Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft
File:                     pLm08Dm8goYBw44OrUwZWrvf_mM.mft (raw, json)
Hash identifier:          QI1HI8jEAURUhJmMlrrk69SHWuT9Z9jZ0Piumc7PR/w=
Subject key identifier:   B0:04:6E:A0:D6:C3:35:03:C1:B4:B5:B4:F9:2D:CB:1D:3B:48:9A:76
Authority key identifier: A4:B9:B4:F0:39:BC:82:86:01:C3:8E:0E:AD:4C:19:5A:BB:DF:FE:63
Certificate issuer:       /CN=a4b9b4f039bc828601c38e0ead4c195abbdffe63
Certificate serial:       0198D54E2449BDA9462B130643E39ED422C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft
Manifest number:          B4
Signing time:             Sat 23 Aug 2025 05:02:04 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:04 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:04 +0000
Files and hashes:         1: bbObKOeu6H0tOgWKFFpKvP9AQ5Y.roa (hash: 46+pO6LmE1DlkXffkxBwf62bOZBzvEVVCFmRWPQeevU=)
                          2: pLm08Dm8goYBw44OrUwZWrvf_mM.crl (hash: eA3vpCQ2nQRu3JVkxAR9XH6KRj+g5Mdtdw17zViKt6k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:24:49:bd:a9:46:2b:13:06:43:e3:9e:d4:22:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4b9b4f039bc828601c38e0ead4c195abbdffe63
        Validity
            Not Before: Aug 23 05:02:04 2025 GMT
            Not After : Aug 24 05:02:04 2025 GMT
        Subject: CN=b0046ea0d6c33503c1b4b5b4f92dcb1d3b489a76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:98:4f:e0:5a:48:1c:cb:bf:69:7d:04:73:09:
                    17:9c:d1:51:dd:30:e8:be:12:f9:a1:88:14:62:16:
                    33:0c:d0:68:f4:0a:09:e6:cc:c0:d3:12:f7:0b:5d:
                    40:28:dc:02:72:bf:0b:ff:29:02:28:49:12:d8:c9:
                    e4:9e:f9:ea:61:2b:46:c1:c0:1b:eb:a8:65:fd:39:
                    ec:7a:62:ec:66:68:ab:db:f2:d9:54:9c:b3:71:8a:
                    aa:e9:e6:94:61:9b:a6:48:a8:ac:a4:c5:67:f7:de:
                    14:94:3d:d3:06:03:bf:1f:1e:3a:f7:f1:b3:dd:7f:
                    06:e8:bf:87:e1:96:11:0e:96:62:69:22:eb:51:57:
                    85:2c:b8:f3:a2:1a:af:72:39:ec:c0:ae:a4:90:c6:
                    36:8a:c2:d7:50:5a:a8:82:26:31:1b:5f:d0:2f:08:
                    d4:92:fb:30:07:5a:7a:92:43:5a:04:63:57:13:9b:
                    46:ff:35:5d:c0:23:05:d4:84:fb:34:64:4c:d6:8a:
                    db:9e:11:28:d7:4f:2f:65:83:a7:ba:20:9d:4e:49:
                    54:e7:3f:89:29:c9:dd:01:f0:b3:5f:f5:32:8b:98:
                    64:27:80:e4:39:9b:5f:27:d4:f0:5e:33:75:e2:00:
                    67:94:49:f6:5c:12:f0:b2:6a:e1:02:26:be:27:fa:
                    55:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:04:6E:A0:D6:C3:35:03:C1:B4:B5:B4:F9:2D:CB:1D:3B:48:9A:76
            X509v3 Authority Key Identifier:
                keyid:A4:B9:B4:F0:39:BC:82:86:01:C3:8E:0E:AD:4C:19:5A:BB:DF:FE:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:af:10:eb:45:47:17:f0:a9:17:5f:50:31:66:15:1d:ab:97:
         65:b1:b0:31:7e:fe:78:ec:17:82:65:bf:ac:68:1f:b4:8c:62:
         8a:08:9f:7f:5d:c3:b4:17:cb:c9:96:ad:40:83:9b:e8:bd:be:
         a6:68:01:18:6a:00:75:08:1e:2a:f3:b2:3d:96:f7:79:74:65:
         d9:c4:eb:d5:ec:3e:09:a6:0f:88:45:35:1e:4a:44:1c:42:92:
         b9:fd:2d:08:0b:5d:f8:54:76:d3:50:11:67:8a:2a:06:1b:fc:
         cf:a1:1a:a8:b8:d2:33:bc:e4:8b:ef:8a:8e:83:6c:9a:fe:03:
         ee:64:32:39:98:fb:cb:94:24:0e:7a:61:0d:8e:7f:3f:68:0c:
         4c:be:69:d5:42:64:56:f2:41:7b:90:26:21:54:41:5a:92:19:
         69:8c:cf:14:e5:81:eb:22:65:29:65:8a:e4:b4:53:1b:b7:ed:
         4a:b2:50:0b:d1:3e:31:86:b8:69:1b:a9:90:68:26:84:aa:e0:
         7b:0f:8a:0b:c6:d0:d4:8f:06:7c:ca:51:cf:79:66:5b:42:f0:
         6c:27:db:40:d6:51:51:f3:ee:9e:31:5f:25:a4:ac:31:4d:09:
         bf:81:b6:d4:47:92:fa:bc:e6:60:25:b7:86:9a:b4:db:7e:7a:
         d6:c2:5b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:23 2025 by rpki-client