Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
File:                     c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft (raw, json)
Hash identifier:          Pzu4/WHtbtY5309K+m6iXrLUWeeyfOq4hRBdX83t/Dw=
Subject key identifier:   6E:8A:A1:A6:40:74:65:A0:77:D8:5A:26:14:25:E1:21:80:6E:9B:15
Authority key identifier: 73:56:55:DC:67:79:D0:95:FC:B0:8B:61:AB:EB:86:B0:CD:99:A7:8C
Certificate issuer:       /CN=735655dc6779d095fcb08b61abeb86b0cd99a78c
Certificate serial:       0199228C8EB9EE0136AC170C3C0752B99F59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
Manifest number:          0B26
Signing time:             Sun 07 Sep 2025 05:01:00 +0000
Manifest this update:     Sun 07 Sep 2025 05:01:00 +0000
Manifest next update:     Mon 08 Sep 2025 05:01:00 +0000
Files and hashes:         1: c1ZV3Gd50JX8sIthq-uGsM2Zp4w.crl (hash: BonowGyFqBirOXDMQGuqY5ubr8D4Cw9GlD2wbuzhO+k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:8e:b9:ee:01:36:ac:17:0c:3c:07:52:b9:9f:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=735655dc6779d095fcb08b61abeb86b0cd99a78c
        Validity
            Not Before: Sep  7 05:01:00 2025 GMT
            Not After : Sep  8 05:01:00 2025 GMT
        Subject: CN=6e8aa1a6407465a077d85a261425e121806e9b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:84:8b:1b:51:dd:2d:7e:93:17:70:36:4e:a5:
                    0d:b1:a4:c2:62:bb:dd:ec:33:c2:cd:c8:d6:a1:c6:
                    5c:06:b0:ed:08:ff:3b:0f:f1:f2:9f:9e:a8:17:2f:
                    f9:b6:e1:17:09:7a:9c:00:c2:26:68:e1:aa:7f:a8:
                    c8:3b:5e:82:ba:2d:20:4c:5b:72:30:cf:28:e7:5e:
                    9d:ad:68:be:59:ec:47:c5:e0:f1:89:26:a1:1f:af:
                    d0:70:75:62:be:c4:ef:65:82:f9:50:8f:97:a5:8e:
                    9e:c9:06:ff:1f:0c:5f:17:d8:3b:4f:c9:72:1a:c1:
                    d3:d7:96:cd:77:87:c0:ac:f9:07:f8:73:7a:65:22:
                    dc:65:ec:9a:5e:d8:e6:b1:54:25:ad:42:02:21:f1:
                    24:1c:04:f5:37:48:84:8c:fa:fc:86:6e:99:6f:8a:
                    e1:74:44:fe:80:f6:50:1c:63:83:0e:43:e3:65:80:
                    9a:0c:8a:91:3b:8c:a6:d4:c7:13:0f:64:d2:18:00:
                    fe:90:c2:11:9b:de:0c:07:bf:7a:23:77:9f:58:66:
                    cf:d5:2d:53:8a:bb:24:86:1c:78:c4:d0:e0:b0:f7:
                    8c:d2:ef:6d:23:f0:9c:e2:51:ca:f9:85:cf:01:95:
                    7f:28:bc:a6:af:2a:15:6d:a6:94:4a:2c:57:0a:b2:
                    58:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8A:A1:A6:40:74:65:A0:77:D8:5A:26:14:25:E1:21:80:6E:9B:15
            X509v3 Authority Key Identifier:
                keyid:73:56:55:DC:67:79:D0:95:FC:B0:8B:61:AB:EB:86:B0:CD:99:A7:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:d0:bc:fa:21:c5:67:33:4a:db:b4:7b:08:c7:37:10:f4:64:
         38:62:85:6e:cc:07:ec:f7:1f:da:82:5e:dc:9f:5e:33:dc:a2:
         73:4b:c4:10:14:6f:2b:4a:c1:a9:3d:aa:32:0e:4f:f2:79:39:
         33:01:b9:a7:4f:e3:09:05:42:a6:8e:63:34:4f:b5:68:2d:2d:
         86:06:ce:b6:9b:70:03:11:8d:69:30:80:83:78:32:33:3c:6f:
         43:12:2f:d3:2c:04:95:a0:cf:0c:52:42:56:cb:f4:d1:49:cb:
         cf:7e:01:58:b6:54:f1:9d:bc:ad:be:92:35:e4:54:3d:66:89:
         c3:68:f7:98:ca:76:4b:fc:16:d6:f4:9d:4a:5d:42:eb:c7:0c:
         6d:66:88:76:89:87:0e:59:61:ac:05:8d:88:1d:ee:51:bf:51:
         05:4b:76:24:3d:51:24:08:58:b6:77:5f:eb:dd:9a:7d:91:d9:
         27:d7:c9:64:7c:9c:9c:74:6e:99:89:5c:37:b9:af:67:60:b9:
         b3:ce:51:00:9e:5a:8f:df:f7:6c:9f:d5:53:2d:5d:21:ec:38:
         cf:ab:90:e0:43:75:e1:6b:a9:f1:95:ca:c8:16:0b:f2:c9:a2:
         f2:92:3a:1d:e0:e1:9f:36:be:0c:3c:0e:d9:5d:42:31:6d:77:
         3d:31:f3:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijI657gE2rBcMPAdSuZ9ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNTY1NWRjNjc3OWQwOTVmY2IwOGI2MWFiZWI4NmIwY2Q5
OWE3OGMwHhcNMjUwOTA3MDUwMTAwWhcNMjUwOTA4MDUwMTAwWjAzMTEwLwYDVQQD
Eyg2ZThhYTFhNjQwNzQ2NWEwNzdkODVhMjYxNDI1ZTEyMTgwNmU5YjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4SLG1HdLX6TF3A2TqUNsaTCYrvd
7DPCzcjWocZcBrDtCP87D/Hyn56oFy/5tuEXCXqcAMImaOGqf6jIO16Cui0gTFty
MM8o516drWi+WexHxeDxiSahH6/QcHVivsTvZYL5UI+XpY6eyQb/HwxfF9g7T8ly
GsHT15bNd4fArPkH+HN6ZSLcZeyaXtjmsVQlrUICIfEkHAT1N0iEjPr8hm6Zb4rh
dET+gPZQHGODDkPjZYCaDIqRO4ym1McTD2TSGAD+kMIRm94MB796I3efWGbP1S1T
irskhhx4xNDgsPeM0u9tI/Cc4lHK+YXPAZV/KLymryoVbaaUSixXCrJYAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG6KoaZAdGWgd9haJhQl4SGAbpsVMB8GA1UdIwQY
MBaAFHNWVdxnedCV/LCLYavrhrDNmaeMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzFaVjNHZDUwSlg4c0l0aHEtdUdzTTJacDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jYzhhNTMtMDJkOS00YTFmLTkwN2Ut
M2I4NmEzZDAwZmU5LzEvYzFaVjNHZDUwSlg4c0l0aHEtdUdzTTJacDR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9jYzhhNTMtMDJkOS00YTFmLTkwN2UtM2I4NmEzZDAwZmU5
LzEvYzFaVjNHZDUwSlg4c0l0aHEtdUdzTTJacDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABdC8+iHF
ZzNK27R7CMc3EPRkOGKFbswH7Pcf2oJe3J9eM9yic0vEEBRvK0rBqT2qMg5P8nk5
MwG5p0/jCQVCpo5jNE+1aC0thgbOtptwAxGNaTCAg3gyMzxvQxIv0ywElaDPDFJC
Vsv00UnLz34BWLZU8Z28rb6SNeRUPWaJw2j3mMp2S/wW1vSdSl1C68cMbWaIdomH
DllhrAWNiB3uUb9RBUt2JD1RJAhYtndf692afZHZJ9fJZHycnHRumYlcN7mvZ2C5
s85RAJ5aj9/3bJ/VUy1dIew4z6uQ4EN14Wup8ZXKyBYL8smi8pI6HeDhnza+DDwO
2V1CMW13PTHzVA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:08:18 2025 by rpki-client