Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
File:                     E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft (raw, json)
Hash identifier:          qPQ7Dc+WIK6nSCKTDOkB3zhD7g+JN4eROlr03nMUBAE=
Subject key identifier:   21:E1:FC:2D:05:A7:B5:CB:7F:15:22:3C:17:5E:0C:F5:1F:68:58:1C
Authority key identifier: 13:D5:9F:D6:83:E3:57:0D:63:89:55:30:CE:B9:F2:C8:4F:EF:E0:A3
Certificate issuer:       /CN=13d59fd683e3570d63895530ceb9f2c84fefe0a3
Certificate serial:       0198D4E09AF1BD120BC95F757CFAE8360DB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
Manifest number:          1650
Signing time:             Sat 23 Aug 2025 03:02:26 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:26 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:26 +0000
Files and hashes:         1: E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl (hash: i3nTjteIQwhfDv/THVLxrQObCHWWx25iYHSgcua6X48=)
                          2: dovIL-gTzJ_aoQv0YqdSPue-W8c.roa (hash: xvPlQMVt6KADuNdSrMZISm2hi7tJLKf4OAcoc3dyLHM=)
                          3: eG_gGxLivr2ewefCZXKvl9LEIQ4.roa (hash: 4AFKJ4zK1Zt8UICDrX7yj7rG6ous3rW3n9Muuzhoyfc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:9a:f1:bd:12:0b:c9:5f:75:7c:fa:e8:36:0d:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13d59fd683e3570d63895530ceb9f2c84fefe0a3
        Validity
            Not Before: Aug 23 03:02:26 2025 GMT
            Not After : Aug 24 03:02:26 2025 GMT
        Subject: CN=21e1fc2d05a7b5cb7f15223c175e0cf51f68581c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b1:8e:8b:5c:1d:10:9d:f3:ee:3a:3d:bb:9a:
                    1b:78:6d:fd:ae:f4:fa:cb:47:df:9c:2e:9c:e0:25:
                    06:2d:e0:94:70:16:d3:d5:de:0a:07:24:2b:e6:7d:
                    24:4b:0e:fe:57:4b:52:3a:2e:a2:d4:3e:19:6f:b5:
                    4e:5c:08:12:6b:16:ad:4d:81:bc:bd:c4:31:e0:b3:
                    44:a0:68:17:96:e8:db:e8:47:67:e2:b0:31:d5:3a:
                    b8:26:1d:5c:1e:d3:14:b9:1a:cd:4e:eb:c6:fc:2f:
                    ea:53:13:fb:f4:c3:fe:79:16:e9:84:50:fe:96:60:
                    7f:96:41:be:2b:59:16:7a:c3:7a:6e:85:63:af:c3:
                    d8:a3:92:27:b8:29:f9:68:d3:84:ba:f0:c7:5a:1b:
                    9d:ac:27:d1:4e:5e:ac:9f:0e:5c:50:08:73:a5:91:
                    9d:cc:e4:58:23:b8:63:4b:2f:c9:0a:64:3d:98:3d:
                    25:3a:33:28:61:a2:74:23:12:ed:af:61:93:f3:c3:
                    86:f7:66:d2:4c:03:a8:66:9a:2c:24:d3:5e:8f:c6:
                    44:c9:b4:83:21:e3:9c:7e:81:27:fe:5e:fa:09:41:
                    1e:bd:1f:e3:e0:db:90:e0:7f:8d:59:49:ad:27:70:
                    ac:3a:51:3d:f9:30:79:79:fb:0a:6c:8a:79:aa:06:
                    34:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E1:FC:2D:05:A7:B5:CB:7F:15:22:3C:17:5E:0C:F5:1F:68:58:1C
            X509v3 Authority Key Identifier:
                keyid:13:D5:9F:D6:83:E3:57:0D:63:89:55:30:CE:B9:F2:C8:4F:EF:E0:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:d0:76:a1:e5:8b:24:7a:ba:73:83:60:cb:4e:52:8f:8d:ec:
         e6:88:ef:2a:bf:df:e0:97:0b:4b:7c:59:d7:99:89:29:0d:04:
         bd:7d:42:66:16:bd:b1:5a:6f:78:86:6f:49:5f:e6:a1:37:d7:
         d9:20:76:4d:4a:59:ab:0a:62:f2:ee:70:a0:48:f3:fb:70:b4:
         91:51:c0:08:a1:47:69:34:42:45:80:22:df:80:4c:0e:a6:93:
         19:38:5d:f1:98:2c:96:46:68:15:70:ef:8d:3c:63:67:1f:12:
         76:0e:b3:f6:4d:3d:a0:3d:54:bf:37:7e:67:73:36:2d:79:d8:
         49:3d:0e:a4:d8:d2:56:5a:01:f3:f3:cb:f8:b0:0a:06:8f:9f:
         0c:3a:97:ee:3a:09:48:f0:4e:48:f5:1f:11:59:f6:3c:f8:45:
         ad:de:ac:91:ea:ec:fb:42:b4:f6:2e:2e:05:79:be:ee:7b:e8:
         f1:5c:65:7f:2a:fa:e7:dd:7d:0c:bd:91:37:15:9c:48:ad:e3:
         1f:9f:01:f2:6d:65:33:13:fe:0c:e2:1a:d0:7d:77:45:83:84:
         35:ea:a0:18:81:39:b8:3e:d0:24:ec:8e:55:e3:46:66:b7:ac:
         05:88:9a:f2:ce:93:0a:22:30:e8:c3:7c:a3:c0:80:0a:8c:f0:
         81:78:7a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:16 2025 by rpki-client