Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
File:                     4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft (raw, json)
Hash identifier:          3OnJ2LnFF/aXIbTl2eqmRTY8i3xphUvPkfomuUKTe4k=
Subject key identifier:   EB:E9:BF:E7:9D:33:00:24:68:0C:F6:84:74:23:21:CF:C0:27:BA:E0
Authority key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4
Certificate issuer:       /CN=e10d5c29a3439703d89b5abf03a75d861771bef4
Certificate serial:       0199FBB36AA30535906B4DF6D63BBDD06025
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
Manifest number:          173B
Signing time:             Sun 19 Oct 2025 09:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 09:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 09:01:03 +0000
Files and hashes:         1: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl (hash: ZidVt1TK9AjxmHXMw5lE6UvFk5r1Jo/CZBBCMn+BiOA=)
                          2: ND1NYLu6zZ2FEy12Pf1eVnXZPq0.roa (hash: mrFfu7/Lbvz3mzhATbipDaZp3Flqri4ba8NHOQprWCQ=)
                          3: OrmnaIv7Ykw3uSFBs-BQky_7bs4.roa (hash: vkDAHcA+JuGp7WyKg9OyBQapexmqkZf8f/9s6IqTZIM=)
                          4: bLr6r57MqGHm8nK9w2IYUZH55ic.roa (hash: jUNvR24icg+/HoCVfLpAKbv7/xE1cDm9e9GWJS4plns=)
                          5: mslAiLHq2RhVoMBrlDZ7StvNRw0.roa (hash: 9NtVz0Q/+ObnJjRSZZ6ysBHLYm1GnmXiKVFqUmldHlw=)
                          6: s_WZrtHOlNd7wkkUhFGq2ejwDiQ.roa (hash: lRuZA83oB7sCJB/yZFB/ga5/o6PvU/KmR8+cgqPbV88=)
                          7: xxqAQj5ApVpCjQK_UbA4qZzprNM.roa (hash: kbcAcd5UMZoHVsf0Y1OkYvbV4qpft1douUqZabuqL8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:b3:6a:a3:05:35:90:6b:4d:f6:d6:3b:bd:d0:60:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e10d5c29a3439703d89b5abf03a75d861771bef4
        Validity
            Not Before: Oct 19 09:01:03 2025 GMT
            Not After : Oct 20 09:01:03 2025 GMT
        Subject: CN=ebe9bfe79d330024680cf684742321cfc027bae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:18:ad:7e:c7:8a:b5:59:fc:c0:a4:73:fc:16:
                    42:b2:7b:7e:72:41:81:fc:66:51:29:e9:09:fa:a0:
                    9b:ff:54:63:bf:5f:18:9d:28:e1:d6:f1:54:71:b7:
                    a6:1a:f8:06:39:41:df:e5:0e:a9:4f:f8:a2:1a:01:
                    54:c4:b3:a2:1d:cc:99:ab:5e:45:df:b0:7e:d3:d0:
                    61:77:ce:6a:9a:d9:66:82:aa:20:4d:1a:45:09:dc:
                    76:4f:c9:8b:ce:f6:55:ae:a2:ae:45:93:f7:1a:c4:
                    2d:d9:f9:f6:f5:31:8a:2e:39:89:60:54:b8:9a:aa:
                    fa:9a:75:2e:a7:b8:62:e3:f4:87:e7:dd:7a:7c:ee:
                    65:64:0f:7a:d8:8e:c3:39:11:10:5a:b8:f4:3e:b3:
                    16:42:f6:52:cc:26:af:fd:2f:ab:28:a2:18:4c:65:
                    af:75:9d:cb:0c:8a:95:32:40:ce:51:4d:da:b0:96:
                    26:98:db:6f:ba:70:1d:aa:94:a9:8e:f3:33:3f:b1:
                    1c:bf:71:28:92:f2:11:49:4e:4b:45:15:0c:a8:57:
                    ac:97:22:0a:c7:18:34:c9:ba:03:26:2d:1a:b4:97:
                    95:94:42:fd:5c:f6:d2:86:8f:db:db:e5:60:a0:ff:
                    c0:1d:48:90:44:90:26:4b:61:fa:45:9b:85:3e:ae:
                    3d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E9:BF:E7:9D:33:00:24:68:0C:F6:84:74:23:21:CF:C0:27:BA:E0
            X509v3 Authority Key Identifier:
                keyid:E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:79:2b:b2:3a:da:87:88:0d:bc:94:01:ab:45:e7:12:d1:82:
         ea:35:b7:f0:d8:fe:0d:0b:9f:72:05:5b:4f:b7:80:b0:e1:d1:
         ab:ad:79:d5:e5:33:c3:fe:61:e1:93:a8:76:06:a4:70:93:ca:
         a7:d6:c1:f8:08:f6:9b:67:46:c0:1f:c0:a9:e7:6f:2e:17:e1:
         50:83:b7:36:c5:5f:cd:2a:36:dc:7c:54:0d:6e:db:74:81:27:
         df:71:db:73:b5:4c:29:31:e7:93:24:6a:f4:c3:9d:3d:f1:be:
         ce:8b:a4:94:98:ff:4d:91:f7:4e:38:55:64:57:7b:de:80:e5:
         63:d8:0d:63:62:d7:89:04:93:80:d3:de:f0:53:7f:c5:9b:ac:
         7a:60:96:03:2f:68:09:a6:1e:cb:84:2e:ae:69:53:52:cb:e8:
         50:df:e9:81:a7:43:a1:91:60:74:16:3a:8a:a6:38:da:db:4c:
         d0:d2:e6:43:fa:99:e1:f2:66:84:34:be:2d:61:e5:2f:ca:0b:
         62:00:3b:3d:89:c8:e4:e3:7c:fc:01:c5:a3:ba:2a:9d:91:ae:
         1c:d4:73:75:f2:36:b7:e7:f5:57:c3:e1:0b:63:8a:79:91:14:
         ee:bc:e5:16:e8:e6:ce:1f:76:f6:47:42:c7:0e:83:9f:be:4f:
         0b:b4:40:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:25 2025 by rpki-client