Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
File:                     1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft (raw, json)
Hash identifier:          cBsmRxgo+Vvtl5NuUb/R53O7BhW3A668tBQJEZUc+Rg=
Subject key identifier:   03:CD:03:12:67:D5:F2:08:91:31:07:B8:2F:D5:64:4E:4D:48:26:5F
Authority key identifier: F9:95:1B:A5:63:29:32:3B:4C:60:F6:20:D6:A7:39:1E:70:7B:55:56
Certificate issuer:       /CN=f9951ba56329323b4c60f620d6a7391e707b5556
Certificate serial:       0198529F69EDD1335FEA83246542EE807CA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
Manifest number:          0E26
Signing time:             Mon 28 Jul 2025 20:00:35 +0000
Manifest this update:     Mon 28 Jul 2025 20:00:35 +0000
Manifest next update:     Tue 29 Jul 2025 20:00:35 +0000
Files and hashes:         1: 1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl (hash: iBNJQbR36efiofLn0jjm8d7SejcMhZkjla2JEWOvZIs=)
                          2: 4gz_E19lt_WQtnrzaUTS2wLE9kU.roa (hash: EPYfgGTHeJ3gz/LYRQ9uBlJ8BFrAwAfRiJVJRAOGoZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 14:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:52:9f:69:ed:d1:33:5f:ea:83:24:65:42:ee:80:7c:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9951ba56329323b4c60f620d6a7391e707b5556
        Validity
            Not Before: Jul 28 20:00:35 2025 GMT
            Not After : Jul 29 20:00:35 2025 GMT
        Subject: CN=03cd031267d5f208913107b82fd5644e4d48265f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:88:2d:cc:a0:7d:c5:0a:77:8a:e8:d4:53:6d:
                    c8:5b:67:fa:28:bb:f9:61:b4:27:d9:99:26:cc:4e:
                    17:57:4e:cd:17:48:b4:4a:3f:40:5d:6a:8f:e5:08:
                    b4:f2:2b:3b:e8:e3:91:d8:97:12:de:45:a6:98:8c:
                    9a:e0:ec:20:86:48:cb:0e:fe:a9:b5:21:de:8d:de:
                    41:46:20:d0:1b:10:72:dd:20:73:40:c2:67:16:06:
                    cc:89:88:46:64:db:36:d8:72:46:5b:6c:74:8d:a2:
                    3f:00:df:f2:21:7e:31:69:df:b5:17:69:6b:35:ac:
                    a4:88:5e:6f:c1:46:79:b3:5b:76:50:2e:00:79:96:
                    a3:33:ee:a2:0a:3b:eb:76:2f:7f:78:6b:81:98:f9:
                    06:cf:dd:4a:1c:70:d0:05:8c:84:ef:4b:cf:28:22:
                    ff:2f:e7:66:eb:1a:e5:9d:5f:02:0c:25:c2:64:60:
                    87:2d:a7:19:e0:6e:56:ba:a8:ef:ec:c7:c8:6b:74:
                    81:bd:d6:9c:12:37:72:85:c6:9d:8e:c9:99:80:2a:
                    56:67:9a:50:9b:76:a2:07:8f:6c:5b:a9:f7:39:b1:
                    5c:c4:1f:33:11:8e:12:71:56:32:af:04:c5:99:50:
                    72:dc:32:72:21:db:76:93:32:13:51:1e:dd:16:4c:
                    9f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:CD:03:12:67:D5:F2:08:91:31:07:B8:2F:D5:64:4E:4D:48:26:5F
            X509v3 Authority Key Identifier:
                keyid:F9:95:1B:A5:63:29:32:3B:4C:60:F6:20:D6:A7:39:1E:70:7B:55:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:89:ca:c2:6d:30:33:f8:05:62:83:5c:ed:d3:a1:b8:bb:da:
         06:24:2c:fa:8a:9b:57:c6:dc:d2:03:9a:19:75:ca:b0:f5:7f:
         e3:7a:fe:1e:c1:1b:36:d9:43:1b:e3:38:13:60:ad:e3:12:b4:
         16:3f:cd:66:e3:71:4d:58:f4:5f:67:bd:7e:0a:6a:49:0e:1e:
         32:c8:fb:47:02:21:c9:19:66:00:84:b5:13:5c:d2:fb:06:9e:
         b2:67:fe:db:1e:dd:8b:94:d6:0c:ee:1d:e6:a2:d5:ff:70:82:
         81:5f:f2:19:ad:f3:65:04:2b:17:4c:95:43:c6:f0:8f:7a:5e:
         ed:8b:21:60:e1:d5:db:ca:e1:df:26:d5:ee:0d:f7:2a:ce:32:
         c2:66:74:68:6c:60:0b:0e:42:db:be:c7:5e:67:d8:10:bf:93:
         61:0b:b4:96:0d:c6:64:df:7c:d5:78:74:4c:97:4d:39:92:6a:
         3f:a0:70:39:31:cb:3f:3d:91:a8:ce:b9:c2:c8:e1:2e:9f:cb:
         33:41:9e:6c:b7:8e:36:74:03:d7:28:e7:ff:21:8c:02:5a:17:
         98:16:45:e5:b7:c8:cb:cc:41:d1:35:bd:f2:38:36:17:c8:a7:
         bb:1c:61:e0:e8:5e:4c:a8:3c:de:2c:8e:8e:66:7f:08:dd:91:
         e3:c3:43:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 22:12:35 2025 by rpki-client