Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.mft
File:                     C4JANE7t1v9gI0SCv8MAHW4boJk.mft (raw, json)
Hash identifier:          u/E+NMKPyfeqdaopJ0UM/RSW9uhMtBPk7lvY0099/0g=
Subject key identifier:   35:85:7D:D7:3C:63:2C:FE:ED:B9:00:A7:61:81:E7:7B:B7:5C:09:A2
Authority key identifier: 0B:82:40:34:4E:ED:D6:FF:60:23:44:82:BF:C3:00:1D:6E:1B:A0:99
Certificate issuer:       /CN=0b8240344eedd6ff60234482bfc3001d6e1ba099
Certificate serial:       0198D583E3EE30A9F13F7EEEB96210BDF4CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C4JANE7t1v9gI0SCv8MAHW4boJk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.mft
Manifest number:          78
Signing time:             Sat 23 Aug 2025 06:00:47 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:47 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:47 +0000
Files and hashes:         1: C4JANE7t1v9gI0SCv8MAHW4boJk.crl (hash: AA7XkUq4fDCRBzPWdETP4u1mQ15R/zK5MQYoH3mEjyQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C4JANE7t1v9gI0SCv8MAHW4boJk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:e3:ee:30:a9:f1:3f:7e:ee:b9:62:10:bd:f4:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b8240344eedd6ff60234482bfc3001d6e1ba099
        Validity
            Not Before: Aug 23 06:00:47 2025 GMT
            Not After : Aug 24 06:00:47 2025 GMT
        Subject: CN=35857dd73c632cfeedb900a76181e77bb75c09a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bf:b9:b0:51:7f:3b:7c:16:29:ca:70:dd:fa:
                    29:f1:b1:20:22:95:be:80:de:58:2e:47:3b:48:73:
                    25:7c:4a:0a:85:ea:b7:8b:05:6c:a2:73:c2:b8:0d:
                    02:9a:ed:38:cc:b2:f0:f6:26:a2:55:4e:f4:a7:b7:
                    2e:5d:ae:c4:92:6b:1a:e2:e6:ad:28:07:c3:83:7c:
                    1a:a5:03:c8:74:fd:b0:8b:aa:83:30:8e:59:c9:e3:
                    37:c7:8d:6a:f8:0b:c0:6a:1d:07:14:d3:51:99:2a:
                    8b:f9:56:ba:01:a9:64:e5:4b:92:51:bc:a3:08:37:
                    5e:ee:4d:ef:6f:b7:1a:90:f8:03:24:6b:4b:86:57:
                    99:df:a8:aa:ba:44:80:fd:ab:70:9c:0f:f6:34:ac:
                    57:6c:e8:d0:85:5d:e5:c7:fa:b4:e2:d7:7f:1a:1d:
                    08:98:98:06:23:14:a3:0e:9a:ed:34:9d:c9:1e:86:
                    7f:c2:1c:c3:93:28:03:eb:de:69:03:10:9b:48:3a:
                    2c:f9:a0:71:b0:17:25:2d:e2:d4:88:50:82:4d:01:
                    47:e7:f8:4e:e3:61:14:40:9b:49:3b:5b:33:0d:56:
                    2c:4f:69:df:34:aa:9e:c1:09:f1:a1:ad:cc:57:4a:
                    d4:43:99:44:2b:a6:b8:cd:f3:c0:a3:d4:cb:40:17:
                    88:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:85:7D:D7:3C:63:2C:FE:ED:B9:00:A7:61:81:E7:7B:B7:5C:09:A2
            X509v3 Authority Key Identifier:
                keyid:0B:82:40:34:4E:ED:D6:FF:60:23:44:82:BF:C3:00:1D:6E:1B:A0:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4JANE7t1v9gI0SCv8MAHW4boJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:37:57:b2:c7:06:ba:be:f0:fd:1e:9b:92:32:a7:d6:58:23:
         10:21:0c:e8:65:e6:df:a8:f8:15:a2:ab:13:40:f4:a8:11:e7:
         26:29:f8:8f:a8:13:28:87:fb:df:38:b1:e8:ac:51:58:3f:e2:
         18:63:e7:70:0c:5b:7e:0a:c3:03:05:af:7d:f0:b2:22:a7:2c:
         8e:e3:90:e4:b9:11:2a:7e:82:c2:8e:1f:59:9b:92:76:4c:71:
         c2:12:13:83:77:be:9d:28:f8:fc:8a:bc:59:c6:21:43:ad:6e:
         5c:bb:73:de:a8:41:7c:d7:0f:ac:d7:df:16:92:e6:e8:64:81:
         13:3d:0e:9e:e1:65:c4:77:21:ce:61:82:c7:55:77:a6:64:0e:
         63:b0:de:7d:cb:cc:bd:9d:d4:6e:82:e8:2e:dc:f0:e3:c2:45:
         33:8e:bb:1e:8c:89:6f:cc:1a:e5:d9:70:5c:45:ea:ca:10:43:
         66:45:52:87:8e:6f:8b:39:53:14:b9:35:e9:1e:49:25:11:aa:
         31:cd:c7:19:e5:4b:a0:53:ef:45:92:c3:dc:9a:51:86:8c:4a:
         f3:d5:2f:9f:34:0c:2e:83:d0:d7:39:c2:ef:83:ef:05:65:b8:
         23:18:33:56:7d:5f:1c:90:c0:2f:0b:0f:4c:53:57:c3:53:67:
         0d:e2:a0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:25:23 2025 by rpki-client