Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.mft
File:                     IHeZAnMp8iaCdkVzryEV2pWp9r8.mft (raw, json)
Hash identifier:          +Jy+zBbRcq6zjTUYtH8doDao4rwx895RRQPTe5em5QQ=
Subject key identifier:   94:9C:AA:84:50:25:EE:60:4C:5A:4D:86:55:1C:89:5C:34:62:AE:A4
Authority key identifier: 20:77:99:02:73:29:F2:26:82:76:45:73:AF:21:15:DA:95:A9:F6:BF
Certificate issuer:       /CN=207799027329f22682764573af2115da95a9f6bf
Certificate serial:       0198D660F1DF3463BD6B7235B8D330566E25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IHeZAnMp8iaCdkVzryEV2pWp9r8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.mft
Manifest number:          0F49
Signing time:             Sat 23 Aug 2025 10:02:14 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:14 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:14 +0000
Files and hashes:         1: 8EaewYTyFly5jEaj4gZEqMNcVMk.roa (hash: gqxj+841N8d9uy4L59oEcZudU4ge+IzVBr1jzF4wgjc=)
                          2: IHeZAnMp8iaCdkVzryEV2pWp9r8.crl (hash: gOqe4ZCkieRof0K24szbtgXY29c5a5I4DCw0/UfkdRs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IHeZAnMp8iaCdkVzryEV2pWp9r8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:f1:df:34:63:bd:6b:72:35:b8:d3:30:56:6e:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=207799027329f22682764573af2115da95a9f6bf
        Validity
            Not Before: Aug 23 10:02:14 2025 GMT
            Not After : Aug 24 10:02:14 2025 GMT
        Subject: CN=949caa845025ee604c5a4d86551c895c3462aea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8f:76:e7:30:e9:94:1f:e1:bf:cf:f6:08:e9:
                    ab:d8:95:5f:1c:c9:3d:75:ad:08:5a:36:b7:33:3a:
                    19:b9:37:f6:86:d5:f6:6c:78:b4:ac:05:33:2e:09:
                    78:50:2e:6a:36:c3:f7:da:d4:a5:a3:35:88:ff:e8:
                    5b:51:f9:83:42:38:5a:40:6d:ac:76:f5:94:e6:b8:
                    71:52:fd:fa:91:7d:d1:97:4b:05:56:71:61:c3:76:
                    8f:b4:d8:38:99:b7:b2:f6:93:86:14:00:51:0f:c4:
                    89:f6:ed:fa:4e:b4:c2:94:34:41:7b:0f:f3:07:73:
                    e3:10:02:2c:40:20:fd:d8:f4:2e:86:2e:86:bc:62:
                    23:1f:8c:b4:b8:42:a6:b8:df:4d:c4:c3:16:32:67:
                    9e:52:16:41:c2:f6:d5:b7:31:d2:73:ff:0a:ce:a2:
                    c5:c9:1f:3a:52:ce:23:f9:c2:34:84:f0:13:8a:9d:
                    a7:2f:a7:4b:57:e4:fd:7f:66:cb:d4:35:36:a8:93:
                    86:6c:10:38:26:76:5d:3a:79:02:97:c1:e2:50:b5:
                    ef:2b:d2:4e:60:3e:e4:bb:db:2e:33:c3:ad:65:79:
                    36:b2:55:bc:d7:78:a7:81:45:85:a9:a2:f9:64:de:
                    46:68:e6:3a:76:6d:9e:7c:56:d8:d9:ff:7b:29:e0:
                    dc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:9C:AA:84:50:25:EE:60:4C:5A:4D:86:55:1C:89:5C:34:62:AE:A4
            X509v3 Authority Key Identifier:
                keyid:20:77:99:02:73:29:F2:26:82:76:45:73:AF:21:15:DA:95:A9:F6:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHeZAnMp8iaCdkVzryEV2pWp9r8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:41:fb:f8:12:5b:5b:c2:9d:9b:86:c4:05:48:7d:07:bc:64:
         93:fd:29:5d:bc:42:da:80:00:82:5e:fd:69:e7:4a:54:25:3e:
         11:20:af:7a:f2:a7:84:d7:8d:e0:22:05:72:c2:9e:f6:18:06:
         06:b8:8b:7e:4f:60:9a:bf:0a:fd:82:a4:1a:1f:ae:ac:2c:8e:
         89:8f:ee:f7:77:e1:05:e9:8f:5c:b3:02:6a:c2:0d:35:6d:62:
         62:e2:68:fa:ca:69:c7:65:ff:a0:73:dc:59:a5:49:c9:7a:07:
         0e:c6:9d:c4:bc:42:9c:f2:c7:54:89:42:9b:b8:8e:d6:30:ba:
         46:bc:47:8d:9c:48:ea:46:77:4c:0b:0e:b3:57:76:55:fa:6d:
         f0:bc:31:e9:e6:f3:cb:e6:ca:52:37:59:67:2f:c1:00:41:84:
         90:ed:b6:0b:04:d2:64:e6:9b:63:48:a5:c3:4d:72:80:62:4b:
         32:1e:97:8b:7e:91:05:57:c4:f2:3a:f1:ce:fd:f9:c4:0b:2e:
         c9:45:10:96:14:55:ee:66:98:a3:4e:d4:8d:fe:ae:ff:c9:58:
         40:a8:02:59:62:1a:90:c6:df:50:2b:99:a5:2b:c5:a8:00:d7:
         8e:05:70:30:e1:1a:cc:de:35:77:29:a5:58:d8:0b:fc:18:46:
         58:7b:65:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:00:25 2025 by rpki-client