Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
File:                     4jRLpjQJYdpe60riOemgYmd5Pi4.mft (raw, json)
Hash identifier:          4QTt7E6OICrTqSsteakPUKHvkgaT67mlcx7aV8Ddl7g=
Subject key identifier:   47:B8:EC:F0:C5:D2:D7:89:90:25:18:F7:EE:AE:7D:97:DB:D4:B2:ED
Authority key identifier: E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E
Certificate issuer:       /CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
Certificate serial:       019A0147E77DE49AF494525A19461B7C40C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
Manifest number:          0D38
Signing time:             Mon 20 Oct 2025 11:01:20 +0000
Manifest this update:     Mon 20 Oct 2025 11:01:20 +0000
Manifest next update:     Tue 21 Oct 2025 11:01:20 +0000
Files and hashes:         1: 4jRLpjQJYdpe60riOemgYmd5Pi4.crl (hash: Gzt/gM41x5WiB5KwMXsRHjykD6yvV34YpoXM/N/jtsY=)
                          2: WpIYL0DvGR69MNqQHSOeKTTXrTw.roa (hash: SM3OGEHCPKRu3sADiQcW/ukfL9VQE5Fwf5KPU4G5dDQ=)
                          3: kxBC-y0IllTJVS30L0NxSPbYl5k.roa (hash: URvxTuHHPgKr+L+8uNywgEsk29rIbLnVfs2KTbEBNVw=)
                          4: pOMTJTMzSvxdTwpBEEiCIJOdgS4.roa (hash: N66sR+vsnvfn2vQyEXUghMnGW+xEPargkQo2ZBulpiM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:47:e7:7d:e4:9a:f4:94:52:5a:19:46:1b:7c:40:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
        Validity
            Not Before: Oct 20 11:01:20 2025 GMT
            Not After : Oct 21 11:01:20 2025 GMT
        Subject: CN=47b8ecf0c5d2d789902518f7eeae7d97dbd4b2ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:57:5c:d2:15:65:35:97:83:53:49:2a:5e:cf:
                    c3:6b:7a:64:76:52:ca:ba:43:b1:0f:5c:1b:5b:81:
                    fb:b2:e1:60:de:ac:f8:a4:06:d6:c3:ae:30:78:09:
                    c1:25:07:16:f4:96:3a:b9:f6:3c:1f:45:ef:f9:ad:
                    44:d1:03:01:d9:76:40:5a:80:98:ef:eb:6c:7e:35:
                    92:b2:c0:42:4f:85:d6:0a:ca:78:a1:97:d8:e1:ab:
                    d9:bc:6f:ff:3a:1f:20:3c:e4:e0:36:c5:26:b2:a2:
                    d7:cb:13:39:8c:ed:91:15:da:8b:f3:aa:a9:a7:dd:
                    02:df:79:15:06:c1:67:98:91:ed:1b:a5:24:bf:1b:
                    58:5b:26:ac:24:c1:ab:83:15:7b:fa:cc:70:1c:bf:
                    5b:d7:7b:0b:eb:0b:45:e2:4e:66:1c:15:d1:73:95:
                    47:5d:5d:c6:48:26:48:a7:b2:c0:e1:b4:46:66:c9:
                    6f:9e:cf:1e:2c:43:aa:68:d3:2a:b4:8f:ef:74:64:
                    58:75:36:a6:b8:db:bb:cc:9e:25:c7:14:2b:fa:f2:
                    e5:f9:92:e2:4f:b9:22:0d:ce:bf:cf:05:63:92:76:
                    b1:c8:d8:12:cd:22:44:0b:f2:a2:ef:f1:bc:ad:b0:
                    81:50:7a:ba:63:87:3f:ff:0d:3b:df:68:ae:e4:4e:
                    55:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B8:EC:F0:C5:D2:D7:89:90:25:18:F7:EE:AE:7D:97:DB:D4:B2:ED
            X509v3 Authority Key Identifier:
                keyid:E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:8c:01:4c:24:b9:90:65:3d:1f:ab:59:21:de:fa:5f:e6:5b:
         db:d7:12:2e:0c:86:49:be:44:6a:67:e2:cb:0c:b5:ef:7c:cf:
         86:24:34:a2:39:6d:66:26:92:5a:be:2e:59:5a:40:ff:41:f6:
         42:ea:eb:dc:c9:24:a6:d8:8b:a2:90:81:f7:44:31:b5:57:3d:
         28:d6:94:61:02:f9:3e:84:ad:84:10:13:4b:cb:73:e7:0a:99:
         4f:2e:19:64:a8:16:d3:6d:92:94:06:15:3d:c3:1f:20:60:48:
         ca:7d:89:7a:7a:c0:86:55:ff:70:92:e3:d5:19:ba:e9:32:c1:
         73:2c:ad:31:9c:e0:30:e7:cd:71:ed:1f:e2:2a:48:b5:27:0b:
         0e:b6:41:be:8e:3f:e4:89:df:bd:8b:6f:9f:20:36:4b:27:4a:
         56:7f:43:1a:f0:8e:fd:f5:6e:69:2a:2a:0d:07:76:41:c6:c6:
         e3:1a:a5:cc:c6:97:2b:ac:90:8c:52:1d:88:fc:be:8d:a4:8d:
         56:e3:cc:72:2f:68:65:ca:10:a8:20:16:f0:44:f2:fe:28:31:
         f5:1c:0e:2b:f4:e9:ad:45:d4:b5:ed:35:87:6f:e1:1f:7d:ac:
         a7:be:f9:f2:be:3c:4a:96:f3:9c:63:81:ee:14:b8:aa:4f:95:
         9a:36:f0:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBR+d95Jr0lFJaGUYbfEDBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMzQ0YmE2MzQwOTYxZGE1ZWViNGFlMjM5ZTlhMDYyNjc3
OTNlMmUwHhcNMjUxMDIwMTEwMTIwWhcNMjUxMDIxMTEwMTIwWjAzMTEwLwYDVQQD
Eyg0N2I4ZWNmMGM1ZDJkNzg5OTAyNTE4ZjdlZWFlN2Q5N2RiZDRiMmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsldc0hVlNZeDU0kqXs/Da3pkdlLK
ukOxD1wbW4H7suFg3qz4pAbWw64weAnBJQcW9JY6ufY8H0Xv+a1E0QMB2XZAWoCY
7+tsfjWSssBCT4XWCsp4oZfY4avZvG//Oh8gPOTgNsUmsqLXyxM5jO2RFdqL86qp
p90C33kVBsFnmJHtG6UkvxtYWyasJMGrgxV7+sxwHL9b13sL6wtF4k5mHBXRc5VH
XV3GSCZIp7LA4bRGZslvns8eLEOqaNMqtI/vdGRYdTamuNu7zJ4lxxQr+vLl+ZLi
T7kiDc6/zwVjknaxyNgSzSJEC/Ki7/G8rbCBUHq6Y4c//w0732iu5E5VcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEe47PDF0teJkCUY9+6ufZfb1LLtMB8GA1UdIwQY
MBaAFOI0S6Y0CWHaXutK4jnpoGJneT4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGpSTHBqUUpZZHBlNjByaU9lbWdZbWQ1UGk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NGVjNDMtNTkzNS00YWIyLWIxM2Qt
MDJlYjlhNDEyNjM3LzEvNGpSTHBqUUpZZHBlNjByaU9lbWdZbWQ1UGk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80NGVjNDMtNTkzNS00YWIyLWIxM2QtMDJlYjlhNDEyNjM3
LzEvNGpSTHBqUUpZZHBlNjByaU9lbWdZbWQ1UGk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFowBTCS5
kGU9H6tZId76X+Zb29cSLgyGSb5Eamfiywy173zPhiQ0ojltZiaSWr4uWVpA/0H2
Qurr3MkkptiLopCB90QxtVc9KNaUYQL5PoSthBATS8tz5wqZTy4ZZKgW022SlAYV
PcMfIGBIyn2JenrAhlX/cJLj1Rm66TLBcyytMZzgMOfNce0f4ipItScLDrZBvo4/
5InfvYtvnyA2SydKVn9DGvCO/fVuaSoqDQd2QcbG4xqlzMaXK6yQjFIdiPy+jaSN
VuPMci9oZcoQqCAW8ETy/igx9RwOK/TprUXUte01h2/hH32sp7758r48SpbznGOB
7hS4qk+VmjbwIA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:05:48 2025 by rpki-client