:d5:f2:
                    85:e5:0b:73:4f:f5:e2:c2:21:44:40:fd:82:76:48:
                    46:f9:b2:d2:30:e6:3a:87:65:13:70:8c:75:d9:19:
                    fd:28:5d:a0:32:3a:a7:f1:7b:54:29:d7:9b:39:a9:
                    51:c0:62:a0:70:df:40:cb:b5:9b:1c:53:38:de:c5:
                    13:57:1b:af:72:ad:78:f6:f6:24:88:d2:cb:13:da:
                    b6:24:58:da:19:73:8c:3e:9b:91:3d:a6:4d:e7:bb:
                    4d:e6:e0:38:3e:b3:78:73:20:7b:77:56:57:7a:42:
                    55:93:59:57:c4:63:bc:0b:c6:6a:cf:e4:cd:2a:cf:
                    da:12:26:51:79:59:41:e6:fe:56:a3:c6:3d:b4:f0:
                    cd:fe:fc:7d:35:8c:9f:6a:0d:13:15:58:ff:e7:b6:
                    de:a5:26:39:07:73:43:fe:1a:51:34:9f:e7:6f:56:
                    e5:b0:1e:00:ca:26:67:78:9f:38:b9:3d:c8:49:fc:
                    ea:9b:b5:e8:68:76:45:88:b4:76:fe:05:02:a9:fc:
                    34:ce:cb:20:eb:78:95:4b:b8:55:b2:1a:fd:4a:bc:
                    99:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C6:6D:C2:08:D6:DF:4C:44:51:83:7E:2D:69:FA:77:6B:51:DA:AC
            X509v3 Authority Key Identifier:
                keyid:0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ad:fc:8e:3f:e1:05:de:8f:35:56:b9:3b:c3:91:06:98:aa:
         6a:11:c9:88:a8:31:c9:bc:ad:6f:1e:b6:f1:26:d7:ef:ec:b4:
         e1:1b:78:00:e3:71:3f:52:e8:98:aa:26:b9:ec:5e:27:2b:1d:
         f6:0e:3f:8d:0b:93:55:11:a4:eb:0d:3f:9e:5f:34:24:39:fa:
         2d:53:01:84:2c:68:30:69:36:86:7b:31:8f:da:18:7e:ec:d1:
         1c:0e:b3:b1:f7:27:12:f4:a1:aa:cf:3a:ca:99:9f:1b:6a:5c:
         a9:52:47:72:c2:9f:19:2b:a1:96:a5:d8:09:60:d6:c4:2d:ea:
         c4:e6:89:f9:68:b0:c9:51:f7:4f:49:d3:9f:50:cb:16:28:77:
         16:82:bb:89:26:e9:cd:1c:a1:ee:a2:98:22:83:48:78:6e:81:
         f5:38:39:e7:5f:ef:2d:ce:8c:6a:c2:cc:06:b5:ae:c8:15:08:
         48:3d:61:15:57:58:68:0f:42:24:30:c0:4c:74:e0:fd:17:c9:
         f5:a3:89:d5:f4:c8:48:32:1b:d9:6f:b0:91:62:41:2f:75:21:
         d4:4f:b0:78:34:e4:d7:93:17:71:e0:c1:b6:62:3e:db:f6:1e:
         c4:91:6c:6b:93:c0:32:40:ce:c3:c1:3b:94:73:a2:04:de:4e:
         d3:09:67:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:51 2025 by rpki-client