Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.mft
File:                     1-2d6wpD-CR-iNunaZquveM0sjGE.mft (raw, json)
Hash identifier:          mPiuHHPT3zMyRofZFgcMHfq6D73PjRslqYoqeX/j+Q8=
Subject key identifier:   1C:01:51:13:AD:07:5C:92:95:7B:65:5E:4A:9C:AD:E9:8B:D8:BC:F2
Authority key identifier: FB:67:7A:C2:90:FE:09:1F:A2:36:E9:DA:66:AB:AF:78:CD:2C:8C:61
Certificate issuer:       /CN=fb677ac290fe091fa236e9da66abaf78cd2c8c61
Certificate serial:       0199239FD9292961B19E3AF5B84886452475
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-2d6wpD-CR-iNunaZquveM0sjGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.mft
Manifest number:          106C
Signing time:             Sun 07 Sep 2025 10:01:42 +0000
Manifest this update:     Sun 07 Sep 2025 10:01:42 +0000
Manifest next update:     Mon 08 Sep 2025 10:01:42 +0000
Files and hashes:         1: 1-2d6wpD-CR-iNunaZquveM0sjGE.crl (hash: obNPp3p3nGjcxjRhgmsavo+qOkIAAwqZdw02SPGjohk=)
                          2: 9IBHLWVOZ0QllouyRgZXZZaYaZg.roa (hash: EjNvIqlv1V/ciVJtAGWjow9nk1g6XEmRzV7siqw9gdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-2d6wpD-CR-iNunaZquveM0sjGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9f:d9:29:29:61:b1:9e:3a:f5:b8:48:86:45:24:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb677ac290fe091fa236e9da66abaf78cd2c8c61
        Validity
            Not Before: Sep  7 10:01:42 2025 GMT
            Not After : Sep  8 10:01:42 2025 GMT
        Subject: CN=1c015113ad075c92957b655e4a9cade98bd8bcf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:05:aa:98:e1:33:07:3a:ff:7d:7e:3e:36:83:
                    db:2d:27:24:15:b2:72:bf:da:49:ca:61:80:e1:0e:
                    2e:5f:57:15:00:d2:78:87:43:4f:29:c6:23:f8:c4:
                    0d:84:a6:51:e9:ca:a0:b1:23:10:80:aa:4c:32:c6:
                    78:3b:f3:30:43:7f:42:d4:05:2e:d6:cf:3f:5e:9c:
                    71:33:a9:05:d2:6c:5e:a8:58:73:a9:2b:44:af:fe:
                    57:3e:b8:85:df:f5:7d:b8:d7:31:c7:13:77:3e:de:
                    27:bb:d1:4a:c6:e7:e7:8f:0b:1f:47:94:4d:5a:f3:
                    c8:2f:bc:5f:97:fa:d2:ad:2e:bc:3a:34:43:d1:8b:
                    1f:cf:08:a0:4a:6f:c1:d2:81:0c:6e:82:6a:f4:25:
                    3e:98:84:1f:83:aa:a9:13:49:90:59:bd:95:f2:ef:
                    3c:25:77:10:37:e2:8b:7e:fa:38:08:48:30:4c:68:
                    65:72:0e:8c:01:86:67:08:34:81:3f:20:c9:75:fe:
                    32:f8:28:ce:71:30:d8:88:f1:66:dc:8e:1f:86:74:
                    88:cd:97:73:e2:25:d7:7b:78:08:78:f0:ee:3b:01:
                    20:24:f9:f9:af:b3:92:f1:71:14:ec:b9:1c:15:26:
                    c8:98:ee:9f:2e:56:0d:2d:3f:4e:b5:95:57:93:d9:
                    1f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:01:51:13:AD:07:5C:92:95:7B:65:5E:4A:9C:AD:E9:8B:D8:BC:F2
            X509v3 Authority Key Identifier:
                keyid:FB:67:7A:C2:90:FE:09:1F:A2:36:E9:DA:66:AB:AF:78:CD:2C:8C:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2d6wpD-CR-iNunaZquveM0sjGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:c4:8b:ed:7f:43:96:09:97:65:7c:26:5d:8d:eb:9e:98:ce:
         b6:39:da:77:f7:9c:33:ef:fd:b4:88:1b:10:97:f9:3f:70:71:
         81:ac:ff:9e:09:b9:94:7f:9b:2e:d8:89:4f:96:8f:e1:6a:95:
         47:35:0f:77:b9:d0:35:bc:91:a9:7a:d6:5d:88:95:05:c1:b9:
         fa:dc:53:8f:e6:09:72:f5:ae:70:d1:c9:4e:18:c9:c4:00:26:
         f7:81:29:b4:c7:98:ac:3c:e4:81:3b:dd:41:51:53:8a:58:cf:
         98:36:a2:aa:04:83:06:18:52:46:9a:22:f7:89:7e:e6:b1:4a:
         1b:f2:b4:14:ce:b5:a3:d9:c0:53:6b:76:5e:e9:8d:10:e7:b0:
         11:07:d5:01:46:10:f5:4a:a6:14:8a:e6:10:ae:08:3c:a7:05:
         a2:31:6b:a7:5f:0b:d0:43:5a:28:3b:81:7e:74:22:7a:22:3c:
         a8:b8:05:28:1b:da:d8:ca:83:7e:bf:06:fc:7f:4c:75:dd:52:
         04:46:61:24:2d:52:9b:8e:81:ad:38:77:3c:71:e3:90:43:80:
         61:d0:e2:3b:c5:f4:6f:bc:94:98:28:3a:8b:d2:59:3b:7c:9a:
         2e:00:5b:92:8f:2e:7a:ea:cf:6c:7e:e8:49:6e:13:9c:fe:59:
         e0:e9:53:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 16:05:02 2025 by rpki-client