Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
File:                     4g-H2rlrUPdu6kmxgeqU0mogUyc.mft (raw, json)
Hash identifier:          6kcLkgbxmO12GzQCgk/yUj5KtvZHjbeEzi9Xef/4sUs=
Subject key identifier:   9B:15:C2:D4:01:F5:30:28:31:D8:87:BF:73:3F:F2:D3:50:06:AA:F8
Authority key identifier: E2:0F:87:DA:B9:6B:50:F7:6E:EA:49:B1:81:EA:94:D2:6A:20:53:27
Certificate issuer:       /CN=e20f87dab96b50f76eea49b181ea94d26a205327
Certificate serial:       0199FD33F55508D75EC57F6D69257703CF1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 16:01:04 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:04 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:04 +0000
Files and hashes:         1: 4g-H2rlrUPdu6kmxgeqU0mogUyc.crl (hash: JV7cFq9ipMGyJdb0sePmmUAT1swNHDI181Pqg55EzrA=)
                          2: 8e6EuYvdvJ1TbEt2w_l--VFTSVE.roa (hash: lEOGzvYRz251FXAafldpzBiZsWV7u1gV99thpvyYuY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:33:f5:55:08:d7:5e:c5:7f:6d:69:25:77:03:cf:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e20f87dab96b50f76eea49b181ea94d26a205327
        Validity
            Not Before: Oct 19 16:01:04 2025 GMT
            Not After : Oct 20 16:01:04 2025 GMT
        Subject: CN=9b15c2d401f5302831d887bf733ff2d35006aaf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:97:7b:ea:61:c7:35:b4:b3:da:a7:5f:f0:f3:
                    52:1c:65:95:19:f4:b2:60:08:58:6b:cc:fe:73:a4:
                    1f:88:b1:09:6a:5b:74:a1:6d:6f:75:06:89:4a:e6:
                    5b:12:ee:d5:bd:50:b1:b8:6e:1b:4d:80:ec:4f:b3:
                    01:d7:12:0a:42:1d:4e:bf:15:79:f7:4e:2f:ae:41:
                    4a:96:84:22:66:a0:00:86:b8:cd:06:24:97:ab:88:
                    d9:98:2a:b5:25:f6:eb:24:fc:ef:d6:7c:46:4a:39:
                    68:26:ba:73:c1:21:83:e1:70:b5:20:e5:80:d4:29:
                    41:91:05:00:a7:ac:04:84:3d:fa:97:b4:5b:93:6e:
                    85:ba:d1:bd:c7:95:f5:a8:59:26:9f:ac:f5:ff:1a:
                    b6:e0:2a:48:a0:ae:64:15:9f:b0:b1:c3:ed:65:b0:
                    ca:f5:56:d6:cf:87:35:f9:81:ca:b8:d9:5e:dc:e6:
                    cf:a3:ab:0f:53:73:c9:86:bb:b0:80:7b:ff:a8:b2:
                    db:8c:50:15:d0:75:c7:5a:2f:44:b8:2f:cc:a7:b6:
                    9b:40:e8:b1:dd:87:c9:b5:9a:ec:ec:b2:4b:35:56:
                    c6:fa:00:24:f4:c0:a4:1c:bb:b7:3d:3a:ab:6e:c2:
                    28:22:62:4d:05:c6:e1:1f:0b:ed:f2:96:7b:ac:59:
                    06:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:15:C2:D4:01:F5:30:28:31:D8:87:BF:73:3F:F2:D3:50:06:AA:F8
            X509v3 Authority Key Identifier:
                keyid:E2:0F:87:DA:B9:6B:50:F7:6E:EA:49:B1:81:EA:94:D2:6A:20:53:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:fd:1a:1c:59:b6:30:3f:c9:e6:de:30:c6:19:4d:f3:d8:36:
         29:17:d7:e5:0e:d8:6c:e4:04:f8:75:9c:1b:4c:5d:57:73:de:
         85:f4:84:0d:80:0a:eb:96:5b:dc:f7:b9:60:8b:b3:f5:c1:0c:
         14:c9:ea:76:0a:80:9e:cf:36:c3:cd:be:3b:c6:1a:f6:ed:d4:
         b3:27:e6:72:a6:40:7d:50:e9:81:1f:30:ea:c0:5d:5c:c1:70:
         be:28:db:7f:07:c7:4e:f8:36:31:95:be:da:78:2c:b6:ae:31:
         e2:5b:1c:6f:e5:41:8f:4e:23:34:59:08:48:3f:51:b4:8d:c5:
         b5:96:db:f5:ae:f5:83:70:ce:ba:c4:9f:a5:87:0c:62:5f:3d:
         9e:d8:4c:c7:74:f9:69:4c:b5:69:bb:6b:d8:2f:6d:85:94:a6:
         04:69:7f:bc:74:fc:2c:b7:56:11:5e:7d:9e:7e:77:70:0f:ee:
         29:e3:4a:b0:65:bb:a5:3c:b8:6a:c1:ce:75:84:77:bb:36:06:
         81:33:14:89:20:47:6a:a5:b6:c3:d0:70:37:ac:b3:76:3f:ad:
         3f:db:e4:80:eb:aa:11:57:63:22:af:03:52:36:6b:90:ec:31:
         68:ee:1c:d4:9d:dd:16:a2:f1:6a:c1:41:cb:ef:71:06:32:d5:
         3d:18:7a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:31 2025 by rpki-client