Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
File:                     4BEGBvUk26pTjmfhI8r7xt8zhsA.mft (raw, json)
Hash identifier:          h3UEKUg3Xkr8kpS5gImVit/4b7EXoybpfqmI3E42BtQ=
Subject key identifier:   56:15:CD:63:F7:5C:14:59:5C:16:66:E4:62:B5:17:A1:94:B2:E1:6B
Authority key identifier: E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0
Certificate issuer:       /CN=e0110606f524dbaa538e67e123cafbc6df3386c0
Certificate serial:       0198D5834AE6DBC706329BD2C2D0F94656F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
Manifest number:          03B0
Signing time:             Sat 23 Aug 2025 06:00:07 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:07 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:07 +0000
Files and hashes:         1: 4BEGBvUk26pTjmfhI8r7xt8zhsA.crl (hash: 2ISg/Y7AQnRMiOb4z0QDNf4gM09BL4NAwig1PGuv4Js=)
                          2: LKg2o2zlysSfcmScabBK3xapbdE.roa (hash: 1l6VyqJgKUuQ/XvxIU6XnLgEokzCKE4ghCBRoC85WGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:4a:e6:db:c7:06:32:9b:d2:c2:d0:f9:46:56:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0110606f524dbaa538e67e123cafbc6df3386c0
        Validity
            Not Before: Aug 23 06:00:07 2025 GMT
            Not After : Aug 24 06:00:07 2025 GMT
        Subject: CN=5615cd63f75c14595c1666e462b517a194b2e16b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c4:f3:02:32:f2:91:b4:51:31:61:f7:ab:d5:
                    3c:87:05:0a:7d:db:86:76:61:96:5e:69:77:f4:ad:
                    a1:25:a2:b6:d8:98:1d:a8:ab:c1:40:79:78:6a:b7:
                    ec:3c:0c:2e:36:e8:cf:15:cb:0a:a7:bf:ba:76:41:
                    0f:ae:83:5b:f5:3c:1b:b7:fb:ac:bd:a4:47:6c:4f:
                    12:ca:9a:2a:98:3f:39:88:2a:76:eb:08:92:d2:56:
                    e8:9d:72:68:68:3f:52:ef:c9:e0:35:5d:e5:3c:ea:
                    da:20:38:82:be:cd:dc:3f:8d:0b:50:a6:66:b5:db:
                    aa:83:15:32:b5:f6:42:44:a3:d2:62:e9:e3:0c:ae:
                    c8:27:61:38:2d:e6:b2:d4:47:5e:e5:13:03:97:5a:
                    91:7c:da:05:c4:1a:ad:de:47:0e:b7:df:3d:3c:5b:
                    c0:81:6d:54:c9:18:4b:cb:af:ee:42:f7:90:6c:4b:
                    ff:d8:ad:ce:a8:fd:b1:d3:88:99:ab:92:64:1e:06:
                    fd:cb:c3:6d:3a:c2:73:17:5b:7d:93:d3:2e:1d:6e:
                    ee:4e:e9:ee:30:87:84:fd:cf:98:34:9d:3c:25:a2:
                    2a:1a:75:99:7f:68:be:b9:6b:34:2c:0c:ee:49:3d:
                    86:93:72:c9:93:9e:89:f5:db:76:dd:b3:52:6b:a1:
                    8d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:15:CD:63:F7:5C:14:59:5C:16:66:E4:62:B5:17:A1:94:B2:E1:6B
            X509v3 Authority Key Identifier:
                keyid:E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:b8:9a:f6:9e:33:35:ce:5f:55:7a:7d:d7:48:1d:d4:0b:23:
         9f:18:96:f6:55:74:4a:c0:6b:11:92:0e:33:bf:1b:1c:5d:2f:
         3e:d0:25:af:17:c6:b3:b9:f5:71:dd:ed:4c:ed:da:0d:97:62:
         2b:7d:66:51:6d:ec:7d:ff:9f:90:c2:f0:8c:ac:57:66:ef:29:
         45:e3:d4:12:f4:6b:79:41:79:5f:b4:fa:1c:9d:c2:ca:92:5d:
         d6:58:a2:8a:dd:51:d7:e3:7b:c1:b1:2d:97:86:06:e7:c9:e1:
         69:b5:67:40:0a:af:e5:ca:85:0f:93:af:9e:15:3a:cd:23:81:
         e9:fc:8c:e9:97:b1:0c:92:b7:95:d5:62:0f:56:1b:d7:37:c9:
         7b:05:c5:18:63:19:29:03:89:82:03:ee:fc:ec:6d:a9:78:2a:
         54:61:34:40:07:7c:cd:93:ed:61:29:e0:ef:3f:55:cc:59:62:
         df:e3:9c:e3:4d:eb:02:e4:f9:58:b5:c8:b1:61:e3:4f:57:e6:
         36:36:1c:42:c8:e4:84:8e:7e:c8:39:11:4f:15:6c:af:f5:28:
         2d:8a:8e:84:6f:96:19:e0:c4:4a:b7:4b:3c:c5:67:7f:f9:f0:
         75:4d:12:0b:eb:22:23:20:cb:0b:a2:79:a7:79:1f:86:9a:95:
         62:5e:c0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:02 2025 by rpki-client