Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.mft
File:                     4VhJEBJK93bjDlrPBV1rrhdhpTY.mft (raw, json)
Hash identifier:          jUc4mz5eYRyO4ugTjAzzG7VOvfzSYrHUYYxmUsHK4iM=
Subject key identifier:   FE:5E:1A:63:4E:6E:CB:A6:B6:64:3A:63:64:C0:08:86:18:5F:0E:F0
Authority key identifier: E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36
Certificate issuer:       /CN=e1584910124af776e30e5acf055d6bae1761a536
Certificate serial:       0199FCC654C3ADFEDBC073F39883F2A4312B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.mft
Manifest number:          0BD2
Signing time:             Sun 19 Oct 2025 14:01:20 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:20 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:20 +0000
Files and hashes:         1: 4VhJEBJK93bjDlrPBV1rrhdhpTY.crl (hash: i5vUB/1JFz3kpjnCxJuMpw5da3aimvvS9x3HhhCuG/s=)
                          2: IQROvr2vBd7jckj4JxxLTVqcojM.roa (hash: ly/jdFkHJ3s46OFRx+V8sZxwJQeghZczRi1B0/DdTGw=)
                          3: XGKVKtjzrhIqJnitbSPu8PfZ3U0.roa (hash: DZhN7yGkT4Q124D/acmARQUP1NDYURt0Aavi3iNxtYY=)
                          4: eSKsGHyxbWYwro-1UQoDIzgXZL0.roa (hash: Z+2EIYf0yK8lCQZu34hQ6FGPR1zzM9h/hZgRWuizAuo=)
                          5: uwdEf76PatEiBG1-AwvVJD3ZSLI.roa (hash: L5a+PChE20DmyqcNgzL4srrFg9fTUoR13MIkAL4T2o4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 14:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:54:c3:ad:fe:db:c0:73:f3:98:83:f2:a4:31:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1584910124af776e30e5acf055d6bae1761a536
        Validity
            Not Before: Oct 19 14:01:20 2025 GMT
            Not After : Oct 20 14:01:20 2025 GMT
        Subject: CN=fe5e1a634e6ecba6b6643a6364c00886185f0ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4c:9c:6b:98:c4:c3:f3:42:f9:a5:64:f0:6b:
                    e4:7b:9d:51:9a:b3:70:e3:be:1c:37:b5:83:81:6c:
                    1a:12:f6:8f:4f:da:f8:24:03:c6:1e:22:f7:9c:3f:
                    83:01:19:e4:34:9a:7f:b6:aa:0a:8e:0d:2b:7e:04:
                    2e:6d:01:6c:82:bd:2b:08:c4:3e:a3:a3:e8:28:ea:
                    2d:f9:bd:1e:c8:bd:68:7c:22:fc:f9:eb:af:fc:4a:
                    82:c6:29:db:53:72:31:6f:a2:2a:02:95:79:96:93:
                    26:f6:b3:b9:a9:88:d0:03:b5:dc:e3:10:43:c2:48:
                    71:e2:74:a7:8a:09:4f:a7:2e:ef:29:1a:4d:da:bb:
                    23:f2:22:11:93:68:0f:55:6e:70:f4:5d:3c:c9:b6:
                    d7:ef:b2:11:be:a5:d4:d8:fe:d1:33:d3:45:14:97:
                    1f:59:5b:b9:ca:6b:3d:aa:e9:c6:eb:ec:ac:fb:66:
                    97:b2:f9:b5:78:81:39:8f:c9:f2:86:5d:92:61:09:
                    df:fe:17:b3:6e:60:9a:87:0a:b0:9b:5d:72:19:e7:
                    34:13:a4:57:52:d5:6f:0a:24:7f:2c:46:5c:11:7b:
                    97:a7:95:be:2a:ac:0d:7b:59:74:f2:b7:ab:a9:f2:
                    f0:56:25:0a:9c:8b:ba:51:bb:bf:9a:ac:a3:09:a0:
                    7a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:5E:1A:63:4E:6E:CB:A6:B6:64:3A:63:64:C0:08:86:18:5F:0E:F0
            X509v3 Authority Key Identifier:
                keyid:E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:c5:3f:a4:74:6e:c0:4f:95:8a:a5:c9:ec:7a:71:4a:77:1e:
         98:62:a0:f0:b7:e8:ca:3e:a6:a1:15:dc:3f:9d:3f:0d:07:a5:
         e2:5d:7c:c5:83:0e:a7:45:a8:7b:89:f7:2b:5e:76:1e:78:13:
         f0:60:4a:55:83:29:9c:dc:23:c8:37:75:be:f7:76:2a:37:4c:
         63:01:5a:84:0a:0c:78:a8:a2:24:c2:8b:b4:d2:56:ca:1c:70:
         a5:0a:c5:2a:af:70:1f:9b:a8:6d:85:96:3a:e3:13:a8:04:51:
         e5:c4:34:39:aa:57:d8:fe:c4:5a:2c:3e:ca:96:c9:ae:8e:34:
         35:09:61:38:7c:95:18:42:dd:25:e4:14:99:ab:dd:4e:9f:b3:
         fb:c5:c8:ed:64:5a:60:50:0a:e8:cc:9f:37:5d:f4:9f:5e:cf:
         0c:ff:a7:96:ae:fd:40:6c:36:72:a3:c3:2a:ab:83:af:bd:69:
         61:28:b9:2e:06:7d:9f:af:85:c8:44:e3:47:57:47:bd:8b:c5:
         62:17:12:24:c1:ae:99:3c:9c:49:9d:bf:c0:f5:03:9f:93:e5:
         db:23:31:1b:52:1b:32:c3:2b:bb:4b:eb:a1:fb:e0:c1:0f:36:
         73:4f:c3:e3:ee:89:c7:0e:72:18:81:d8:0f:0a:39:63:f5:da:
         c8:ea:fb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:43 2025 by rpki-client