Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.mft
File:                     4LVOM0Iq091sqToY7dguC2jIWlw.mft (raw, json)
Hash identifier:          YBfGaXTGSRsh3/nkrR8z1svEalukiLJipKJgKosOsWo=
Subject key identifier:   01:86:85:27:5A:A9:BA:17:A3:CD:AC:05:97:CD:59:2A:BA:36:31:79
Authority key identifier: E0:B5:4E:33:42:2A:D3:DD:6C:A9:3A:18:ED:D8:2E:0B:68:C8:5A:5C
Certificate issuer:       /CN=e0b54e33422ad3dd6ca93a18edd82e0b68c85a5c
Certificate serial:       019849D3BD1912DBD7CD8F8C4481CF269DE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4LVOM0Iq091sqToY7dguC2jIWlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.mft
Manifest number:          090E
Signing time:             Sun 27 Jul 2025 03:01:09 +0000
Manifest this update:     Sun 27 Jul 2025 03:01:09 +0000
Manifest next update:     Mon 28 Jul 2025 03:01:09 +0000
Files and hashes:         1: 4LVOM0Iq091sqToY7dguC2jIWlw.crl (hash: BGQusUl0JYARWq5J9efBcE0zYYvEMjy2l8/a/V08bM0=)
                          2: 93WDpe_nqig4pm6_Z5KqoXM-m-I.roa (hash: +05qP5tX3rvyytgRGZx+7tHz5to109QDlCt0+rv4I4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4LVOM0Iq091sqToY7dguC2jIWlw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:bd:19:12:db:d7:cd:8f:8c:44:81:cf:26:9d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0b54e33422ad3dd6ca93a18edd82e0b68c85a5c
        Validity
            Not Before: Jul 27 03:01:09 2025 GMT
            Not After : Jul 28 03:01:09 2025 GMT
        Subject: CN=018685275aa9ba17a3cdac0597cd592aba363179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:95:d6:61:0a:40:03:d0:6b:10:4d:47:fb:3b:
                    b2:28:1b:54:b7:55:25:bd:a2:fa:0c:3f:cb:cf:1e:
                    b0:af:06:de:21:3b:9c:f3:21:75:d5:4c:bf:03:ae:
                    8c:48:76:91:04:68:c1:78:99:68:b4:a4:25:7e:71:
                    d1:10:b2:fe:5d:98:e8:2c:92:2b:cc:d4:be:32:5e:
                    35:17:ca:91:1e:97:b3:d8:81:14:6e:f4:41:46:19:
                    94:38:23:cb:99:f2:b8:0a:c2:03:14:d5:e5:66:3d:
                    69:b0:d4:b7:e4:3f:70:9d:63:73:6f:7e:69:bd:b7:
                    27:4c:e1:8a:ed:84:37:5a:3c:1c:32:d2:64:4f:45:
                    a8:66:d6:a2:a9:de:91:5e:74:81:14:8e:db:95:b9:
                    ee:89:fd:9d:22:1a:53:d2:47:db:5a:ed:cc:b4:63:
                    fe:c7:67:22:ef:eb:72:78:85:b3:b3:99:c3:42:56:
                    71:22:61:91:f8:84:4e:4d:5c:6a:85:8c:e9:99:0e:
                    10:bc:df:cf:63:f7:ec:f0:58:a7:78:b3:7b:06:04:
                    7b:be:8d:a9:63:56:79:5c:16:e7:37:c7:cc:10:b9:
                    a1:31:f5:61:d3:5e:6e:d1:ad:f5:26:c8:54:56:f2:
                    b6:4b:ab:fd:d1:1c:45:69:5b:6d:95:b3:06:27:b8:
                    57:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:86:85:27:5A:A9:BA:17:A3:CD:AC:05:97:CD:59:2A:BA:36:31:79
            X509v3 Authority Key Identifier:
                keyid:E0:B5:4E:33:42:2A:D3:DD:6C:A9:3A:18:ED:D8:2E:0B:68:C8:5A:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4LVOM0Iq091sqToY7dguC2jIWlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:72:ed:f2:47:19:1a:7b:6f:13:da:55:96:9d:91:db:32:fe:
         6c:d7:4b:55:96:81:53:1a:78:b4:42:a4:ae:83:51:6f:64:dc:
         3a:57:3b:c7:b3:1d:88:e6:75:b0:b1:47:d6:25:b1:95:86:33:
         48:92:13:0a:43:18:d1:ba:bd:b4:31:da:79:15:ee:3a:8a:14:
         f7:9c:40:2f:da:42:2c:f0:ba:b3:67:87:65:19:8a:02:25:7a:
         8d:1c:43:10:b4:85:b9:db:2b:1b:2e:66:99:de:38:05:d1:70:
         a6:4d:c4:30:80:f0:48:49:30:e0:ce:d3:c9:e5:d6:3a:1b:7a:
         a1:30:1a:6b:04:48:45:2a:5b:ae:6b:75:f5:95:9d:98:87:a0:
         d6:2d:62:60:cd:55:38:a3:45:4d:56:8f:20:51:92:37:c1:e2:
         c4:ad:d9:c0:1e:7d:c2:b6:6d:ae:cd:35:28:f5:c0:10:2c:f3:
         3a:87:82:9b:f8:55:28:7d:ff:62:09:b1:e0:77:87:8d:90:3c:
         70:aa:c5:cd:19:5d:ec:c6:c0:53:a8:01:bf:d0:81:1f:01:bd:
         e1:fd:e9:cd:7a:b7:23:5e:90:50:56:48:0a:e0:10:61:74:8b:
         a2:e7:d5:fe:79:69:26:64:27:67:ff:94:2f:6e:41:24:a7:f7:
         f8:ff:f0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:30:55 2025 by rpki-client