Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
File:                     S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft (raw, json)
Hash identifier:          f3lwlGTnNBr1Tw2hIJLiQFbNxNV8YOGR8c1n1t3KAnU=
Subject key identifier:   61:C9:F9:22:21:72:DF:1F:88:EE:35:6E:83:BC:3B:DA:35:D7:73:66
Authority key identifier: 4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E
Certificate issuer:       /CN=4b89d87f8e41b5082d38916015e059e56dd0114e
Certificate serial:       0198D6605F19641E811F716230FFF485897F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
Manifest number:          0EBA
Signing time:             Sat 23 Aug 2025 10:01:36 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:36 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:36 +0000
Files and hashes:         1: S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl (hash: sHfT/lmwnAH+5rKm3g/i6ddeK0GqFjZig5JIMTQP7PI=)
                          2: crOsrOXIXenqmjjK7E42FO9nzAY.roa (hash: FavBc7FYhPnbTZq/1FuhdovJ2d7YJv+63Ene4V7HX3s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:5f:19:64:1e:81:1f:71:62:30:ff:f4:85:89:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b89d87f8e41b5082d38916015e059e56dd0114e
        Validity
            Not Before: Aug 23 10:01:36 2025 GMT
            Not After : Aug 24 10:01:36 2025 GMT
        Subject: CN=61c9f9222172df1f88ee356e83bc3bda35d77366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:05:da:84:9e:8f:06:1f:1a:0d:b6:b1:2b:db:
                    5f:16:7b:e1:62:0d:d6:d6:21:8b:bb:68:b2:90:1c:
                    d8:1c:cb:81:12:8d:8b:dd:22:88:4d:fb:65:9c:ab:
                    ff:bb:eb:f3:55:b5:0e:68:d6:34:9d:74:58:b1:5c:
                    4a:de:ae:0d:f5:41:f0:e3:d5:16:23:91:31:61:bf:
                    a9:57:f4:aa:2a:a8:b1:18:e7:e1:ea:46:62:8e:73:
                    aa:ab:22:54:2c:75:a6:9d:fc:56:92:a0:f7:10:b1:
                    18:b7:f3:bf:3a:9e:e5:76:80:cd:23:43:44:33:e0:
                    d2:d7:f3:30:7b:2b:8e:74:ee:81:96:2b:33:29:8e:
                    fe:ae:49:10:98:53:a8:67:59:a0:ef:2c:5c:87:d4:
                    3a:5c:bf:f8:df:62:27:b1:fc:14:bc:4b:77:cf:96:
                    04:48:32:51:43:ed:2a:fd:3b:9b:c2:02:49:9d:93:
                    5c:bc:06:5b:42:8d:76:d2:8e:ea:b5:e1:d2:30:a8:
                    5b:4a:88:ac:d7:56:d8:41:d6:75:14:48:ec:55:74:
                    b9:18:fe:45:e7:99:4a:72:a3:20:e5:64:cc:38:ec:
                    8e:7b:ac:e8:4b:5c:b4:66:df:44:54:c5:6e:30:ff:
                    4c:2c:fa:a0:24:99:45:41:f8:9a:ca:97:7a:5f:0e:
                    22:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C9:F9:22:21:72:DF:1F:88:EE:35:6E:83:BC:3B:DA:35:D7:73:66
            X509v3 Authority Key Identifier:
                keyid:4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:50:1b:be:4e:e8:28:85:24:0d:8d:0c:d2:f4:51:82:9b:fe:
         e0:ef:a1:07:a1:60:e9:0b:b4:a0:54:6a:1a:46:1e:f1:23:59:
         9d:9b:87:03:b6:65:e9:17:ac:96:9c:cd:66:5d:17:32:f8:85:
         ef:89:fe:09:c3:90:19:6e:42:2a:0b:d8:54:4f:80:86:f0:ed:
         ae:75:e0:2d:04:37:5b:d3:04:24:2e:73:88:72:b6:5e:1e:e6:
         a0:61:59:c1:1e:88:b3:7f:ed:db:e5:84:89:b0:75:0d:72:c9:
         37:42:bb:01:e2:44:38:8c:c2:8b:ee:ee:b7:c4:10:f5:1a:6c:
         8a:c9:53:5e:6e:c7:52:a6:6a:f3:05:57:30:24:c4:69:d1:fd:
         95:4c:76:a6:a8:01:31:b0:b9:d0:08:66:66:1a:4f:70:63:88:
         a2:5f:01:1d:0b:22:71:65:78:14:2b:37:c4:77:cf:d5:60:9f:
         b8:bf:9e:ec:e3:12:45:75:8c:56:32:dc:6e:51:a4:60:1c:02:
         3b:ff:ca:c9:d6:0a:cc:98:f0:21:30:65:c4:77:c7:56:d1:06:
         27:8e:8e:61:72:a1:d8:3c:76:f1:2a:54:c9:6f:12:8e:ae:e8:
         f9:53:d1:b0:e0:c4:0f:24:22:50:9f:ff:a4:e2:3d:2c:5d:a7:
         71:1f:7b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:22:03 2025 by rpki-client