Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.mft
File:                     26EiB69NGGxE2iUzwLjx_R9V2Ns.mft (raw, json)
Hash identifier:          FamaH+U+iwfmgNV99ognvE0MmvPWRLdmlx386ZlQjlk=
Subject key identifier:   8A:7C:64:03:56:0A:26:66:47:A4:5E:48:17:A8:89:58:02:DE:9F:73
Authority key identifier: DB:A1:22:07:AF:4D:18:6C:44:DA:25:33:C0:B8:F1:FD:1F:55:D8:DB
Certificate issuer:       /CN=dba12207af4d186c44da2533c0b8f1fd1f55d8db
Certificate serial:       0198D6611ACA72316D4BD067441304A3B81D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.mft
Manifest number:          1652
Signing time:             Sat 23 Aug 2025 10:02:24 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:24 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:24 +0000
Files and hashes:         1: 26EiB69NGGxE2iUzwLjx_R9V2Ns.crl (hash: I0o9acw/exfKfXT4q9CH9g+R7A2mVUAFee/8cXTLQF4=)
                          2: 7j4WA3ysp1rOkVmQlKAKuU1wD8E.roa (hash: 50o1sY9mxiaVzB3RiC3eXccX8VD4SmfGqHVWyBgG97Q=)
                          3: HZK1nXmWN-rO-mSEBWdam8_Ekw8.roa (hash: 7EEOHKjjtUzUNB//SlEOoxLrukB2bXMqrOoSHuBhLss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:61:1a:ca:72:31:6d:4b:d0:67:44:13:04:a3:b8:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dba12207af4d186c44da2533c0b8f1fd1f55d8db
        Validity
            Not Before: Aug 23 10:02:24 2025 GMT
            Not After : Aug 24 10:02:24 2025 GMT
        Subject: CN=8a7c6403560a266647a45e4817a8895802de9f73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:63:f8:0c:e7:4c:43:1a:7c:8a:51:1a:66:ad:
                    ce:21:0b:35:1c:ac:cf:4d:47:7c:3f:e2:3e:53:4f:
                    5b:ae:3d:6b:78:f1:eb:46:2e:8b:b7:37:c7:dc:3f:
                    d4:db:c9:03:38:10:0d:7b:68:cf:b8:aa:6e:30:bb:
                    e4:f9:d6:dc:31:9c:e9:39:db:1f:72:28:15:07:f6:
                    7e:80:a1:c6:2e:46:b3:90:16:d7:a7:50:23:22:ac:
                    aa:91:34:77:77:f1:76:d2:4c:74:69:24:98:db:13:
                    3f:78:d5:7d:f4:15:76:30:82:3e:ed:90:6c:7e:fe:
                    e9:09:02:f8:13:26:ac:99:9c:b5:52:55:d9:64:e4:
                    94:a4:dd:81:ad:2a:81:8f:03:08:80:0f:a8:ea:0e:
                    b4:6c:2a:c7:34:c3:38:53:22:36:e6:3e:b1:87:ea:
                    ca:98:40:b2:96:6f:c6:87:0f:1f:79:52:aa:7a:3d:
                    78:f6:d4:3b:ce:8e:9f:48:40:ef:96:3f:5c:d2:4a:
                    2a:c5:d8:62:6e:3a:28:48:5f:75:f6:95:8d:c6:0e:
                    39:bd:d5:9a:8b:8a:80:6f:de:9f:bd:57:35:5a:a5:
                    e9:99:99:cd:9f:9f:90:a8:6c:d1:4a:71:49:b8:63:
                    c9:2e:09:8f:5a:de:fa:ec:3d:3e:e7:51:b1:c4:95:
                    61:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:7C:64:03:56:0A:26:66:47:A4:5E:48:17:A8:89:58:02:DE:9F:73
            X509v3 Authority Key Identifier:
                keyid:DB:A1:22:07:AF:4D:18:6C:44:DA:25:33:C0:B8:F1:FD:1F:55:D8:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:21:bc:29:b0:ec:50:c6:fc:10:27:78:1e:98:51:6d:ec:65:
         16:9d:6b:d4:35:6a:c6:28:1d:39:01:c1:db:de:5e:73:75:d7:
         3a:7f:6f:bb:ef:64:0d:d3:df:ca:08:27:61:78:59:6c:f1:e7:
         ae:bb:0a:59:68:11:41:4c:94:3c:65:dd:d8:d5:fa:39:7d:78:
         0c:4b:a9:a7:fa:78:7c:ef:c4:36:66:ad:8a:e5:00:d3:45:38:
         a3:d1:7b:cf:c1:9a:3e:6b:bf:e3:a4:9f:a7:b0:ae:be:67:bb:
         09:a4:3f:4a:46:56:2b:2e:0e:8c:18:75:93:19:be:cb:d4:7f:
         ee:01:79:9c:aa:1e:a3:b3:91:7d:53:24:3d:c6:15:43:6b:cf:
         3c:c2:51:32:a8:b7:12:ac:12:b6:3b:6c:55:57:61:b2:9e:d3:
         76:56:da:d8:17:06:bb:62:f2:54:4d:ef:67:cf:fe:97:b8:62:
         67:e4:60:ea:8a:d2:9f:fb:64:62:75:08:a4:fe:a4:2a:6c:47:
         65:5c:dc:bc:f7:25:52:cb:8f:1d:da:b3:2c:e6:79:69:31:5d:
         1e:3c:5c:0e:2d:a0:f3:9d:f7:0c:2b:3a:26:75:1a:3a:4b:af:
         34:44:b3:1c:fa:28:60:fc:3d:8a:9f:0d:0d:0e:a9:ee:f9:7f:
         43:55:70:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:29:28 2025 by rpki-client