Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
File:                     4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft (raw, json)
Hash identifier:          S30ztDD256zEblyY6L7L2mUEDMa0S4C3zrNBrBKBZ3s=
Subject key identifier:   58:F5:2C:EB:7D:AC:0F:87:87:0B:FE:8B:31:38:F3:9E:3C:9D:A0:32
Authority key identifier: E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
Certificate issuer:       /CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Certificate serial:       0198D5158D3BC9DD92B928DF913858A5324D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
Manifest number:          09BF
Signing time:             Sat 23 Aug 2025 04:00:16 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:16 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:16 +0000
Files and hashes:         1: 26-qfn9ODUHJpEH89Qt0MRaUhuA.roa (hash: 2YdYGfBZn6lY/AbZT0o2XAew8LsHFvDqQ6x2hV85Y5I=)
                          2: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl (hash: vsiy/5E3+yb1W7as6lL0bZHqQwcVm5hSu4TT0pbnd7Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:8d:3b:c9:dd:92:b9:28:df:91:38:58:a5:32:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
        Validity
            Not Before: Aug 23 04:00:16 2025 GMT
            Not After : Aug 24 04:00:16 2025 GMT
        Subject: CN=58f52ceb7dac0f87870bfe8b3138f39e3c9da032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:02:4d:f5:75:83:dc:59:a2:ec:9a:c8:03:e3:
                    e4:43:29:6a:6a:7e:d9:25:cf:ad:bc:07:2e:1e:8a:
                    1e:e8:b1:9a:f4:6d:74:38:10:a9:f3:ee:0d:da:56:
                    26:66:19:c9:d8:61:d4:a5:5f:94:f8:17:df:ff:e2:
                    a2:c6:e1:6a:05:a1:4c:f5:0d:5d:59:6f:70:78:a9:
                    09:bc:ef:24:84:dc:4d:17:d8:d3:4f:9c:f6:70:f3:
                    a6:f4:bf:ac:58:2d:1c:f5:4b:24:2e:50:80:c3:00:
                    f4:50:48:6a:df:4a:25:15:c3:b8:c3:b4:fc:6b:6f:
                    7c:26:7b:96:d6:1d:c9:a0:2b:31:12:d9:99:1b:51:
                    30:2f:3a:f7:69:1f:1d:c1:50:10:8d:fa:2d:b5:f5:
                    a7:34:93:a5:3b:00:cd:b0:d2:87:b3:b5:3a:e9:b0:
                    66:3b:23:bb:09:02:21:97:71:ee:d7:3c:a4:40:ce:
                    cc:b7:3c:25:30:1d:ed:14:c6:dd:0e:bc:6e:70:3b:
                    d9:6f:8b:7b:4a:ab:ca:ea:7a:d4:6a:88:72:b6:c4:
                    a9:84:b0:b7:42:bc:07:92:40:d0:57:02:8d:50:9c:
                    fe:dc:c0:cc:34:bc:bb:8e:e4:14:59:07:46:70:42:
                    0a:61:32:74:bb:fa:91:f6:a2:bf:8e:03:84:88:c8:
                    ae:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F5:2C:EB:7D:AC:0F:87:87:0B:FE:8B:31:38:F3:9E:3C:9D:A0:32
            X509v3 Authority Key Identifier:
                keyid:E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:c9:1a:72:df:e5:ae:8e:38:f8:2b:60:f1:60:87:20:2d:03:
         12:1d:6a:a2:34:1e:23:d6:c9:22:35:b8:45:8d:94:f1:ff:b9:
         1a:6d:4e:6f:21:11:8f:0e:e5:ef:bc:53:94:94:35:64:2c:1b:
         00:b1:32:67:0c:0c:a0:e5:7e:09:8b:ef:56:fa:6f:e5:d7:51:
         0d:87:ab:e6:f8:32:49:0b:9e:de:64:24:42:9e:0e:eb:7d:ce:
         7a:d7:81:a0:60:36:a2:0b:8a:a5:56:72:cf:61:6e:98:f2:43:
         d3:33:02:c3:ab:0e:98:87:9a:1d:e8:c6:ce:ca:f2:11:2e:51:
         28:03:71:19:9d:5d:fa:f1:ac:17:82:f5:05:02:57:0a:e7:d7:
         05:de:f7:ff:ee:57:2f:56:32:a9:97:f0:88:e0:64:69:eb:ec:
         4d:0d:d9:ed:de:4b:63:3d:43:94:d7:22:76:83:ec:a9:4a:c9:
         35:80:7e:d8:57:08:88:e4:43:8a:10:f1:cd:83:bb:2f:45:ff:
         a8:3b:db:1a:50:73:e4:11:16:5e:03:85:13:f6:83:ff:13:9f:
         94:0f:12:04:da:b5:4f:0f:eb:e5:11:31:77:64:fc:80:32:6c:
         1e:fc:81:33:ea:89:d1:07:64:fd:26:ee:5b:a8:d0:87:f2:1a:
         c4:5b:8b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:47:47 2025 by rpki-client