Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/6ac685-196b-41f1-9144-99d1ec9672b5/1/q26zFV4s1TUhGZun9ijDzbunz3k.mft
File:                     q26zFV4s1TUhGZun9ijDzbunz3k.mft (raw, json)
Hash identifier:          XGEKwbcfyFlqofqb+VOVfr6/ioEH27Vf1z8Ew9fnsKI=
Subject key identifier:   2C:DB:3D:1D:D9:3B:5C:F9:07:A1:E4:4F:72:78:90:BC:29:A3:5E:E1
Authority key identifier: AB:6E:B3:15:5E:2C:D5:35:21:19:9B:A7:F6:28:C3:CD:BB:A7:CF:79
Certificate issuer:       /CN=ab6eb3155e2cd53521199ba7f628c3cdbba7cf79
Certificate serial:       019923A0853178E0A81ADB7EE34D0E171B27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q26zFV4s1TUhGZun9ijDzbunz3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/6ac685-196b-41f1-9144-99d1ec9672b5/1/q26zFV4s1TUhGZun9ijDzbunz3k.mft
Manifest number:          0368
Signing time:             Sun 07 Sep 2025 10:02:26 +0000
Manifest this update:     Sun 07 Sep 2025 10:02:26 +0000
Manifest next update:     Mon 08 Sep 2025 10:02:26 +0000
Files and hashes:         1: fMx4JRDhT-4EqpiMKvHy8Mkz708.roa (hash: mZ+R87KV+PsrYlu7YWRXhHM7+ZqAJ6Tj0DDGQTn9KvM=)
                          2: q26zFV4s1TUhGZun9ijDzbunz3k.crl (hash: XSP1LuYMygpbxOZTIeqwQ/0dE7MzDLRYVRZrqcfHa1g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/6ac685-196b-41f1-9144-99d1ec9672b5/1/q26zFV4s1TUhGZun9ijDzbunz3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/6ac685-196b-41f1-9144-99d1ec9672b5/1/q26zFV4s1TUhGZun9ijDzbunz3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q26zFV4s1TUhGZun9ijDzbunz3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:a0:85:31:78:e0:a8:1a:db:7e:e3:4d:0e:17:1b:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab6eb3155e2cd53521199ba7f628c3cdbba7cf79
        Validity
            Not Before: Sep  7 10:02:26 2025 GMT
            Not After : Sep  8 10:02:26 2025 GMT
        Subject: CN=2cdb3d1dd93b5cf907a1e44f727890bc29a35ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e0:81:1d:3e:36:dd:d0:eb:6d:5f:71:26:09:
                    48:8c:07:3a:59:5b:0e:63:63:c9:71:8f:e5:3e:8a:
                    fc:b4:ea:7c:5e:b4:ee:bb:07:1b:9e:8c:af:f9:5a:
                    90:01:1c:15:b4:89:a3:5d:2a:f3:bb:d0:83:dc:6a:
                    df:0e:c7:9c:8a:51:36:b3:d9:f5:e6:6c:bc:ea:8d:
                    02:75:3e:e4:a3:a3:19:4c:05:3e:e1:09:19:3f:d5:
                    cc:10:ce:dd:c1:3d:4e:0c:8f:e8:81:e1:f7:4a:8a:
                    bc:2c:0c:da:71:d1:8b:73:60:e1:3c:d3:a0:66:73:
                    25:1f:75:c8:09:0a:5d:8d:ba:a7:d3:7f:25:80:d6:
                    43:bc:f5:11:8c:47:8a:dd:cf:f7:02:9c:ff:94:53:
                    78:6d:8a:4c:1c:80:b9:3d:ab:e5:77:d7:d6:17:f7:
                    fd:bc:5a:03:b3:6a:8d:8f:26:93:91:fb:33:79:79:
                    6e:a7:72:34:bb:9e:7c:e3:da:c3:78:d8:05:bb:24:
                    75:98:96:21:eb:62:d4:ac:23:27:4f:7b:e8:69:3d:
                    87:60:46:10:b2:7e:03:84:dc:bb:f0:41:4b:d1:6d:
                    a1:a4:99:ac:c4:0a:e4:d9:ef:2f:d3:ad:42:9d:fa:
                    1b:d7:6c:35:33:b5:44:bb:b7:0d:23:89:a0:e7:25:
                    31:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DB:3D:1D:D9:3B:5C:F9:07:A1:E4:4F:72:78:90:BC:29:A3:5E:E1
            X509v3 Authority Key Identifier:
                keyid:AB:6E:B3:15:5E:2C:D5:35:21:19:9B:A7:F6:28:C3:CD:BB:A7:CF:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q26zFV4s1TUhGZun9ijDzbunz3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6ac685-196b-41f1-9144-99d1ec9672b5/1/q26zFV4s1TUhGZun9ijDzbunz3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6ac685-196b-41f1-9144-99d1ec9672b5/1/q26zFV4s1TUhGZun9ijDzbunz3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:90:c4:16:57:b1:b5:92:53:15:64:81:f7:58:39:cb:79:c1:
         f9:b8:34:b0:94:e5:b6:ad:a4:de:06:31:a5:76:d2:ab:1f:52:
         1b:af:f6:66:bd:fd:47:1c:37:ff:f1:f2:09:0f:cb:6f:e4:ac:
         03:9b:a6:3e:0e:12:fb:6f:a8:d8:d9:1a:82:a5:f3:44:86:77:
         8f:af:4c:83:d0:f0:5e:c3:a7:94:a8:6f:a5:51:54:c8:78:bb:
         68:80:de:e6:52:6c:c4:66:20:4d:e7:6a:8f:4b:83:bb:ff:5e:
         7c:44:19:e6:9e:aa:36:e5:5f:56:a4:58:9d:ea:5a:2b:3a:8c:
         19:a3:0c:06:ee:9d:6c:c3:97:6f:bd:9e:43:e3:5e:e3:ed:ff:
         a7:1c:7c:17:d4:69:9d:ee:37:17:fc:2a:c2:c0:80:b9:8b:b6:
         03:af:6f:56:b0:d8:28:25:28:e4:d1:26:57:71:66:42:f8:d0:
         ec:96:75:13:bf:7f:24:d7:de:bd:62:5f:64:4c:22:e2:a9:15:
         7b:fd:d2:64:e7:83:45:c3:ea:71:b3:d3:36:12:ee:97:3c:82:
         21:12:5f:b4:3f:ee:ae:ba:a5:cd:5b:b6:90:ab:1d:08:e8:6d:
         b8:0b:19:bb:87:17:01:26:ab:9d:d1:5c:7b:ae:13:43:2a:00:
         44:1f:e3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:05 2025 by rpki-client