Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft
File:                     4YVsMIKrL8jdGzWaezmRNoU4tNA.mft (raw, json)
Hash identifier:          znR4h+NBZp0H1V3mDzXRKWdUNBqLEpLWrH1+1LcdG1I=
Subject key identifier:   BA:AD:5F:95:57:42:9D:B4:D6:47:2B:FB:14:7B:25:BC:61:F4:16:C4
Authority key identifier: E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0
Certificate issuer:       /CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0
Certificate serial:       0198D5F152B6508239D45E86B91B78D4279D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft
Manifest number:          0ADE
Signing time:             Sat 23 Aug 2025 08:00:18 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:18 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:18 +0000
Files and hashes:         1: 4YVsMIKrL8jdGzWaezmRNoU4tNA.crl (hash: GCz7C2ipq4GIVh78DvEnkIYMAtviQbTjyhVZTfniqlM=)
                          2: DubK0ajew1E_RURQjQNCAhLGbkc.roa (hash: o2iba58UUQFPb0v5v5MuvKEyUlVzhsgsqL1rMivQOXg=)
                          3: Kq9oy1uLDEVjPK7uo7CtOBtF3Fs.roa (hash: +hOcbW8T2Du+uljugS3IXJD+qzn/X9C29PD+zWkfcl4=)
                          4: hn2vtXI_FxI2fK5snrvER2liYkI.roa (hash: h1TFBwFQDb6c/MRMsjXSVpwRX890l+6Op+4syOnaFGY=)
                          5: hzE5LvcG1hl--6wBh1ojQ7tfIYE.roa (hash: 87OEa14cIeRPup2IlbeWtF8BT8tzrS9k5/ocOLGWxJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:52:b6:50:82:39:d4:5e:86:b9:1b:78:d4:27:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0
        Validity
            Not Before: Aug 23 08:00:18 2025 GMT
            Not After : Aug 24 08:00:18 2025 GMT
        Subject: CN=baad5f9557429db4d6472bfb147b25bc61f416c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1a:d9:66:e3:17:92:36:a2:20:b1:38:b6:fb:
                    01:b6:57:b4:54:e7:68:51:8b:47:99:1d:76:bc:5b:
                    83:c0:12:5e:4d:a0:fd:35:4b:be:9f:4d:e3:42:a8:
                    2e:63:ad:08:77:39:c8:9b:fe:66:00:64:23:33:d4:
                    01:dd:43:98:ad:df:a9:63:f0:9b:73:e5:c0:95:91:
                    0f:4e:b4:bd:a2:e5:f5:56:c6:eb:68:65:f4:26:fb:
                    7c:b8:68:bb:df:37:46:42:c2:23:1f:d7:8f:42:dd:
                    b8:73:9e:47:2b:63:78:8e:84:a1:d5:69:52:c4:d0:
                    b3:55:d1:1f:b9:bc:19:e4:cf:d4:44:54:28:a3:f9:
                    dd:b9:cb:21:19:fd:7e:28:45:6d:c7:93:01:eb:81:
                    44:20:8f:8d:5c:32:87:7c:fa:a8:8c:3f:56:77:75:
                    d4:53:c1:ca:8d:7b:11:ea:7a:6f:65:a4:93:ae:a4:
                    cf:ff:28:2f:53:f3:9d:2c:2b:9e:8d:2d:a7:a4:90:
                    aa:c7:de:d2:7f:c0:8e:bc:5d:9f:35:61:59:bd:3a:
                    ba:62:3b:1a:80:63:db:e4:ff:56:5a:7a:27:0c:54:
                    67:c1:15:22:3d:fa:fb:99:1a:64:a5:dd:46:20:73:
                    8b:cd:2a:c0:0e:04:e8:22:d2:4f:8a:c8:5e:7b:a0:
                    c2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AD:5F:95:57:42:9D:B4:D6:47:2B:FB:14:7B:25:BC:61:F4:16:C4
            X509v3 Authority Key Identifier:
                keyid:E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:69:43:b8:3e:89:9d:3b:cb:a7:c2:e0:c1:21:21:e7:4a:df:
         13:8b:2e:77:77:b4:c1:53:4d:30:1e:c5:bd:f0:8e:71:95:ed:
         4a:64:7c:ba:99:cf:25:e2:5d:63:cf:c2:ba:96:55:12:c0:af:
         84:d3:12:44:fa:89:fe:eb:46:1f:87:88:8a:46:a4:8d:4d:b6:
         6b:63:16:77:b0:02:39:4f:bb:fe:95:88:36:df:44:53:53:a3:
         53:95:46:1e:36:22:8c:b2:80:10:d3:3a:62:7d:99:bb:96:0e:
         cd:7b:ee:53:06:3b:ba:d6:cd:ac:c2:6f:73:a2:5a:b4:1f:75:
         0c:95:cb:ce:5f:81:e8:8a:1a:ce:23:d7:ea:61:f6:e8:a7:aa:
         a8:97:0b:96:07:74:4a:ca:73:62:9b:68:04:f6:b1:ba:90:6d:
         50:34:fa:a7:b1:19:ed:6a:6b:d9:e8:b3:43:dc:ce:bb:fd:02:
         64:50:af:84:de:b9:57:9e:a9:e0:35:70:a6:85:c8:31:66:45:
         e9:44:20:58:7d:59:47:7d:5d:a7:84:c3:23:ff:7c:6e:01:c3:
         82:d6:2a:e1:ea:c2:be:cd:4b:fb:1e:4b:c9:f5:1a:d2:4d:c1:
         36:8d:68:0f:ea:34:d9:f2:eb:ef:ff:ed:3b:18:76:46:82:e8:
         df:d3:f5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:51 2025 by rpki-client