Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
File:                     S4xZ6sloSDTLl8wq2FjVx03PbO0.mft (raw, json)
Hash identifier:          /ZKT4TCdLGGslCOxd6S+zgpRng0X/OPr57FHMd/RTBE=
Subject key identifier:   F1:13:0F:CC:F0:37:F9:44:10:22:5F:2C:C2:E2:63:D6:B2:C9:6D:C3
Authority key identifier: 4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED
Certificate issuer:       /CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced
Certificate serial:       0199FD33E9B39F7D2C5D3C1CC6901AFE1E88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
Manifest number:          0549
Signing time:             Sun 19 Oct 2025 16:01:01 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:01 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:01 +0000
Files and hashes:         1: RX0vF7s1v3ZmCOZA2PNfN34Nc0Q.roa (hash: DL5GkVVXEPj8zi75flOVBOwBTEyMxXVt8DN9ATKiCDI=)
                          2: S4xZ6sloSDTLl8wq2FjVx03PbO0.crl (hash: s+qwThk0vIZqX3EiMT31HfjsD7rpYrmhno0fm/lwpbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:33:e9:b3:9f:7d:2c:5d:3c:1c:c6:90:1a:fe:1e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced
        Validity
            Not Before: Oct 19 16:01:01 2025 GMT
            Not After : Oct 20 16:01:01 2025 GMT
        Subject: CN=f1130fccf037f94410225f2cc2e263d6b2c96dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f7:e3:8c:ca:c7:da:9b:17:30:86:15:35:37:
                    b3:d5:37:4d:f9:08:9f:fa:36:a4:d7:be:95:b5:de:
                    d5:52:0d:e4:9c:60:23:fa:48:33:52:9a:22:62:2c:
                    e2:77:e6:9e:61:a9:ac:28:e7:94:78:1b:ca:8e:57:
                    a2:f5:7c:5b:8c:48:e4:fe:21:9c:9f:08:14:e1:df:
                    3b:1c:19:42:a0:1b:b0:be:53:3f:a6:3f:f2:e7:80:
                    4e:6a:91:d1:45:ec:ff:01:d8:63:19:a4:ef:eb:10:
                    45:83:f7:6d:cd:c7:b5:2a:bd:6e:51:00:56:e2:e6:
                    61:36:ec:9d:56:ea:f6:c9:0d:b1:3a:ca:96:2c:8b:
                    8d:0a:1f:7d:82:6c:67:ac:a7:f0:31:0e:f7:f0:d5:
                    e9:4f:9a:27:b0:df:95:2d:62:3a:5d:a9:5a:e5:bf:
                    6c:15:83:ae:cc:41:77:ec:c9:c3:a3:3d:ba:a8:e4:
                    5f:63:3a:38:74:1a:cd:a4:71:88:15:9f:ad:91:26:
                    43:fb:26:4f:51:27:61:9d:d2:23:98:b0:0a:40:d8:
                    d7:07:a3:46:3f:50:eb:56:d5:66:23:64:68:49:16:
                    af:36:45:b1:a2:bb:3f:90:a5:c4:71:47:6e:99:32:
                    1d:4d:d7:fe:da:2e:c8:df:96:92:87:0a:b8:93:17:
                    95:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:13:0F:CC:F0:37:F9:44:10:22:5F:2C:C2:E2:63:D6:B2:C9:6D:C3
            X509v3 Authority Key Identifier:
                keyid:4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:ee:8e:98:e5:d7:b7:5a:6e:e6:6f:c6:fc:14:94:6d:e5:3b:
         84:59:ec:07:38:82:6f:b1:ae:a0:54:0b:70:40:40:3f:64:8c:
         a7:ac:92:45:0b:f5:91:b3:c8:88:97:48:2f:84:0f:93:e2:1c:
         ec:d6:d7:36:e0:30:a4:4c:4c:b7:7f:c4:2d:12:ee:c9:f6:2c:
         dd:f7:89:9f:84:24:c8:47:e1:32:81:91:da:10:36:62:5e:c1:
         22:50:9d:64:36:2b:98:e4:ad:84:9e:d8:8a:89:50:0c:46:ac:
         0c:9a:25:ee:7e:50:63:b7:43:f0:ce:85:1e:f4:da:00:e6:be:
         ab:9c:3f:e1:de:27:f6:16:2f:ee:b6:d7:c9:4a:a6:f7:7e:c6:
         54:a2:be:ce:c7:b7:25:be:a9:e5:7d:07:76:fb:87:d5:46:91:
         51:2e:4b:fe:51:46:cd:95:e7:d6:ad:87:ff:e3:7c:46:2f:75:
         5f:8d:94:9d:28:41:c2:7b:39:b6:b4:87:45:a9:c5:4e:00:a8:
         74:61:61:21:58:cc:e6:68:83:1d:6f:69:4d:72:a8:4f:36:15:
         b9:c0:7c:77:26:67:c8:61:00:0a:d3:00:02:0a:eb:73:5e:16:
         4f:f8:fc:ba:ad:58:65:7c:80:db:6b:f3:26:02:c0:5c:2d:24:
         1e:5c:32:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:42 2025 by rpki-client