Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft
File:                     1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft (raw, json)
Hash identifier:          31e3SFFWRCrH+rWS5aqjDd7yqBGo+MFY+0gQ92Ke7lU=
Subject key identifier:   3C:AB:8F:1E:61:7B:6F:C5:FE:0A:88:96:D2:D6:12:FA:DE:A3:17:A8
Authority key identifier: D4:1F:8E:FD:CF:6E:26:6A:82:C6:13:02:52:6F:6B:CF:C4:65:E5:71
Certificate issuer:       /CN=d41f8efdcf6e266a82c61302526f6bcfc465e571
Certificate serial:       01984AE5DC12458742B1D9D22EADDA926239
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft
Manifest number:          0A4D
Signing time:             Sun 27 Jul 2025 08:00:34 +0000
Manifest this update:     Sun 27 Jul 2025 08:00:34 +0000
Manifest next update:     Mon 28 Jul 2025 08:00:34 +0000
Files and hashes:         1: 1B-O_c9uJmqCxhMCUm9rz8Rl5XE.crl (hash: DMhJfaipwTN4QDnW7tUq42REyTUZSOv4kvA5IoAWTjA=)
                          2: ysfFdWNe3c5fhmJm7HG2F6bIZWk.roa (hash: kYAKmFDZnKlOhN9pBmJ9NvU/vERSiEHA+J66ixThxDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:e5:dc:12:45:87:42:b1:d9:d2:2e:ad:da:92:62:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d41f8efdcf6e266a82c61302526f6bcfc465e571
        Validity
            Not Before: Jul 27 08:00:34 2025 GMT
            Not After : Jul 28 08:00:34 2025 GMT
        Subject: CN=3cab8f1e617b6fc5fe0a8896d2d612fadea317a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e4:b1:16:f7:6d:2b:ee:8e:bd:f0:ae:df:1f:
                    a2:d0:b8:94:76:d5:67:26:e7:ed:17:10:04:a8:e9:
                    26:f2:a6:f5:a4:71:16:47:7b:4d:55:e5:0c:46:4d:
                    02:0a:f5:57:3e:98:22:dd:93:08:de:3c:b9:f1:d7:
                    f9:04:11:94:e7:6f:7e:f1:a4:73:16:8a:e7:17:16:
                    41:b8:eb:55:a2:a5:3b:77:0d:3a:e0:16:b6:66:e6:
                    c3:bc:2f:10:2a:8f:53:28:17:38:3b:58:0f:56:d6:
                    a5:70:56:3b:c4:af:3e:8d:d1:d7:91:df:2c:27:41:
                    0d:67:69:09:d3:1d:26:9a:71:21:64:3c:23:a8:0a:
                    c2:5b:4b:a4:6d:cc:e5:8e:3b:db:c6:98:18:a2:aa:
                    f2:54:98:4d:e4:56:d4:53:90:17:aa:d5:c4:de:92:
                    71:b7:47:8a:32:70:35:19:14:a9:1c:c7:9c:e6:dd:
                    db:81:47:a1:07:5d:d4:d8:0e:18:ac:70:26:15:80:
                    63:0d:1e:d0:50:e9:d9:d8:ae:62:b7:c3:42:9d:2a:
                    4b:b5:85:33:df:ab:14:e0:11:d4:4b:3d:33:72:3b:
                    0d:d6:bd:9c:cb:77:09:b6:65:59:56:8e:04:66:2c:
                    60:81:e0:6e:a4:db:53:70:20:8f:6f:e1:f9:d7:7e:
                    ec:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:AB:8F:1E:61:7B:6F:C5:FE:0A:88:96:D2:D6:12:FA:DE:A3:17:A8
            X509v3 Authority Key Identifier:
                keyid:D4:1F:8E:FD:CF:6E:26:6A:82:C6:13:02:52:6F:6B:CF:C4:65:E5:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:04:ed:33:50:0c:f6:bb:52:56:0b:d0:7b:b6:d5:f6:23:33:
         eb:24:57:9e:86:da:c2:f5:96:89:5a:76:aa:cd:9a:91:81:0f:
         df:27:b5:9b:98:a7:55:d1:5c:c7:b6:67:7b:8c:cc:00:af:6f:
         2b:59:51:96:59:f4:09:d3:7e:70:ab:ab:23:9f:59:35:5b:a7:
         6d:cf:d7:7f:87:49:93:88:78:e6:b5:f0:4a:01:e7:f0:78:90:
         3e:d8:0a:1b:5b:e6:0f:b5:a7:86:99:44:b6:78:cd:02:cb:7f:
         c4:9a:12:30:b2:9a:46:5f:99:8a:c6:d2:16:83:62:6a:84:b8:
         75:2b:54:d1:cb:63:04:5c:ec:d1:e5:ce:8d:35:30:0d:ef:f1:
         9f:68:5b:8b:1b:cc:aa:0c:ab:04:8e:70:2b:26:52:94:e6:1d:
         d7:dc:48:22:c9:44:c5:9e:18:2b:a5:bf:be:c4:6a:62:ce:e6:
         94:3d:d3:99:96:a3:54:4a:64:52:0f:7f:94:92:b3:9b:c9:7c:
         06:dc:b1:33:98:33:15:c9:ca:41:05:ff:68:0d:a7:c7:17:32:
         f4:11:77:3a:77:e8:e9:5c:dc:53:6e:b1:d6:ee:99:f8:9a:a1:
         43:af:8e:64:42:74:5f:dd:f5:45:85:ca:68:60:cb:79:50:79:
         d0:53:f3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:39:24 2025 by rpki-client