Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
File:                     sA4l9V67rLBp8QOssIZnA4Nc_M0.mft (raw, json)
Hash identifier:          zdKjEI3KX3BEUNlCRN0H0xylaP2yUAk4r9v5Pzs9LXE=
Subject key identifier:   4B:78:DE:F2:A5:69:37:BF:F8:81:8E:4B:3B:BB:B6:19:16:92:E6:69
Authority key identifier: B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD
Certificate issuer:       /CN=b00e25f55ebbacb069f103acb0866703835cfccd
Certificate serial:       0198D698153863298CEA6FE99C908A54100F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
Manifest number:          1256
Signing time:             Sat 23 Aug 2025 11:02:27 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:27 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:27 +0000
Files and hashes:         1: IQVuYRD39w1eDGvQI5n6qd53zJ0.roa (hash: YMuLKblQhuUFH21p6Ke9CEB5Y7GrJ0BpmU+txXFqoC4=)
                          2: sA4l9V67rLBp8QOssIZnA4Nc_M0.crl (hash: apU2Dj+OAE4rW54evoToVlmIIg9CrS6h4FjXQYodPcA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 11:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:15:38:63:29:8c:ea:6f:e9:9c:90:8a:54:10:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b00e25f55ebbacb069f103acb0866703835cfccd
        Validity
            Not Before: Aug 23 11:02:27 2025 GMT
            Not After : Aug 24 11:02:27 2025 GMT
        Subject: CN=4b78def2a56937bff8818e4b3bbbb6191692e669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f3:a3:80:ab:44:55:f3:ab:60:ab:4c:1f:59:
                    94:5b:c6:4c:a0:95:e3:20:d8:ee:c2:9e:a0:35:fb:
                    ef:af:de:11:78:95:86:92:68:bb:c5:ac:a8:a9:ef:
                    15:74:15:97:11:4c:16:00:9b:f3:8f:a6:9d:1a:4b:
                    6c:0b:ec:66:2f:cc:af:23:2c:31:70:22:bd:f7:7f:
                    d3:ee:aa:9c:fc:7d:0b:b9:8d:fe:b1:38:b2:5d:22:
                    e8:e1:8c:ad:27:84:39:44:6a:67:44:86:33:95:1d:
                    46:66:d5:f3:86:00:3c:17:6c:b5:38:47:aa:8e:53:
                    87:5d:2e:e6:5f:20:80:19:92:7b:1a:61:ea:81:5a:
                    e8:4c:f2:a4:94:09:6a:71:f4:3f:a7:90:3f:db:df:
                    76:d4:36:a9:39:5c:64:27:df:18:63:b9:d0:9e:7c:
                    3a:e0:8b:56:7b:84:4e:1e:46:23:a6:d1:2e:76:78:
                    98:92:16:e3:01:b3:56:7f:56:6a:13:85:ff:8b:58:
                    78:c7:bb:f4:36:a2:85:7a:80:91:d7:67:05:73:7b:
                    89:18:1d:dd:14:20:81:59:ac:fa:13:44:d6:07:c2:
                    cb:ac:6f:72:48:e1:fa:d5:d5:21:07:5a:9d:dd:07:
                    4a:5f:48:d3:58:b1:ce:88:01:ae:98:7d:34:c4:24:
                    83:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:78:DE:F2:A5:69:37:BF:F8:81:8E:4B:3B:BB:B6:19:16:92:E6:69
            X509v3 Authority Key Identifier:
                keyid:B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:b4:51:3e:65:73:f7:9e:7f:8d:8a:aa:82:bf:5a:69:cc:24:
         6e:d4:2e:57:5c:45:aa:cc:c9:78:36:c2:d1:32:7d:ad:66:7f:
         21:1f:59:ff:b3:c0:d7:d9:5d:3f:40:1c:a3:74:8e:30:98:10:
         5e:5f:92:de:11:78:b8:4e:9b:f3:bd:2b:9e:14:d1:b5:ae:4c:
         e6:6e:36:6f:94:f9:a7:96:96:58:09:ec:3d:96:a5:ee:2b:38:
         3b:23:35:a6:aa:ec:b8:43:97:9b:33:e3:40:18:a9:79:ef:59:
         53:88:9f:7a:02:e8:d0:79:c1:cb:eb:40:d8:2c:b2:b5:96:7d:
         76:36:35:53:1f:33:5a:b8:03:2f:fd:26:b4:fb:46:1e:cf:01:
         fd:bb:a6:b9:15:7e:bb:ac:35:5e:2a:be:85:9b:d7:68:ba:1d:
         1f:01:50:62:2e:25:bf:ea:33:8b:fb:6c:09:1d:49:02:a0:95:
         86:78:e9:7b:35:5c:61:4d:35:b7:ee:24:80:57:a4:4f:8c:9e:
         27:dd:4d:93:f1:f2:93:73:ea:54:17:68:82:f9:1d:fd:6f:0a:
         c6:95:95:ba:b5:65:18:22:fb:b3:af:b0:a7:54:d5:4f:fb:39:
         33:6d:6d:4b:e1:7e:35:77:6e:a8:ed:bc:3a:f3:0f:05:ef:3f:
         6d:e3:0b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:24:37 2025 by rpki-client