Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft
File:                     Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft (raw, json)
Hash identifier:          m/mJ1HfVv2/fVNBb1TXLb5u/7H096fdincVWBhcWMjg=
Subject key identifier:   75:EC:EC:09:E3:6F:3F:73:E2:F2:BE:B6:98:CD:38:AD:46:01:46:07
Authority key identifier: 45:CD:81:F4:98:66:18:0F:CB:DD:3B:77:5E:79:D6:19:BF:DB:57:E6
Certificate issuer:       /CN=45cd81f49866180fcbdd3b775e79d619bfdb57e6
Certificate serial:       019923A0F3CEAC37930A4E9299EF1711C4A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft
Manifest number:          10A6
Signing time:             Sun 07 Sep 2025 10:02:54 +0000
Manifest this update:     Sun 07 Sep 2025 10:02:54 +0000
Manifest next update:     Mon 08 Sep 2025 10:02:54 +0000
Files and hashes:         1: Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.crl (hash: IfoNNyQrCRerGWJjokolZVqH8Nqa3bUHN9VH05b+dHw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:a0:f3:ce:ac:37:93:0a:4e:92:99:ef:17:11:c4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45cd81f49866180fcbdd3b775e79d619bfdb57e6
        Validity
            Not Before: Sep  7 10:02:54 2025 GMT
            Not After : Sep  8 10:02:54 2025 GMT
        Subject: CN=75ecec09e36f3f73e2f2beb698cd38ad46014607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5a:56:70:eb:a1:13:0b:c7:04:3b:29:db:00:
                    99:12:f8:f8:75:97:d1:33:23:c5:c0:ae:57:39:bd:
                    13:86:6b:8e:a3:cd:e6:7c:df:c3:c0:b9:0d:1f:48:
                    64:d9:09:2b:30:d1:67:c8:ed:81:80:20:6b:36:22:
                    f1:8e:2a:10:85:c2:0a:4c:8f:e4:b1:6e:99:c9:e0:
                    fe:86:b5:f1:08:79:d6:2e:9f:98:0b:7b:88:92:0c:
                    83:cf:5b:02:72:c1:6a:e8:c9:d5:e2:05:ec:da:58:
                    28:21:e6:75:62:90:62:b8:01:29:b5:69:33:48:2f:
                    58:38:7d:69:7f:cd:4d:be:71:a6:63:7f:30:5a:b9:
                    e3:8a:2d:fd:13:40:54:94:65:24:35:e4:ec:54:76:
                    d0:0e:be:f4:01:f1:4e:62:52:b4:e7:29:96:87:8b:
                    20:9a:78:5f:66:4d:b8:df:56:f1:14:d9:d1:7d:c3:
                    da:15:45:55:21:5b:18:19:d2:01:ca:af:d5:69:a6:
                    9d:99:42:d0:28:01:8f:19:ad:82:9f:67:ba:1b:5e:
                    f5:09:0d:ed:0d:d3:d0:df:99:2d:77:e8:b6:97:74:
                    ad:92:ee:21:7e:9d:81:c7:17:cd:42:8a:27:91:52:
                    47:3d:7f:6c:b0:f3:5f:7c:ae:bc:92:aa:fb:e1:59:
                    a2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:EC:EC:09:E3:6F:3F:73:E2:F2:BE:B6:98:CD:38:AD:46:01:46:07
            X509v3 Authority Key Identifier:
                keyid:45:CD:81:F4:98:66:18:0F:CB:DD:3B:77:5E:79:D6:19:BF:DB:57:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:5f:54:74:08:39:b0:b4:11:65:42:e3:e2:60:de:18:1d:de:
         53:7c:47:dd:53:11:ef:e2:95:61:fe:94:99:f4:d2:1f:f5:41:
         12:f1:36:67:35:04:b2:99:f9:4a:5c:7e:64:9e:4c:70:e6:4a:
         75:4e:e3:81:ac:b2:4f:dc:c0:93:71:c3:23:a5:31:15:7b:bf:
         12:50:aa:61:17:55:89:4a:aa:fd:b0:34:cb:b3:71:cd:c0:fe:
         18:e1:bf:0d:ca:a6:6c:6f:45:df:7b:4d:fd:de:b7:3a:a5:24:
         4c:9a:8f:c8:0e:73:91:2b:70:b7:f5:c7:5c:6d:bd:75:7c:04:
         91:c4:d3:50:bd:e9:95:af:7b:f7:8b:ff:a2:d8:6e:c2:5f:8b:
         f8:0a:0a:77:fd:93:74:c8:3c:26:d9:36:22:2a:1d:ed:57:46:
         19:5c:3a:10:89:7a:57:d5:a3:0b:11:94:ed:5f:07:1f:2c:a1:
         ac:60:ad:72:cd:13:1a:cf:32:4f:c2:a0:28:27:7c:84:a5:89:
         15:85:c1:d0:63:20:74:56:6a:04:e8:3c:09:86:e8:9a:96:8c:
         18:27:7d:fc:d3:13:5d:91:c9:bf:f6:24:6c:b5:45:de:97:95:
         d9:0b:10:f7:af:96:e8:b4:f1:d4:3d:f6:b6:f0:aa:b5:e0:b2:
         c1:ee:9d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:35 2025 by rpki-client