Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/adc689-8ba5-4d12-ad71-c6a4f00d650a/1/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.mft
File:                     1-MEeh-GpUxK2xZpfy9iXZGtKT4E.mft (raw, json)
Hash identifier:          m1t1fSLWUpnSwON/UBBPuMjmXIAMvGva2vECklJ54eE=
Subject key identifier:   6C:EC:92:0C:01:21:4B:2D:AD:F7:EE:38:63:C0:DA:85:33:4F:76:87
Authority key identifier: F8:C1:1E:87:E1:A9:53:12:B6:C5:9A:5F:CB:D8:97:64:6B:4A:4F:81
Certificate issuer:       /CN=f8c11e87e1a95312b6c59a5fcbd897646b4a4f81
Certificate serial:       0199221F1A8828166D4D0A2AA310C4D4F611
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/adc689-8ba5-4d12-ad71-c6a4f00d650a/1/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.mft
Manifest number:          CC
Signing time:             Sun 07 Sep 2025 03:01:27 +0000
Manifest this update:     Sun 07 Sep 2025 03:01:27 +0000
Manifest next update:     Mon 08 Sep 2025 03:01:27 +0000
Files and hashes:         1: 1-MEeh-GpUxK2xZpfy9iXZGtKT4E.crl (hash: 4mknVHOxvjIAr4oHuUIJfYuK1udslatwiUvqZcoeb6I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/adc689-8ba5-4d12-ad71-c6a4f00d650a/1/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/adc689-8ba5-4d12-ad71-c6a4f00d650a/1/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1f:1a:88:28:16:6d:4d:0a:2a:a3:10:c4:d4:f6:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8c11e87e1a95312b6c59a5fcbd897646b4a4f81
        Validity
            Not Before: Sep  7 03:01:27 2025 GMT
            Not After : Sep  8 03:01:27 2025 GMT
        Subject: CN=6cec920c01214b2dadf7ee3863c0da85334f7687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ef:1b:38:2d:c8:6c:32:d5:0f:64:fb:f4:42:
                    99:9a:ac:6c:e9:04:97:49:59:70:f4:00:02:fb:2b:
                    bc:c0:32:ee:3b:d1:12:7d:e0:ad:d8:8d:0c:35:c2:
                    fe:72:17:0d:26:62:20:72:d3:8d:5b:32:d2:8b:01:
                    1f:0d:f7:df:c5:82:41:8c:79:e1:e4:66:ca:1d:01:
                    24:98:d4:f3:31:eb:c1:b0:05:4f:12:05:4e:a7:9d:
                    2f:2d:d7:83:41:4a:dc:19:08:97:57:d3:8d:7e:2a:
                    46:e1:70:3e:f8:dd:a7:28:f1:64:f1:95:a0:f6:0f:
                    00:7f:b7:d4:2e:1d:0a:fa:df:d2:f5:9e:ca:85:9a:
                    e5:ad:34:7b:a0:b9:46:90:2a:95:d8:58:82:fa:ef:
                    a6:93:f6:7f:3e:d0:3d:0c:07:b4:8b:b8:a3:e9:59:
                    7a:c5:af:63:23:6b:85:c3:65:6b:fd:5e:cc:92:1f:
                    10:9b:55:a8:f4:ff:78:ad:28:54:c4:ed:b7:71:eb:
                    b3:0d:1d:1f:f4:c5:a0:12:3b:fc:60:15:b3:42:9d:
                    b2:37:d6:e2:2a:79:41:49:34:a0:e7:bc:b0:67:63:
                    91:24:71:53:6a:bc:90:74:c1:c1:f9:c1:a2:89:34:
                    bb:42:1a:cc:fd:3d:6d:03:d7:62:7e:ce:74:f2:98:
                    7c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:EC:92:0C:01:21:4B:2D:AD:F7:EE:38:63:C0:DA:85:33:4F:76:87
            X509v3 Authority Key Identifier:
                keyid:F8:C1:1E:87:E1:A9:53:12:B6:C5:9A:5F:CB:D8:97:64:6B:4A:4F:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/adc689-8ba5-4d12-ad71-c6a4f00d650a/1/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/adc689-8ba5-4d12-ad71-c6a4f00d650a/1/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:91:66:98:e9:ab:bb:fd:a9:6c:8c:df:e0:39:ab:d1:22:80:
         d9:63:65:2d:ac:7b:03:ca:21:46:c1:1f:4d:00:50:0d:60:1a:
         8a:3f:22:ec:f5:07:42:75:bd:1f:81:bf:ec:77:a8:bf:52:b0:
         0b:62:e0:65:b4:c4:71:bc:8c:64:b4:8c:1d:17:29:f3:ba:55:
         c9:e7:2f:36:2c:66:17:6c:fa:d7:1f:c6:0a:c7:6a:a3:a1:eb:
         55:a7:0e:d7:8c:37:37:74:a4:e2:85:5d:12:d2:4d:42:fb:77:
         5b:8f:f9:a6:41:26:20:39:ca:d5:96:0c:5a:82:64:95:35:7a:
         09:bf:f8:9e:5c:16:f8:bc:76:fe:73:f4:97:c7:73:52:2e:90:
         0d:78:71:60:40:66:bf:0d:65:1c:fd:06:99:81:0a:63:55:8d:
         0f:d8:92:4f:eb:f3:43:ed:22:7b:78:95:af:b1:44:91:c2:4a:
         e9:86:d4:47:d9:5d:d5:8e:d8:b7:77:50:f2:25:d2:ab:99:8d:
         d1:b9:a2:4e:d6:6e:61:6d:19:96:f6:74:b0:fb:eb:4a:dd:24:
         77:6a:9d:d0:16:dc:54:56:32:b3:bc:77:61:3d:9e:e0:7d:78:
         c5:64:36:d1:4b:a6:68:dd:19:fb:5a:12:aa:2b:03:b2:ca:f5:
         ed:fa:99:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:27 2025 by rpki-client