Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.mft
File:                     4BtODyogHPQwBI4kgWSzLt30Pa4.mft (raw, json)
Hash identifier:          mnSuh+qqfh5eFo/SQKTmoFDMsgWpxmusOEN1Qaga/Nk=
Subject key identifier:   F6:0F:61:C6:A9:C7:AA:6F:09:39:9C:E8:C8:3D:F2:E9:7C:01:6C:35
Authority key identifier: E0:1B:4E:0F:2A:20:1C:F4:30:04:8E:24:81:64:B3:2E:DD:F4:3D:AE
Certificate issuer:       /CN=e01b4e0f2a201cf430048e248164b32eddf43dae
Certificate serial:       0198D4E02CC4625785FC2BD2252FFE4D537C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4BtODyogHPQwBI4kgWSzLt30Pa4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.mft
Manifest number:          EE
Signing time:             Sat 23 Aug 2025 03:01:57 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:57 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:57 +0000
Files and hashes:         1: 4BtODyogHPQwBI4kgWSzLt30Pa4.crl (hash: hLmWWuxaVYSCLoKXQHMBpgeY/qWLYO5wOfpbCavc8ks=)
                          2: KJS8V64pslKuMWFI7cvlulnThJM.roa (hash: TuhgricsSHQzRyANiX5wlopuZuXjn8vfdfEA+WHjVoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4BtODyogHPQwBI4kgWSzLt30Pa4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:2c:c4:62:57:85:fc:2b:d2:25:2f:fe:4d:53:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e01b4e0f2a201cf430048e248164b32eddf43dae
        Validity
            Not Before: Aug 23 03:01:57 2025 GMT
            Not After : Aug 24 03:01:57 2025 GMT
        Subject: CN=f60f61c6a9c7aa6f09399ce8c83df2e97c016c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:78:d1:03:eb:a4:ee:12:86:c7:04:4f:b1:3e:
                    7b:bf:b1:eb:1a:cf:e1:35:2b:4d:52:be:77:f3:36:
                    40:e6:7c:6b:62:91:15:6b:a0:0f:44:ab:42:0f:0c:
                    29:ef:4b:c4:99:a6:79:35:94:cb:74:dc:0c:12:53:
                    67:98:f2:46:a2:32:9f:4f:43:49:1a:d9:f2:a5:39:
                    e7:11:20:97:5c:4f:5b:1b:b7:71:77:0c:d9:9d:da:
                    93:4c:69:d5:76:8b:17:e9:18:d0:68:78:15:f9:8b:
                    b2:e0:6e:ff:82:0a:c9:97:f4:9c:0e:bf:60:dc:17:
                    87:b7:7f:cb:32:ef:42:ee:10:e9:8d:7f:09:85:01:
                    a8:c9:ff:03:c4:81:2a:49:2c:0a:ca:fb:77:55:f3:
                    a6:0e:7f:67:be:6f:44:fc:25:9d:f6:db:18:1f:5d:
                    6a:b5:d1:3f:1a:85:0b:3e:a6:eb:a6:b5:4c:39:4b:
                    8f:43:86:50:85:8a:15:57:ad:71:b0:eb:7c:9c:bf:
                    2a:d5:04:b5:46:e2:3a:ed:38:01:9c:b5:e2:b0:27:
                    c2:db:e8:8c:5e:ad:16:11:c1:6c:e6:4a:3f:ac:30:
                    31:09:33:e4:c6:25:fd:a5:b3:13:d1:9c:b8:f1:a5:
                    a8:d2:7d:97:a0:37:8a:01:0a:0f:e4:5e:17:96:e5:
                    db:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0F:61:C6:A9:C7:AA:6F:09:39:9C:E8:C8:3D:F2:E9:7C:01:6C:35
            X509v3 Authority Key Identifier:
                keyid:E0:1B:4E:0F:2A:20:1C:F4:30:04:8E:24:81:64:B3:2E:DD:F4:3D:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BtODyogHPQwBI4kgWSzLt30Pa4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:0d:49:84:2f:3e:ee:32:5b:7f:4f:71:9a:7a:fd:c6:4f:e4:
         99:73:c3:64:ec:2b:69:d8:a3:52:e7:d9:24:b8:16:74:b8:3c:
         01:c3:ea:fa:e6:8a:4c:e5:e7:71:4a:66:be:76:ac:27:af:1e:
         53:bf:0e:8e:80:3a:59:50:0c:96:f9:03:34:c9:28:09:2a:29:
         e5:7c:01:3c:ea:3d:b0:2b:e0:2e:c0:2c:01:34:1d:89:48:b9:
         8e:13:7a:0c:45:23:89:91:c1:9f:94:f9:c0:5b:96:40:aa:9f:
         59:84:2e:05:6e:c6:17:9d:f8:d7:df:f1:9f:ce:79:96:51:9d:
         73:98:7a:64:9a:7d:37:ee:a2:0d:ed:e5:da:62:4d:ca:d0:f5:
         eb:2f:31:a2:90:d6:42:8f:77:96:7d:e0:95:89:2e:52:8c:81:
         6a:8c:47:a8:ee:62:9f:39:21:54:b9:e2:da:33:1e:1a:21:92:
         70:5d:14:51:99:f7:1f:7e:29:37:64:c3:18:9d:e6:1b:51:ba:
         4d:f6:cb:fb:5d:2f:8e:7b:58:9f:b3:6b:ac:71:4a:49:51:6e:
         f3:ce:74:53:2e:64:66:c4:45:42:12:d4:b4:b1:57:8f:5b:64:
         f4:91:f1:c3:fe:ec:a1:71:54:1a:d2:a0:e6:11:a5:67:2c:c4:
         01:3e:13:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:43 2025 by rpki-client