Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft
File:                     4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft (raw, json)
Hash identifier:          BfGrZPBUbxpEf559pP6f3+PgFzFygwv7Z1Omx2SEfqw=
Subject key identifier:   35:6F:42:5F:E3:BD:2E:28:5B:B3:B3:11:9D:B0:E2:D2:15:C1:DF:F2
Authority key identifier: E0:40:58:84:DA:C5:9D:A1:E5:D5:85:19:3E:06:56:81:F9:D6:61:5E
Certificate issuer:       /CN=e0405884dac59da1e5d585193e065681f9d6615e
Certificate serial:       0198D6CD493DD13EB22A26D77D9F0BE1B0B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft
Manifest number:          04AE
Signing time:             Sat 23 Aug 2025 12:00:34 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:34 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:34 +0000
Files and hashes:         1: 4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl (hash: xFF2pjkcLyYAp1KMN919DYFOJiD7xonnk/FxpCZlyeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:49:3d:d1:3e:b2:2a:26:d7:7d:9f:0b:e1:b0:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0405884dac59da1e5d585193e065681f9d6615e
        Validity
            Not Before: Aug 23 12:00:34 2025 GMT
            Not After : Aug 24 12:00:34 2025 GMT
        Subject: CN=356f425fe3bd2e285bb3b3119db0e2d215c1dff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:18:41:4c:d9:17:50:77:75:c2:90:f7:a4:e3:
                    68:57:2f:ee:ff:4a:55:1b:1f:82:62:05:5d:40:b4:
                    d0:e4:90:57:94:59:4a:ac:6c:7d:4b:81:91:c1:46:
                    c2:4d:22:9f:a2:ab:48:66:32:12:be:3b:b7:ff:60:
                    1c:ea:b2:75:d5:21:07:ce:e5:55:81:e4:f8:1a:29:
                    35:c2:bf:be:3e:94:96:39:40:b7:54:27:c5:66:f8:
                    d7:88:3c:3a:40:01:6f:22:c3:d8:35:11:84:5f:47:
                    99:a6:45:b4:ad:53:1e:60:72:02:a6:2f:5c:a1:96:
                    b0:ef:f4:26:67:ea:55:d6:6f:fc:82:b2:ee:4e:cb:
                    0f:3d:53:f8:6d:55:a8:83:f4:82:c1:5e:b2:ef:34:
                    fe:4c:5e:af:9a:0b:38:aa:1a:c0:f0:51:d4:d5:f2:
                    a2:90:13:1b:da:05:6f:87:72:bd:68:0f:6d:58:2b:
                    5b:2e:09:5e:95:07:75:ce:88:2e:f8:45:13:86:2e:
                    60:1b:0e:1b:27:9d:5a:ec:63:7e:0c:35:a2:d1:d0:
                    50:4b:75:17:54:b8:69:df:8a:d9:ce:3a:6c:98:2b:
                    cc:55:d9:3f:d9:63:02:6b:56:d6:79:49:88:cf:fb:
                    19:12:89:5d:be:17:46:28:4e:63:8c:68:d5:74:cb:
                    23:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6F:42:5F:E3:BD:2E:28:5B:B3:B3:11:9D:B0:E2:D2:15:C1:DF:F2
            X509v3 Authority Key Identifier:
                keyid:E0:40:58:84:DA:C5:9D:A1:E5:D5:85:19:3E:06:56:81:F9:D6:61:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:50:58:b2:0b:6d:ee:c4:ae:4e:76:17:44:5d:ad:50:0f:99:
         f3:94:3b:8f:11:4e:bf:33:21:1b:1f:06:d5:a5:80:8c:8a:96:
         66:da:cd:5d:e0:5f:2a:04:bf:e9:46:45:33:d2:cb:b7:71:73:
         48:4c:bd:8d:75:5e:72:3a:bf:24:5e:b2:c6:ab:b0:21:8f:a8:
         0d:8d:ae:a0:31:d1:0f:d3:c6:26:20:b2:3e:4e:28:29:5e:b1:
         46:d6:68:56:03:65:c1:ba:a4:44:83:b1:ef:0b:b8:b3:c7:c4:
         17:b9:48:c7:3e:43:1e:e2:e6:ff:15:2a:5b:4f:5b:4c:7c:da:
         fb:06:19:3d:b2:b4:b2:80:ca:41:0d:32:a6:cd:5f:b2:6b:1b:
         5f:5b:c7:35:81:87:f9:9f:0b:ef:e5:1e:09:5b:6c:41:af:84:
         30:cb:3b:44:a2:d6:4e:1c:05:1c:9c:45:75:8f:be:9c:38:10:
         53:c3:14:fe:22:51:bc:2a:b7:3d:df:9b:a8:64:50:92:a2:07:
         90:12:4f:07:97:e4:bc:2b:89:fd:1a:98:79:59:82:0c:d8:de:
         82:15:1f:bd:27:07:e2:64:ac:66:8e:ee:f9:f8:ee:9e:d8:a9:
         87:01:b6:8f:d6:dc:84:22:09:34:00:73:5c:0a:13:7a:01:8a:
         b4:aa:f9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:37:25 2025 by rpki-client