Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
File:                     4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft (raw, json)
Hash identifier:          Ewhz1ohSy8rNK6LArUmpyuENs1w1qSQVDlA6UX8VNuM=
Subject key identifier:   AB:81:3C:21:E1:CA:D3:CB:C1:F9:68:CF:E4:0D:B7:CF:40:71:DC:5A
Authority key identifier: E3:E4:6E:2C:40:16:A8:D7:39:2C:85:74:13:4F:D4:79:3B:94:15:A4
Certificate issuer:       /CN=e3e46e2c4016a8d7392c8574134fd4793b9415a4
Certificate serial:       0199FBEAABFE37CED073CB3323480C322BA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
Manifest number:          1250
Signing time:             Sun 19 Oct 2025 10:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:24 +0000
Files and hashes:         1: 4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl (hash: 4OVq7zSdkb7xjMy2fFMlprvGJFgOS/zpEwvbaRAcg5w=)
                          2: rxnNIrhG3QldlOPtvjeA2wvjFbs.roa (hash: 2BblVg4dCI71TgTK0hUX2laI8AdtzWYFSV42O2qiwl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:ab:fe:37:ce:d0:73:cb:33:23:48:0c:32:2b:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3e46e2c4016a8d7392c8574134fd4793b9415a4
        Validity
            Not Before: Oct 19 10:01:24 2025 GMT
            Not After : Oct 20 10:01:24 2025 GMT
        Subject: CN=ab813c21e1cad3cbc1f968cfe40db7cf4071dc5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:47:2b:9c:72:85:b5:9c:7b:0e:27:fb:be:df:
                    16:09:24:72:35:40:bb:04:fd:74:27:b7:8d:ae:b3:
                    c0:4d:4e:e9:78:de:b5:8a:4d:e6:2e:ad:a7:70:1f:
                    26:94:41:74:fd:24:e6:fb:30:e8:a0:e7:13:4d:59:
                    4c:7b:9d:ca:df:db:4c:6b:05:1d:bf:32:77:6e:a8:
                    da:48:72:df:58:71:b8:c6:1e:4c:a7:d7:3a:36:5d:
                    52:59:31:1d:45:b3:ea:8c:36:02:aa:cf:dd:ff:7e:
                    79:5f:97:dd:27:db:93:ba:d4:20:bc:56:d3:f4:d5:
                    67:50:a6:75:d7:4a:0a:05:ec:da:ce:e4:fe:1f:f6:
                    8b:83:ee:0e:4d:0a:e0:72:48:8f:0f:46:85:b5:06:
                    a7:40:53:88:0f:32:d1:e7:e4:26:33:4e:7c:7f:0c:
                    b7:2c:08:47:e8:8d:3e:9a:05:ca:6c:40:de:5f:dc:
                    cc:95:d7:1c:57:9b:36:ac:a7:90:88:dd:e1:8d:de:
                    2b:69:0b:05:28:3a:ac:16:2f:89:66:97:fb:d8:38:
                    1d:41:d8:5f:46:da:67:c7:ca:0c:e4:2b:54:79:f2:
                    af:82:86:fa:50:cc:93:f6:d0:44:8f:bc:2d:01:85:
                    a4:bb:2b:36:cb:3f:22:f2:17:8a:13:21:3e:05:d9:
                    b3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:81:3C:21:E1:CA:D3:CB:C1:F9:68:CF:E4:0D:B7:CF:40:71:DC:5A
            X509v3 Authority Key Identifier:
                keyid:E3:E4:6E:2C:40:16:A8:D7:39:2C:85:74:13:4F:D4:79:3B:94:15:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:c6:fe:6b:71:95:fd:48:11:c7:51:60:83:a5:32:f4:07:05:
         10:c7:a3:b4:30:10:2c:61:ef:ee:99:b3:03:b6:44:5a:3a:81:
         6c:fa:d8:2d:dc:00:86:64:65:f6:0f:f0:ea:27:3a:65:d0:02:
         e0:fd:77:ed:47:c1:43:35:87:b3:f6:21:c6:9a:27:1b:8e:b0:
         e7:23:04:1d:d3:b6:f3:cb:64:4f:0a:72:96:c0:14:fc:35:02:
         16:bf:1d:90:1d:7b:ef:fa:02:1f:e6:ee:b2:1b:4b:00:87:0e:
         9c:29:c7:ff:45:37:8f:d9:84:10:d0:53:32:fa:81:d0:9c:d9:
         48:8a:f4:cf:c4:61:e8:52:23:7f:72:4f:b8:6c:d5:29:71:6d:
         dc:e6:c2:37:5a:a7:e5:80:58:fb:33:53:e7:81:4b:7e:88:63:
         73:e3:ce:a3:07:a0:fc:a4:3f:d4:eb:1e:80:b7:5c:fc:a9:4b:
         40:5a:74:e9:e9:ec:5f:9c:42:ef:9d:c6:d6:56:e8:c1:bf:7a:
         c7:32:80:eb:e0:c2:ab:67:ed:db:6a:ca:dd:8a:da:8a:e7:40:
         f1:53:00:d7:ec:f9:f5:15:3d:9b:15:bb:1c:5d:4f:80:f3:8d:
         3f:b8:90:ac:35:1c:18:62:28:ec:bb:a1:0e:17:23:97:f0:e4:
         01:7b:29:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:40 2025 by rpki-client