Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
File:                     4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft (raw, json)
Hash identifier:          nGwHVF026kymlCgAAdO8OWAkZE7d9omOf46wC3HVJf0=
Subject key identifier:   74:B5:A3:78:39:2B:A3:C9:64:AF:84:E6:1E:86:9C:BB:C6:B0:31:C0
Authority key identifier: E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0
Certificate issuer:       /CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0
Certificate serial:       0199FCC6A23F6111724812D3F52676EADFCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
Manifest number:          1306
Signing time:             Sun 19 Oct 2025 14:01:40 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:40 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:40 +0000
Files and hashes:         1: 4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl (hash: sDiUaSq8MvIfaIxCm02Slu5sf+MGoKVxKXa79OFp/ug=)
                          2: sG880b_RPrGdA8qdnVRGDqdPZs8.roa (hash: FkxQnvLlTo8fZxDMmVUsA4H8Po5+5uIaGq9jK/9F1N0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:a2:3f:61:11:72:48:12:d3:f5:26:76:ea:df:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0
        Validity
            Not Before: Oct 19 14:01:40 2025 GMT
            Not After : Oct 20 14:01:40 2025 GMT
        Subject: CN=74b5a378392ba3c964af84e61e869cbbc6b031c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:02:6e:70:12:5d:d4:94:5a:90:2b:93:9c:60:
                    1f:1b:a7:53:4e:44:90:31:63:03:f9:d4:5b:df:8b:
                    11:c1:c7:fb:8d:e1:d5:9a:68:a4:31:8f:81:d7:28:
                    20:66:1f:a1:fb:ad:1c:b8:6e:a9:93:e2:5f:20:82:
                    6c:9a:f5:d3:b1:1b:8f:f7:23:0e:a8:6a:ea:ea:f2:
                    4d:c5:ac:6e:b4:37:45:d4:e7:c5:1d:56:d1:fd:22:
                    a1:74:c3:31:42:d7:c0:dd:7a:c4:31:07:dd:5b:46:
                    8d:93:80:8c:26:cb:07:4f:33:84:fd:8a:eb:f9:26:
                    d4:31:8d:9a:01:9b:a1:6a:53:4e:db:85:30:0f:1f:
                    a1:fa:4d:ed:38:44:ae:f9:4d:80:1f:ae:6f:20:b6:
                    2b:10:a6:99:c4:5d:e4:48:05:53:b8:29:97:cb:1f:
                    80:4d:57:2b:a3:9f:40:52:e4:ba:64:db:80:44:92:
                    bc:0d:b1:ea:c7:04:5d:7a:31:d9:67:ce:6e:07:2f:
                    91:2d:4d:54:a0:7b:7d:73:cc:5f:7a:13:98:40:92:
                    ec:bf:3b:76:87:6b:db:6f:3e:bf:ae:e8:58:a9:68:
                    af:a2:7b:f9:8b:6d:47:04:d7:1a:80:27:b3:d0:c6:
                    8a:a7:63:7a:bc:7c:fd:4a:ce:88:34:d0:db:34:28:
                    9b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B5:A3:78:39:2B:A3:C9:64:AF:84:E6:1E:86:9C:BB:C6:B0:31:C0
            X509v3 Authority Key Identifier:
                keyid:E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:0a:06:ef:1a:11:ad:bd:f0:19:a5:d3:7d:86:2a:c2:5d:6f:
         0f:2f:51:d5:d0:f5:36:08:e9:2d:2c:c0:a7:f7:d8:6a:d4:9b:
         af:37:a0:b9:a0:be:36:e1:98:4a:7c:b1:5f:11:a2:cf:b7:e0:
         ac:06:b8:85:46:7c:be:1a:ac:49:53:af:db:b6:1a:9b:89:df:
         e3:5e:c7:93:9b:5e:43:98:9e:5a:4a:e7:7b:32:b5:5e:68:18:
         44:18:b5:9f:78:bb:4b:df:26:eb:c3:2b:5e:92:1c:51:8d:de:
         0c:17:ce:ae:56:db:ec:6a:8c:51:01:44:da:30:b5:2e:6c:98:
         49:d2:53:da:9b:95:b0:e3:a7:19:15:57:36:04:8b:af:8a:06:
         39:fe:2a:ad:75:81:85:01:df:91:1f:0d:af:38:fc:52:07:e5:
         87:9f:4d:4a:20:75:38:63:78:34:99:6c:10:99:ec:ee:5d:0d:
         62:1a:39:ac:7a:44:1c:b0:f7:89:83:09:d0:0f:9e:0e:85:92:
         92:c5:9c:6f:e0:aa:c8:b2:e3:25:38:f0:94:cf:d2:98:39:90:
         b1:08:8e:6a:1c:e5:1e:d3:0f:00:60:34:f5:04:4e:54:2b:1c:
         d2:36:c6:2c:a1:67:49:78:c6:8c:ea:18:aa:0a:fc:cc:ab:0d:
         71:57:a0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:37 2025 by rpki-client