Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft
File:                     ccFpDvV6_P-uc725k0MJ-LcOu2E.mft (raw, json)
Hash identifier:          z0/JgdaYooVR8+4AeLT4Oq0PRjctJFri6qoFutSrQVg=
Subject key identifier:   22:44:F3:8E:8E:10:8A:3E:44:48:2D:6B:E0:8B:14:0D:E3:87:83:4C
Authority key identifier: 71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
Certificate issuer:       /CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Certificate serial:       01A0908EED6EE330D749C2CE31515367A4B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft
Manifest number:          199F
Signing time:             Fri 11 Sep 2026 13:01:21 +0000
Manifest this update:     Fri 11 Sep 2026 13:01:21 +0000
Manifest next update:     Sat 12 Sep 2026 13:01:21 +0000
Files and hashes:         1: 6sfcsooGMCFXO1kWatFbvvr1zLA.roa (hash: QdFq68T0MyS7t2slIEEx1ooDTbclHUWKKj4eUylZI2c=)
                          2: NpiHnYFexffpXlY55BYzjfAHv4w.roa (hash: KMdyac6MZ5qBRRQr/k2XUi4yNROOCzI2aVOuefuG2aA=)
                          3: WrWzBEncYcxkc-a46XxrWRG30y4.roa (hash: 3BGfxi0WT8XUNNL8UKXsVqPQk7yH3Dfp1aLhOELVb1Q=)
                          4: XXFvo0LwN5fFxfFhs7wIa9afeec.roa (hash: SfaEqekBPYoxq/TIPc/MEtTssLDFzyVZM05mRJ5aA7A=)
                          5: ccFpDvV6_P-uc725k0MJ-LcOu2E.crl (hash: ZvLakN9oJbXeoXlYGTBkgEgUy1RgB50yKuz8CDSimYA=)
                          6: vjwSSPjssAJWg17wdB8nOax9NPg.roa (hash: +Skus1QTMfLkZcv6BWomJpA4+khM7/pNQ8k90KcyWes=)
                          7: ywS_DWFhfGT_5zoyX1YZLjOr-0I.roa (hash: NiPKJPuTp/RkYFR2X2m2JVeorjDmkEEV8OJgWiusFQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 12 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:90:8e:ed:6e:e3:30:d7:49:c2:ce:31:51:53:67:a4:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
        Validity
            Not Before: Sep 11 13:01:21 2026 GMT
            Not After : Sep 12 13:01:21 2026 GMT
        Subject: CN=2244f38e8e108a3e44482d6be08b140de387834c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9a:99:15:92:40:c0:7a:07:99:f1:89:92:53:
                    a3:f7:65:71:de:0a:47:b6:9f:f5:ac:14:6f:68:68:
                    e9:3d:0b:76:27:2a:85:21:7b:66:4f:a9:6a:55:fd:
                    48:46:38:16:84:bd:0a:ba:65:d8:51:e4:03:80:c9:
                    ad:92:b3:b7:45:9d:59:79:fe:dc:55:41:b0:d0:6d:
                    3f:73:9d:61:36:ee:01:6e:36:04:70:4e:0d:72:af:
                    f2:1d:b4:8f:0f:ff:50:12:ca:af:6c:6f:5c:5c:a2:
                    fb:79:e3:59:eb:88:b9:4f:8b:da:ca:d5:ce:42:26:
                    37:64:9c:20:a8:5c:ef:b8:dd:b0:c4:99:5a:06:19:
                    f9:e0:c9:71:88:9f:35:1e:36:99:fe:83:ae:d1:d4:
                    21:f5:ce:60:63:62:5b:26:10:7d:35:83:0a:c4:0f:
                    a1:af:b3:eb:c1:e5:63:9b:07:d2:62:30:53:9b:4d:
                    91:31:dd:6b:fc:c8:46:34:7f:f8:77:42:9d:f3:e1:
                    91:99:86:ce:7f:37:a6:0d:4e:e2:f5:fe:31:24:49:
                    98:95:98:f9:de:2f:71:7d:6c:fd:2a:f6:06:85:71:
                    6d:37:0a:74:d1:72:9b:e6:d9:d2:8a:b8:81:67:ef:
                    26:0f:39:a6:9e:0a:cd:9f:72:eb:2c:aa:cf:52:0e:
                    de:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:44:F3:8E:8E:10:8A:3E:44:48:2D:6B:E0:8B:14:0D:E3:87:83:4C
            X509v3 Authority Key Identifier:
                keyid:71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:8f:1c:56:e5:b5:d8:0b:56:8e:54:a5:9e:e0:34:e4:d9:a0:
         5a:55:e8:f0:d0:b5:8f:b8:17:23:46:62:fc:5a:0e:5a:df:83:
         65:d9:1f:23:5b:0d:78:37:08:36:05:44:bf:14:d2:10:08:a5:
         0a:74:81:13:8e:cb:c4:b1:93:bd:c7:29:7d:9e:6a:b4:b5:30:
         4e:25:c9:ad:21:71:3c:07:10:60:f7:54:b4:63:82:d9:83:55:
         f1:3b:41:bc:c9:4d:d0:98:67:c3:d2:7e:75:c8:7d:b6:5c:a2:
         15:b8:35:c6:3f:a1:79:b0:39:f9:22:12:b5:d6:fa:91:4b:d6:
         e9:9e:16:75:a0:9d:7e:89:7b:8d:5c:c3:02:4e:78:b2:7e:06:
         d5:7f:16:d7:f7:10:08:71:bc:24:db:fc:23:16:04:6d:93:6e:
         07:b3:1d:b1:8f:a9:ab:9a:6c:d9:83:0b:5e:f5:04:83:7e:54:
         b1:cf:25:01:b4:fa:44:d4:52:d9:1e:54:dc:44:12:4d:19:ad:
         7e:f6:1d:b3:fb:35:e8:79:63:ef:43:f4:b3:96:81:f8:18:26:
         62:df:b1:3f:a0:c2:1b:5f:9d:e5:62:84:36:0c:42:08:76:45:
         ed:1f:86:f4:44:b4:37:f7:0b:b1:4c:97:32:e0:d0:1c:f1:b6:
         fe:32:bd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----