Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
File:                     4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft (raw, json)
Hash identifier:          QRN/lPbmi5mFbufPQH9NFX5LjVdDxZ3INrYDtRC4jGo=
Subject key identifier:   6A:D8:42:6E:05:89:37:79:FF:C3:C9:2B:58:AC:77:31:AD:F1:50:79
Authority key identifier: E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
Certificate issuer:       /CN=e30f8894f308172ace92fbe6052eec23853eadad
Certificate serial:       0199FC8FADC5ABB85A456F4242B956CC6D4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
Manifest number:          07DE
Signing time:             Sun 19 Oct 2025 13:01:38 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:38 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:38 +0000
Files and hashes:         1: 4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl (hash: uYmaCfaQfXP2z7B3k3IeissMKFfwEphb4IVFGaCosxc=)
                          2: c0fBmj5scO5bGyjJUPNEWoiJiz8.roa (hash: ysAxrF+4k0JvJ+yBQRYBZ/441fP/ZB0AQyNUuEBiB+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:ad:c5:ab:b8:5a:45:6f:42:42:b9:56:cc:6d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e30f8894f308172ace92fbe6052eec23853eadad
        Validity
            Not Before: Oct 19 13:01:38 2025 GMT
            Not After : Oct 20 13:01:38 2025 GMT
        Subject: CN=6ad8426e05893779ffc3c92b58ac7731adf15079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4f:63:ac:c7:51:43:94:bf:e9:83:c0:e4:5b:
                    52:ba:b8:4c:6b:2c:e7:8b:ae:84:14:98:55:52:31:
                    9a:60:86:99:3b:b1:fc:08:0f:8c:b6:7e:a0:60:f5:
                    db:d4:64:b9:36:91:b6:f3:a4:18:00:de:ad:9f:c9:
                    76:7c:e1:8f:22:cb:c5:c7:8c:d2:5f:d9:20:06:6b:
                    b3:b2:95:a2:27:c9:82:3d:61:01:09:b6:63:09:73:
                    f4:d3:bf:92:49:eb:34:96:b4:b2:af:e7:d2:76:f5:
                    bd:76:31:f8:81:47:d3:69:ee:86:d4:0d:9e:d6:c9:
                    a4:58:1d:ca:df:9e:a8:29:cd:87:cc:52:0e:02:6a:
                    8b:39:95:2e:7b:3d:04:a1:1c:d9:84:28:c2:e1:98:
                    2e:f2:2e:4b:28:62:26:e3:55:34:65:fa:b4:da:a3:
                    97:bf:07:21:90:c5:55:97:60:37:12:69:fa:60:e8:
                    3d:b9:9d:ca:c1:fe:d3:10:64:3b:f2:41:2b:1c:d1:
                    10:5f:b8:cf:06:4d:59:be:6d:34:26:30:84:26:e9:
                    8b:58:a9:5b:a4:5d:fb:c8:ea:6b:6a:4a:97:56:71:
                    58:0b:ad:cd:60:7e:e4:f8:fb:3b:53:14:53:94:4e:
                    0e:6d:83:e9:3a:6f:99:46:09:4d:4d:df:36:10:46:
                    3e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D8:42:6E:05:89:37:79:FF:C3:C9:2B:58:AC:77:31:AD:F1:50:79
            X509v3 Authority Key Identifier:
                keyid:E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:1c:5f:57:77:d1:6e:f5:54:02:4e:ca:c0:70:65:76:fb:ef:
         2f:4a:73:b7:06:3a:da:86:04:88:8c:99:ef:46:c1:f8:50:1f:
         bb:3d:a6:52:5a:c3:45:0e:c4:7a:fc:ad:f0:42:2b:5e:95:e6:
         71:43:a8:d9:ab:85:54:82:08:64:29:b1:f5:b0:01:9c:b3:fa:
         35:f9:ca:a8:c9:93:32:9a:cd:15:5c:73:97:df:ec:74:da:fc:
         0a:4d:60:c2:9b:4d:85:4b:33:2c:a7:70:9a:85:6f:98:75:2b:
         16:f2:35:03:36:43:cf:8d:76:de:d9:19:70:08:01:9e:1b:18:
         2f:9f:d2:d0:00:5c:fd:f1:24:ea:4b:0b:82:82:2d:af:97:57:
         72:d0:82:25:79:37:fd:7e:70:a8:27:b8:fb:ee:d6:14:57:51:
         fd:cb:4b:ee:36:38:ed:86:42:e5:4d:53:36:3c:0a:29:ff:84:
         11:e7:70:c0:c8:8b:57:76:84:1d:72:21:c3:fe:71:83:08:1a:
         40:09:ee:22:71:d0:07:5b:ac:e7:4a:93:67:00:5d:38:a4:ed:
         44:17:72:c1:51:24:75:0b:d4:bb:ed:f6:54:c7:e1:71:51:0b:
         12:6c:59:f3:a6:f2:c6:5e:c5:fa:e8:74:88:20:7f:12:35:4e:
         ae:4a:4c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:17 2025 by rpki-client