Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
File:                     V3EfIIg6YrwGORunslgs5ys_6Rw.mft (raw, json)
Hash identifier:          ME7/kvEjsz9iNzTQ05Fr59/hx5IFFMz1NAgvA6eSBDc=
Subject key identifier:   DA:C1:05:AB:B4:4F:64:04:78:5A:F0:C3:AF:30:C8:C7:8C:94:99:07
Authority key identifier: 57:71:1F:20:88:3A:62:BC:06:39:1B:A7:B2:58:2C:E7:2B:3F:E9:1C
Certificate issuer:       /CN=57711f20883a62bc06391ba7b2582ce72b3fe91c
Certificate serial:       019933B77181B58E6C761F7B41E1179F5A75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
Manifest number:          1261
Signing time:             Wed 10 Sep 2025 13:01:24 +0000
Manifest this update:     Wed 10 Sep 2025 13:01:24 +0000
Manifest next update:     Thu 11 Sep 2025 13:01:24 +0000
Files and hashes:         1: K1RXDd41ejHM6gE_h4XPr9eqXqg.roa (hash: HFPOwF7yl1DzvJdGJnqBFfDZ3/PqP2JlTX3PgCcBwh0=)
                          2: V3EfIIg6YrwGORunslgs5ys_6Rw.crl (hash: HAjH/XwurmkHRVFRuXvejbfu+gaTowPatWgTy5mmjrk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 13:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:33:b7:71:81:b5:8e:6c:76:1f:7b:41:e1:17:9f:5a:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57711f20883a62bc06391ba7b2582ce72b3fe91c
        Validity
            Not Before: Sep 10 13:01:24 2025 GMT
            Not After : Sep 11 13:01:24 2025 GMT
        Subject: CN=dac105abb44f6404785af0c3af30c8c78c949907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:47:d7:b1:66:25:3c:22:c0:e7:24:84:6d:c3:
                    1b:7c:64:8f:e9:00:58:4e:2a:12:ca:63:1b:df:ca:
                    72:ac:0b:35:51:64:0c:f2:81:52:1c:50:aa:dc:ae:
                    f3:08:1b:f0:49:89:03:84:4f:f8:89:06:ed:82:7d:
                    9a:ec:f8:38:21:be:de:f4:66:ac:62:47:46:56:b3:
                    b3:ac:92:f5:b1:8a:65:b7:b0:ae:01:ff:14:bd:a9:
                    09:9a:b1:06:48:f8:9c:4d:1f:36:27:c0:9e:05:31:
                    64:2a:72:54:4f:b0:a0:3c:b8:9f:e6:5f:ac:c5:df:
                    54:f5:11:75:70:0b:f3:ca:7c:e5:fd:cd:ac:e9:5b:
                    75:7c:d9:0b:89:81:c9:e0:70:43:9f:f4:89:97:e7:
                    b2:d0:5b:bb:cd:f8:d8:eb:83:f4:9d:a7:1c:42:d2:
                    26:0b:35:71:6e:4d:3e:d1:55:2b:89:bf:ad:4b:08:
                    3e:9a:37:85:c0:13:88:80:20:be:c1:a5:dd:d2:ff:
                    8b:0d:0c:e2:0b:9b:a2:9b:dd:70:11:aa:13:9a:a9:
                    99:f2:ad:74:bd:7f:ef:c9:d1:10:bb:60:4c:d3:fd:
                    0d:e6:18:2e:47:15:64:a2:93:fe:bd:35:3d:92:10:
                    72:04:74:3e:07:f7:d4:46:f9:18:87:c4:dc:e1:f0:
                    e7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C1:05:AB:B4:4F:64:04:78:5A:F0:C3:AF:30:C8:C7:8C:94:99:07
            X509v3 Authority Key Identifier:
                keyid:57:71:1F:20:88:3A:62:BC:06:39:1B:A7:B2:58:2C:E7:2B:3F:E9:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:41:6a:10:60:ca:cd:e0:d6:b2:eb:ba:6a:b3:30:ad:68:58:
         ce:07:f3:51:e1:34:97:ac:2b:aa:8a:f1:78:6b:bd:5a:2f:9e:
         95:1b:5c:04:a2:89:f4:1c:00:f7:c8:83:13:64:d4:1e:7c:ca:
         d7:50:76:3e:d5:b0:7e:3f:f5:b7:4e:e1:b2:c6:c7:98:3e:7a:
         4b:9c:9f:20:5e:43:a0:cc:ea:f2:09:e8:23:24:58:c1:f6:0b:
         d5:fa:27:07:cc:a3:19:f9:08:e8:6f:3d:9a:94:1b:53:fe:ec:
         65:6d:75:17:1b:8b:0c:bb:fb:ef:f3:96:dd:86:5f:59:a4:ce:
         30:2a:a6:63:bc:b9:7b:37:50:4f:2c:38:1e:57:d2:76:2d:ea:
         5a:9b:78:49:9b:1c:d8:9e:24:ce:6d:b5:c6:a3:bc:c1:b0:3f:
         09:fe:2e:f0:b6:99:60:f3:68:f8:5a:41:8d:76:51:2b:52:25:
         18:fc:86:4d:63:f3:ad:87:74:c2:b4:8b:65:0a:f7:11:d6:dd:
         47:11:2e:d6:91:67:0e:59:71:42:59:4b:9c:fd:de:8e:f9:9e:
         43:d6:d7:96:89:13:9c:48:50:32:67:cb:bb:e7:a5:64:66:39:
         47:d3:de:8c:3f:06:21:52:2e:4c:06:f4:5f:7e:61:b0:19:dd:
         58:ec:df:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:57:03 2025 by rpki-client