Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
File:                     4tGVYU7uSi27UfWyHmnRbE4UQa8.mft (raw, json)
Hash identifier:          s/ynGdbz04pm/lDiIAbyDcT/hK0xjSCE8JmtHXpDsRc=
Subject key identifier:   52:23:C4:3D:F9:B6:FC:06:43:66:B6:75:31:E5:E6:B8:3F:17:01:2B
Authority key identifier: E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF
Certificate issuer:       /CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af
Certificate serial:       0198D472A23FA29F1CDF9174F1891E0250A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
Manifest number:          012E
Signing time:             Sat 23 Aug 2025 01:02:19 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:19 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:19 +0000
Files and hashes:         1: 4tGVYU7uSi27UfWyHmnRbE4UQa8.crl (hash: s37FW7EjsFYPoM3fgt3folFF9Zfjv1EtE3VoR+h+9H0=)
                          2: I6b16o_Ase2s-4OxbTzP2XU7AO8.roa (hash: 6HiWXRxkCGNhrpcrbbFpGCz17IhI/bbEhWJf+70NeCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:a2:3f:a2:9f:1c:df:91:74:f1:89:1e:02:50:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af
        Validity
            Not Before: Aug 23 01:02:19 2025 GMT
            Not After : Aug 24 01:02:19 2025 GMT
        Subject: CN=5223c43df9b6fc064366b67531e5e6b83f17012b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bf:44:ae:7c:80:69:3c:7b:2c:fa:e7:94:2d:
                    bb:51:2c:db:f0:2d:90:2b:c0:15:92:fb:0d:e4:a7:
                    e1:b5:52:75:f9:3d:8c:bb:23:89:64:f8:fd:bd:86:
                    e6:b3:eb:da:12:95:72:3b:8d:a0:71:e9:80:2c:ff:
                    be:91:41:bf:57:8d:4e:ac:07:ab:61:c1:a0:1c:57:
                    0a:bd:69:6e:da:7b:f1:a2:fd:d3:03:cc:e7:5a:e9:
                    3a:57:ab:66:2d:07:97:f9:14:a1:88:46:a8:93:9c:
                    f3:85:8d:3e:b4:ce:3e:d0:db:d5:fe:f0:0e:ab:e9:
                    11:f0:49:93:01:67:1a:e8:38:3c:3a:14:8f:b0:49:
                    7b:2a:b0:71:4f:51:a0:21:1c:32:31:b3:a8:14:8c:
                    da:41:ce:35:22:a2:42:b9:24:a9:8c:c5:c1:ef:f9:
                    99:cd:8c:77:59:58:62:cf:6a:e3:76:40:84:1e:4c:
                    11:5e:fe:14:42:49:5c:27:e0:f9:8d:f4:36:43:f4:
                    6c:d8:b6:15:99:db:a0:87:55:53:c4:0b:c3:cf:a0:
                    0f:ac:c4:f5:a4:d0:03:a7:29:3e:e9:17:7a:73:3f:
                    6c:f9:7b:1b:4a:4e:8f:7a:8f:ca:18:fb:85:39:06:
                    9d:06:16:70:06:c2:ee:70:ee:b0:5d:d7:e3:e1:97:
                    fd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:23:C4:3D:F9:B6:FC:06:43:66:B6:75:31:E5:E6:B8:3F:17:01:2B
            X509v3 Authority Key Identifier:
                keyid:E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:f9:be:d3:6d:e7:97:ac:95:e2:8b:5e:0c:22:25:7c:f5:4c:
         02:ee:c5:b3:f5:1c:4d:a7:39:ba:b0:c4:5b:c7:33:3c:de:a7:
         f2:17:60:d3:bc:8c:5d:e2:8c:96:b4:13:71:25:5d:72:18:06:
         e8:bb:6c:f6:60:90:be:9a:85:2f:89:83:51:ee:bf:3a:41:da:
         82:e2:1c:15:a0:70:a4:c8:3e:b5:cc:3d:d7:16:f3:a3:8c:a0:
         ee:4c:e8:a4:72:84:a3:bb:92:8a:85:bb:ec:de:22:08:a0:11:
         95:a3:d0:5b:b2:d4:fb:70:0c:84:b7:36:77:e9:b1:de:fc:1a:
         c0:cc:78:8c:37:92:79:16:42:a2:3d:28:84:96:6f:ff:03:8a:
         4f:08:80:73:4a:39:d2:da:54:ed:37:f9:cc:47:ad:b4:79:f1:
         67:f9:d3:12:c5:44:82:3e:f6:c9:6a:df:fc:bf:99:99:e6:fa:
         bd:df:ee:c8:30:b3:18:4b:d4:9e:d8:ba:f0:70:be:2c:0b:33:
         09:b6:f8:29:fb:29:eb:04:30:76:4c:d5:43:2e:62:fa:7f:1e:
         a7:f0:4f:a9:52:74:26:b9:b2:fa:c8:a2:e3:8c:13:c3:d6:33:
         e5:8f:fd:80:66:1e:fd:67:d4:50:88:45:fe:ed:02:ef:c8:85:
         38:6d:52:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:41 2025 by rpki-client