Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
File:                     4Wjja6V37UfmkocpaRmR5OfyNdo.mft (raw, json)
Hash identifier:          7ExNownsurCPO2WFEA/0MPYewOsyRh16rQQlJwBKpRY=
Subject key identifier:   1B:CB:91:D1:F2:CA:4E:0D:34:BA:C0:E8:52:CC:ED:C9:BC:BC:CD:B8
Authority key identifier: E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA
Certificate issuer:       /CN=e168e36ba577ed47e6928729691991e4e7f235da
Certificate serial:       0198D472D364BB445797B915C1B360BAC138
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
Manifest number:          0CDF
Signing time:             Sat 23 Aug 2025 01:02:31 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:31 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:31 +0000
Files and hashes:         1: 4Wjja6V37UfmkocpaRmR5OfyNdo.crl (hash: 4th/UaQjLSa+HU9HRgakCvK+ZyxIlymRsa7P39VEk6Y=)
                          2: AUxf95vk-o1Gt_wrf6UPvy-h7OA.roa (hash: wvFv9nzKIVnXA7Zw/hu/kaD5HOZlQJgT9zV6+OcXJBw=)
                          3: HKDlTUsL1fmB-oiAZcWxWBPpDcU.roa (hash: PObhBDwRkZyevOSM5huA6knnfjTYj1bgluiflgFLp/c=)
                          4: vuTwV8s3dn69U4Rqa-5cKrrJqjA.roa (hash: rpsPpW15eqZG/XbbOl1/Yv+x/+71Dg60CplH4I4uv0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:d3:64:bb:44:57:97:b9:15:c1:b3:60:ba:c1:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e168e36ba577ed47e6928729691991e4e7f235da
        Validity
            Not Before: Aug 23 01:02:31 2025 GMT
            Not After : Aug 24 01:02:31 2025 GMT
        Subject: CN=1bcb91d1f2ca4e0d34bac0e852ccedc9bcbccdb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e7:69:13:e0:25:48:98:77:72:21:a8:f5:48:
                    e5:90:f1:64:37:f4:03:3c:05:12:c2:0a:ae:90:9d:
                    e3:02:03:54:b3:1a:24:36:8b:4c:1f:4c:19:52:44:
                    94:85:fd:e0:5d:65:ad:91:62:6d:96:3c:89:26:e0:
                    2b:af:a0:70:a0:d0:12:3d:3e:05:79:79:f8:4c:78:
                    21:f0:33:3f:b5:26:44:2b:ff:27:8f:16:d3:87:37:
                    c9:50:0c:b8:d3:1b:b2:cb:cc:fa:f5:39:2b:96:a5:
                    7b:9b:25:c0:ab:31:1b:ac:c0:b9:92:67:f1:36:0f:
                    c9:8c:66:7a:13:4d:83:66:2c:db:9d:ee:11:3b:1b:
                    d5:cc:2c:c2:d3:2c:26:74:94:eb:f7:bf:a9:a9:d2:
                    03:54:2c:36:c8:18:db:94:52:09:0d:79:d4:0c:bb:
                    b0:93:09:2d:c2:a9:2b:d5:92:60:7c:de:3e:c2:c3:
                    ec:98:9c:45:e0:80:fa:f9:1e:6b:13:83:68:6d:db:
                    da:58:39:d1:45:4f:be:02:e0:2c:17:8b:ec:78:17:
                    c9:49:7b:7b:96:d5:37:82:f1:ed:38:e5:ee:bf:81:
                    91:80:76:27:7d:bf:46:f2:83:95:5c:0a:a8:7c:88:
                    4a:45:16:c9:34:40:ed:0c:34:28:c6:56:61:04:0f:
                    7d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CB:91:D1:F2:CA:4E:0D:34:BA:C0:E8:52:CC:ED:C9:BC:BC:CD:B8
            X509v3 Authority Key Identifier:
                keyid:E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:c4:ca:95:d0:cb:8e:96:fe:78:81:db:62:70:ea:05:ec:ab:
         23:39:65:77:58:e8:5f:dc:f2:bc:63:a2:00:61:11:b4:81:48:
         68:a1:a3:c0:02:d7:7c:8f:31:21:6d:1a:93:2c:d8:97:01:a6:
         5b:a1:34:47:c3:25:5f:b5:d1:f0:96:7d:e8:95:c2:4c:91:55:
         b9:d2:c3:24:1e:cd:6d:c5:74:39:0f:1c:96:ef:9d:88:db:0d:
         eb:81:ad:0f:9e:6a:f0:c2:b0:7f:04:fc:24:04:80:67:71:b2:
         58:c4:ca:b5:67:da:d9:70:58:f8:11:b1:20:48:00:dd:f1:ff:
         39:15:e3:73:90:38:f5:16:f3:2c:9c:1e:b1:72:ed:3a:51:6f:
         93:81:bb:ae:97:bc:c1:c3:81:bb:62:e3:5c:ea:ad:25:00:79:
         d0:9e:2b:dd:58:2e:ae:e6:3c:19:2c:eb:99:fa:2e:8f:3d:0c:
         29:50:a6:f2:6d:70:f6:20:47:7c:83:b4:c5:45:5a:6e:2a:0b:
         47:b1:fb:af:25:bb:0e:15:4b:15:78:ee:b5:1b:66:4f:5e:fe:
         d5:13:00:df:03:ac:06:c0:d5:49:ab:9f:c8:83:c4:2d:61:25:
         e4:ab:58:6e:a5:f9:dc:7a:b4:65:45:3a:f5:e1:9d:4e:86:4d:
         43:45:d3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:23 2025 by rpki-client