Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft
File:                     4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft (raw, json)
Hash identifier:          yT41gR0LkzVBYr0yw+pxaKTtiRhO0eZVjxz1RcWnZX4=
Subject key identifier:   45:62:9E:68:A4:08:65:B5:AF:40:A1:A5:FC:3D:7B:B3:BA:F6:5D:D6
Authority key identifier: E1:D7:E9:FF:12:78:A1:4D:C2:6E:F3:3F:9F:F5:31:D8:6E:FF:5D:03
Certificate issuer:       /CN=e1d7e9ff1278a14dc26ef33f9ff531d86eff5d03
Certificate serial:       019A00DA332DCE34F697634E01341E4E352A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft
Manifest number:          141F
Signing time:             Mon 20 Oct 2025 09:01:31 +0000
Manifest this update:     Mon 20 Oct 2025 09:01:31 +0000
Manifest next update:     Tue 21 Oct 2025 09:01:31 +0000
Files and hashes:         1: 4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.crl (hash: 1nWWHKC2DxXxUZ1A7MJZPtJcdhqmadi2eNgChNIWSzA=)
                          2: yfb_qPLjpTR6E53AWD8zAEu3mD8.roa (hash: ewXjqJ1u8QGc/DB2xhFt7iKmK54tjMWGPVl8lml9NyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:da:33:2d:ce:34:f6:97:63:4e:01:34:1e:4e:35:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1d7e9ff1278a14dc26ef33f9ff531d86eff5d03
        Validity
            Not Before: Oct 20 09:01:31 2025 GMT
            Not After : Oct 21 09:01:31 2025 GMT
        Subject: CN=45629e68a40865b5af40a1a5fc3d7bb3baf65dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:74:04:15:31:ac:0d:03:2f:19:fa:64:be:d7:
                    ca:56:12:64:6b:22:c1:f2:b8:0f:a1:be:5f:76:7b:
                    45:fd:bb:f4:e9:19:78:9c:c1:b0:27:7c:6e:23:80:
                    7f:b7:d5:a8:37:a5:b9:e9:90:ff:c5:02:a6:bb:71:
                    66:6c:a1:43:17:ac:d6:f7:37:8f:71:75:52:93:67:
                    08:39:79:fe:43:4f:7c:8a:05:f6:86:00:06:ed:46:
                    c2:7f:46:bc:c6:da:b9:e0:4f:d1:e8:22:55:9d:9a:
                    5a:93:d0:9e:b9:18:ef:50:1c:a6:8c:cf:8c:28:00:
                    ca:81:66:79:0c:81:11:76:e7:7e:ff:f2:59:f3:1c:
                    eb:5f:b9:0a:9a:8d:da:a4:4d:ea:6a:e7:ce:0e:04:
                    45:6d:ed:b0:af:07:fb:8a:fc:4a:7a:1a:60:df:ba:
                    70:8b:d6:e2:7e:31:c6:a7:05:fc:c0:90:29:b1:92:
                    1b:e8:7b:49:83:f8:a0:ed:da:cc:16:8d:d9:b3:15:
                    a8:53:34:41:a9:a1:e5:da:7f:41:f4:00:ec:e0:64:
                    ae:fe:c6:d7:02:65:46:67:f3:3f:30:d6:6a:ab:99:
                    3c:7d:74:0f:0d:e6:5b:86:6b:cb:4c:45:68:5f:9f:
                    80:61:1b:e5:a5:a8:c2:1a:eb:28:b2:19:c4:5c:fb:
                    21:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:62:9E:68:A4:08:65:B5:AF:40:A1:A5:FC:3D:7B:B3:BA:F6:5D:D6
            X509v3 Authority Key Identifier:
                keyid:E1:D7:E9:FF:12:78:A1:4D:C2:6E:F3:3F:9F:F5:31:D8:6E:FF:5D:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:4b:84:55:6f:88:a6:14:06:6e:51:7b:ec:d8:b9:05:65:10:
         8f:65:60:c4:93:e4:e6:71:4e:c4:fb:8b:73:57:f8:c3:cb:26:
         f5:2d:fd:36:6d:c0:da:b8:a2:77:0f:1c:61:12:44:a2:16:b2:
         eb:2a:e9:29:4d:2c:1e:55:b6:43:11:cd:df:75:d7:2d:25:17:
         2a:b7:bd:3d:35:d5:a3:27:51:58:e7:6a:fe:66:1c:85:01:ae:
         6e:cc:e4:53:88:5a:db:be:46:24:71:9f:6b:9f:cb:6f:09:c5:
         c8:db:73:31:0a:08:86:3b:ae:11:2c:e3:28:70:2e:1f:39:9a:
         fa:1c:02:da:9f:02:ef:4e:e4:44:aa:af:60:89:e2:ce:0d:f7:
         69:e2:da:e0:f9:a2:8e:f2:14:15:a9:32:2c:20:48:50:29:21:
         16:64:51:b9:52:50:d8:a4:aa:eb:62:a8:9a:40:68:2d:6e:29:
         32:da:6c:ad:a9:3e:a8:4d:4d:88:e4:51:de:7b:be:e2:77:c2:
         bc:ae:ee:1d:9b:a7:c9:23:47:9d:07:9e:ea:89:5a:54:ee:6a:
         43:9f:09:5d:ee:d0:c2:58:7e:57:5c:fd:d6:a0:88:72:09:34:
         67:a7:54:5f:a0:2a:82:ff:34:55:97:97:27:f1:71:fa:d2:8a:
         bf:3d:b7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:43:56 2025 by rpki-client