Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
File:                     4tGVYU7uSi27UfWyHmnRbE4UQa8.mft (raw, json)
Hash identifier:          /hKetRNsbGUfuVUoQqeGyorZCjs6lGl8PSdYrSrzz8I=
Subject key identifier:   CF:13:9B:4C:80:5A:6B:DE:99:46:2F:6C:B8:E5:6A:03:83:31:26:2B
Authority key identifier: E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF
Certificate issuer:       /CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af
Certificate serial:       0197B890666035759597DE1833AC6773D8D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
Manifest number:          9B
Signing time:             Sat 28 Jun 2025 22:02:40 +0000
Manifest this update:     Sat 28 Jun 2025 22:02:40 +0000
Manifest next update:     Sun 29 Jun 2025 22:02:40 +0000
Files and hashes:         1: 4tGVYU7uSi27UfWyHmnRbE4UQa8.crl (hash: kcN23o0+RWBa7X15O3u3LCVW/4N77/lyn1MYwwIVKns=)
                          2: I6b16o_Ase2s-4OxbTzP2XU7AO8.roa (hash: 6HiWXRxkCGNhrpcrbbFpGCz17IhI/bbEhWJf+70NeCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:90:66:60:35:75:95:97:de:18:33:ac:67:73:d8:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af
        Validity
            Not Before: Jun 28 22:02:40 2025 GMT
            Not After : Jun 29 22:02:40 2025 GMT
        Subject: CN=cf139b4c805a6bde99462f6cb8e56a038331262b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:83:68:57:09:b1:13:ce:16:96:ab:c1:1f:27:
                    63:aa:49:7d:bd:bd:34:07:54:2e:d3:9b:66:17:36:
                    a3:66:4e:99:ea:04:c5:79:19:df:af:46:0c:42:95:
                    16:0a:c1:38:28:cf:f1:b2:d6:bc:86:72:85:67:91:
                    73:2d:02:bb:c9:d5:39:41:2d:94:db:1c:a7:1c:90:
                    d0:55:b7:2f:34:d5:e7:d9:2b:bb:68:77:ee:27:b5:
                    80:94:d1:8f:fc:2a:61:7c:fa:49:76:2b:0f:31:27:
                    4b:49:2d:f3:02:7a:e0:8a:8e:26:6a:3c:1e:0c:a4:
                    d1:0f:e3:a6:95:a4:00:e5:7c:e1:cb:6b:d2:2c:03:
                    ab:b2:e4:14:2e:4f:e2:29:e7:b0:0f:ea:bc:1f:2e:
                    04:9a:6a:8c:7a:d1:1d:d4:d7:39:30:65:a3:e6:71:
                    d4:ed:07:e4:e3:2b:2d:76:a4:87:b9:89:39:4d:7b:
                    cf:ad:34:31:3b:e7:62:2f:83:7e:98:78:78:b9:a6:
                    e9:6f:8b:06:4f:f7:52:af:de:b5:6f:8c:e9:11:b7:
                    20:0c:60:d5:1b:8b:5e:a3:5b:50:45:e6:e1:16:02:
                    ac:b8:b8:ec:9d:13:d8:fd:35:9d:78:3c:82:e3:99:
                    13:07:98:5a:40:15:73:0a:d9:6f:76:4e:89:83:d8:
                    dd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:13:9B:4C:80:5A:6B:DE:99:46:2F:6C:B8:E5:6A:03:83:31:26:2B
            X509v3 Authority Key Identifier:
                keyid:E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:f8:d3:95:0b:74:16:79:ac:80:dd:ed:83:3a:94:0e:6f:39:
         cb:19:53:3d:5b:bf:d8:a0:35:aa:4f:bd:dc:36:84:e6:ee:b6:
         83:75:59:4a:e0:b0:b5:d8:ca:3f:07:2f:86:d1:f2:cb:3a:b2:
         10:14:1a:6c:43:63:4a:9c:6f:d2:38:1c:01:59:fe:1d:fa:88:
         7c:11:74:f0:64:43:d3:e5:f5:8f:84:c6:fb:86:91:f3:57:29:
         dd:00:55:e5:1b:cb:46:1d:f6:3c:d4:d2:52:fd:d8:fe:cb:3f:
         d4:d4:31:f4:e1:dc:a2:1c:48:f9:70:ee:bf:c2:5b:41:58:d7:
         4f:55:a3:ad:af:5d:7d:fd:65:84:b2:83:99:a2:a0:2b:dc:e1:
         0b:33:2c:1c:b3:17:b5:0d:a0:57:41:2d:b7:21:d4:65:4f:af:
         8e:0a:14:94:e6:eb:36:b3:c5:3c:49:b3:9e:c9:b0:22:27:62:
         10:da:06:52:ce:50:4c:b5:b1:41:f4:1c:50:46:0f:4e:03:0c:
         69:b1:79:d2:15:ed:e2:ce:7d:77:b4:a0:c8:39:21:8d:7b:d1:
         7a:dc:53:2e:48:65:b5:7f:ff:aa:3d:4e:49:4d:dd:d4:64:bf:
         04:11:62:77:18:0e:43:97:f7:5d:4b:31:e3:e2:6f:14:5d:e2:
         3c:b9:3c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:06 2025 by rpki-client