Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft
File:                     4YVsMIKrL8jdGzWaezmRNoU4tNA.mft (raw, json)
Hash identifier:          904m9dIkAT6nY7F/ypT7U4gtPKAUE++k7vk3TQiyLrg=
Subject key identifier:   89:43:72:15:F6:D6:D0:C1:2A:FB:C9:B3:9B:DE:1D:E7:FF:D9:89:30
Authority key identifier: E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0
Certificate issuer:       /CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0
Certificate serial:       0199FB7CF99B2E815985B78AF3341202A587
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft
Manifest number:          0B76
Signing time:             Sun 19 Oct 2025 08:01:35 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:35 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:35 +0000
Files and hashes:         1: 4YVsMIKrL8jdGzWaezmRNoU4tNA.crl (hash: +QdiVlrOPGQ/T31sYWhAxr/cR/5b/fBubT7WCOkOs7M=)
                          2: DubK0ajew1E_RURQjQNCAhLGbkc.roa (hash: o2iba58UUQFPb0v5v5MuvKEyUlVzhsgsqL1rMivQOXg=)
                          3: Kq9oy1uLDEVjPK7uo7CtOBtF3Fs.roa (hash: +hOcbW8T2Du+uljugS3IXJD+qzn/X9C29PD+zWkfcl4=)
                          4: hn2vtXI_FxI2fK5snrvER2liYkI.roa (hash: h1TFBwFQDb6c/MRMsjXSVpwRX890l+6Op+4syOnaFGY=)
                          5: hzE5LvcG1hl--6wBh1ojQ7tfIYE.roa (hash: 87OEa14cIeRPup2IlbeWtF8BT8tzrS9k5/ocOLGWxJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 08:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:f9:9b:2e:81:59:85:b7:8a:f3:34:12:02:a5:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0
        Validity
            Not Before: Oct 19 08:01:35 2025 GMT
            Not After : Oct 20 08:01:35 2025 GMT
        Subject: CN=89437215f6d6d0c12afbc9b39bde1de7ffd98930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:02:7a:53:07:fb:47:c4:4f:be:38:6a:40:56:
                    0a:8c:fe:8d:25:5c:8f:9e:b0:45:28:9f:5b:f6:ad:
                    e0:06:bd:a7:35:39:91:6a:62:3c:14:92:f3:3e:21:
                    46:17:9e:3f:58:59:73:00:eb:85:27:09:c7:26:0d:
                    4a:c2:9a:3c:6a:76:f7:77:6f:83:51:3a:45:79:d2:
                    76:09:f1:ef:f8:5d:7c:02:ef:38:e8:6d:79:03:fc:
                    a8:cc:e1:6e:9b:37:77:52:03:bb:32:9e:0f:39:67:
                    09:12:59:bc:e1:82:c7:84:41:55:1c:35:43:f7:c4:
                    55:2d:58:5b:e1:35:bc:09:51:69:8e:87:22:8a:01:
                    d2:c5:a0:27:a3:4a:16:f7:18:c0:11:83:1a:25:74:
                    44:f1:a9:5c:9b:37:5f:82:21:e8:41:c3:da:d1:41:
                    c6:cb:88:c1:ab:2a:4e:ae:f8:2d:f7:cf:7c:5d:1a:
                    e7:be:1b:f6:c6:84:c1:bb:2e:da:ef:9d:4d:cf:f0:
                    c0:05:73:4c:51:f3:83:31:9e:09:37:cf:52:7c:c7:
                    dc:32:51:7f:98:62:8b:69:91:7f:a9:ad:23:8d:76:
                    9b:dc:dc:c0:a5:48:8d:ce:01:28:72:a1:28:d6:87:
                    4b:21:f1:84:8b:70:18:24:19:32:7b:2a:5d:63:e7:
                    83:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:43:72:15:F6:D6:D0:C1:2A:FB:C9:B3:9B:DE:1D:E7:FF:D9:89:30
            X509v3 Authority Key Identifier:
                keyid:E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:0e:13:1f:c6:60:eb:f2:ae:29:d9:09:f7:12:f6:47:71:da:
         f8:df:1a:f8:b4:79:fd:05:0d:5d:1f:ee:3c:97:5e:76:fe:a1:
         9c:dd:73:7a:c9:90:18:f9:bd:cb:90:a9:cc:87:e7:60:b5:c2:
         59:1b:14:7f:79:4d:8a:fa:27:9d:de:a8:66:3e:99:f2:70:9c:
         1a:98:0d:87:07:a8:df:c3:12:95:f2:6e:40:a7:09:9a:47:44:
         ec:0f:e1:ea:c7:00:e0:5e:62:24:64:5a:0a:d9:38:fc:49:76:
         4a:b3:4c:2d:5c:5f:a1:66:bc:5a:1b:62:58:cf:cf:75:bb:4f:
         4d:6b:47:aa:28:08:4b:38:da:d5:73:93:d9:e4:92:bb:e3:50:
         7a:ec:93:e6:eb:4c:4b:13:1c:96:5c:ba:49:cd:7f:0b:f2:fe:
         6b:df:57:ca:00:99:1c:06:c4:6e:69:63:df:31:2e:a4:1b:c2:
         77:ec:20:78:74:50:f8:ee:48:bc:b7:b7:c4:9c:44:57:81:de:
         c6:f1:98:5c:bb:d8:db:f8:c1:c9:95:2b:39:1d:55:95:8c:56:
         0e:49:1b:ec:76:23:84:a1:63:da:95:ad:ec:33:ca:9c:08:e3:
         91:0e:04:dc:9c:6d:1d:1e:8a:b9:ed:48:11:2f:c9:95:e3:6a:
         0e:41:2d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:54 2025 by rpki-client