Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft
File:                     4Rzmt92aasCzJLpa2HOwr0ajktQ.mft (raw, json)
Hash identifier:          +8fLZO0cxi/CnMtP3zDmXiyb6j9zUKj8LI/KOmIVVZM=
Subject key identifier:   EF:78:89:DE:75:A8:BE:DD:BD:94:4F:37:24:A5:ED:F4:AA:36:83:CC
Authority key identifier: E1:1C:E6:B7:DD:9A:6A:C0:B3:24:BA:5A:D8:73:B0:AF:46:A3:92:D4
Certificate issuer:       /CN=e11ce6b7dd9a6ac0b324ba5ad873b0af46a392d4
Certificate serial:       0199FBB35E3721FB0614E0D204535EE37403
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft
Manifest number:          F2
Signing time:             Sun 19 Oct 2025 09:01:00 +0000
Manifest this update:     Sun 19 Oct 2025 09:01:00 +0000
Manifest next update:     Mon 20 Oct 2025 09:01:00 +0000
Files and hashes:         1: 4Rzmt92aasCzJLpa2HOwr0ajktQ.crl (hash: bCd7+jdYotJk0j0GQMBUUBPaVfMxJvK3gMDixiucaK4=)
                          2: OcyVVi-jBM0G3opoob8aVpqeL7k.roa (hash: Lmj/ERqEQsOvuljDrquPNBuk7nAamhzs4Ctv+M+OeMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 09:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:b3:5e:37:21:fb:06:14:e0:d2:04:53:5e:e3:74:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e11ce6b7dd9a6ac0b324ba5ad873b0af46a392d4
        Validity
            Not Before: Oct 19 09:01:00 2025 GMT
            Not After : Oct 20 09:01:00 2025 GMT
        Subject: CN=ef7889de75a8beddbd944f3724a5edf4aa3683cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fb:3a:4e:38:bd:f1:ed:29:b3:a0:85:1c:b4:
                    71:ba:85:b8:d4:85:bf:a1:67:42:2a:49:3f:79:0a:
                    a0:a9:03:5a:40:ec:e3:32:60:b9:32:fe:27:33:41:
                    1e:e2:5c:a7:2d:a5:c4:7d:bd:d6:e6:9c:af:16:be:
                    55:98:fd:24:2e:aa:c0:a6:8e:ff:8b:58:0a:5c:30:
                    b3:a4:58:7e:8e:0a:da:de:ec:98:4f:42:fb:e7:ed:
                    a4:a1:48:88:ad:1a:6e:8b:80:13:70:86:47:d1:bc:
                    ed:13:ff:eb:c3:e2:a7:98:f3:b8:3e:a7:8e:25:af:
                    54:b4:f9:86:fe:de:4f:fc:27:f5:67:ba:40:00:15:
                    47:75:c3:cb:16:67:24:57:23:f7:4f:85:52:ce:a4:
                    6f:40:0e:a2:82:28:81:79:d5:01:51:9d:29:5e:fd:
                    34:73:08:e8:7f:b9:46:a3:71:9b:c4:2a:f4:47:79:
                    2d:72:97:4b:4c:f8:7b:ed:a6:63:cc:1e:87:59:a9:
                    c9:25:c6:79:d5:6e:47:d3:59:a2:19:86:e5:bb:3d:
                    06:03:b8:52:61:95:9e:ed:db:86:62:64:f5:b8:35:
                    ff:e6:4f:68:35:57:59:87:9e:b3:1c:25:95:98:fd:
                    02:10:c8:24:ff:42:b4:c7:8c:e0:6b:ee:25:dd:1c:
                    f8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:78:89:DE:75:A8:BE:DD:BD:94:4F:37:24:A5:ED:F4:AA:36:83:CC
            X509v3 Authority Key Identifier:
                keyid:E1:1C:E6:B7:DD:9A:6A:C0:B3:24:BA:5A:D8:73:B0:AF:46:A3:92:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:72:86:a0:32:ad:ab:09:ec:f3:0f:d7:f1:27:80:40:34:a9:
         86:54:7f:d6:18:eb:8b:c0:35:b3:0d:b6:ea:94:1d:72:62:be:
         66:be:65:3e:4b:a8:ce:07:95:df:00:97:f1:26:a9:73:a2:75:
         8a:03:53:52:0b:b8:dc:67:13:23:d6:d5:97:bc:56:e8:72:5b:
         59:bc:6a:64:23:3d:4f:33:a1:1b:da:b8:76:34:45:79:8d:0d:
         a5:5c:bd:e6:dc:f5:6a:a6:1d:20:bb:ed:be:06:df:bf:69:55:
         9c:93:83:81:c0:6f:42:b3:31:8f:79:46:86:f4:e5:68:12:03:
         78:57:e1:af:30:d1:96:79:d1:a6:61:bd:ec:c0:f5:8e:ff:69:
         8c:d4:87:db:5d:12:0e:a0:85:ec:f0:1b:0f:48:0a:16:91:4e:
         e1:4f:a6:40:d9:cc:e7:16:dd:f7:70:ba:c9:05:ea:4a:a8:54:
         13:07:b5:35:2f:64:99:40:d7:9d:c3:11:b6:76:db:42:e9:c2:
         74:13:59:0e:f6:45:a5:72:f5:91:ea:58:de:70:47:da:90:60:
         d2:f5:65:da:aa:18:32:39:0b:35:a7:83:59:ea:cf:97:3b:e9:
         e0:3e:a0:58:51:84:0c:21:e2:31:bd:d2:cd:16:f6:33:b9:f2:
         38:28:1c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:00 2025 by rpki-client