Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
File:                     4IFCtC45SABI0fzqWHo2k9pMC4o.mft (raw, json)
Hash identifier:          /kv1eUX1cnisJSoJS8XTX5KekdmlDeYO7xZPchDKVNg=
Subject key identifier:   6E:7B:C4:9A:CC:D3:8B:BF:82:39:BA:E3:BB:30:93:79:95:70:3D:36
Authority key identifier: E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A
Certificate issuer:       /CN=e08142b42e39480048d1fcea587a3693da4c0b8a
Certificate serial:       0199FAA11515AF63EFD37A0BB810C8171022
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
Manifest number:          04CC
Signing time:             Sun 19 Oct 2025 04:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 04:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 04:01:24 +0000
Files and hashes:         1: 4IFCtC45SABI0fzqWHo2k9pMC4o.crl (hash: lNsB2V9v+1tzkvPS3xGm937REwWiDH5257XgCKAHuzY=)
                          2: SkmMZcDmD4tfD5IJGWfT10a999s.roa (hash: FtSYkAppozDXy+VqyVeW2kon4HMuVtycn1oxBmmVVwQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:a1:15:15:af:63:ef:d3:7a:0b:b8:10:c8:17:10:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e08142b42e39480048d1fcea587a3693da4c0b8a
        Validity
            Not Before: Oct 19 04:01:24 2025 GMT
            Not After : Oct 20 04:01:24 2025 GMT
        Subject: CN=6e7bc49accd38bbf8239bae3bb30937995703d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:8d:ef:db:1c:ad:1b:0c:9e:97:96:68:9c:94:
                    4d:df:b0:c9:9b:a8:26:de:45:27:60:43:a9:ba:44:
                    c8:4c:a3:ec:15:b6:02:21:a5:96:3d:d8:0d:f9:73:
                    7f:ff:11:59:00:c0:32:4b:2b:05:f7:8d:4e:5c:9a:
                    46:40:24:7a:a7:97:e4:3a:82:97:6b:71:53:f7:78:
                    e5:be:59:52:d6:72:9c:a4:8f:a4:9f:f4:7b:29:05:
                    89:2e:92:2c:e6:43:f3:cb:ab:a1:e5:45:7c:27:59:
                    4e:7f:1c:a5:0c:44:4a:f9:ec:01:45:9d:fc:ad:61:
                    d1:f5:49:4f:72:74:e6:99:75:2f:56:48:e4:04:50:
                    96:39:14:87:07:4e:56:ca:fa:89:d5:1e:28:1f:8e:
                    e5:f1:83:f3:c9:e7:8d:58:ae:4a:44:46:df:c3:46:
                    ae:93:0c:f7:53:19:66:3a:c4:bf:c0:de:a2:38:ff:
                    b9:84:0e:1b:ac:a0:d2:fb:47:36:08:a9:35:1b:d1:
                    73:39:08:f4:2b:53:46:57:aa:0b:cf:11:33:cf:20:
                    7e:4c:75:bf:48:e1:e8:4c:67:78:4f:b3:8b:e2:f3:
                    0d:a5:29:3d:9a:e1:f4:ab:47:4c:61:f2:0b:fd:76:
                    a8:1e:3e:45:45:61:6a:47:fe:4a:97:e9:26:f9:d7:
                    94:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:7B:C4:9A:CC:D3:8B:BF:82:39:BA:E3:BB:30:93:79:95:70:3D:36
            X509v3 Authority Key Identifier:
                keyid:E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:eb:61:4b:57:04:1d:7f:15:24:1b:2e:d3:28:be:b5:4d:2f:
         f8:52:de:a1:1d:83:ce:9d:cb:0c:50:35:46:d7:38:92:84:1c:
         a1:72:76:e6:c7:3d:a1:40:6d:81:61:44:72:23:74:d0:a5:7e:
         59:e1:8c:f2:93:66:2c:ad:ed:1e:3e:8f:f1:96:3e:4d:0a:7a:
         ad:83:d7:9d:88:9f:b8:08:43:14:81:d3:83:ff:d8:b9:5e:01:
         ac:90:17:a1:b3:99:7f:f3:72:c8:27:cc:49:b1:f3:e0:f3:61:
         d7:53:b0:42:5f:ac:de:00:51:e2:fd:83:3e:52:ad:61:a2:5a:
         da:97:1c:9e:6a:64:07:85:a8:c6:d9:e3:d9:bc:a1:c2:b2:e9:
         6b:7b:b4:b1:43:24:8d:6f:71:f8:4e:3f:65:8e:61:a7:8e:c1:
         3d:84:e8:a4:63:9f:a7:0c:df:4d:6c:ab:83:aa:61:23:74:83:
         78:91:a0:e9:95:58:a8:f3:0c:f1:8b:f4:20:d5:ed:5b:0a:21:
         39:fa:4b:c8:fe:84:d3:21:3e:92:85:9b:92:be:7b:2e:50:e5:
         90:bf:99:b9:bb:15:c0:7d:05:17:84:52:d8:1c:9a:73:84:2f:
         62:6c:4c:27:74:aa:57:5a:50:61:cb:96:c5:92:95:c5:9b:1a:
         c6:87:d1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:39 2025 by rpki-client