Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft
File:                     4qv2099Tm7fBaE-09GF50NoGsIM.mft (raw, json)
Hash identifier:          0A2LP6vzPZjMzf9hZ/rfsCEIUHhZ+D+XnR/O1VuRMfk=
Subject key identifier:   E1:35:70:4D:3E:4E:C7:81:9F:E4:18:BB:16:CC:27:1D:C1:99:A3:DF
Authority key identifier: E2:AB:F6:D3:DF:53:9B:B7:C1:68:4F:B4:F4:61:79:D0:DA:06:B0:83
Certificate issuer:       /CN=e2abf6d3df539bb7c1684fb4f46179d0da06b083
Certificate serial:       0198469B0F96AB1F718AFB2D05220DF833E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft
Manifest number:          0CE0
Signing time:             Sat 26 Jul 2025 12:00:23 +0000
Manifest this update:     Sat 26 Jul 2025 12:00:23 +0000
Manifest next update:     Sun 27 Jul 2025 12:00:23 +0000
Files and hashes:         1: 4qv2099Tm7fBaE-09GF50NoGsIM.crl (hash: /fIwdRC1wBH+/d50EBvfklusXvf7wNFTBw6hHJsN4uA=)
                          2: ILMIPoeAh6Mp9Q-FEoKjBIMPdAM.roa (hash: 5aktyEB76Rn5TuWGXiVEAOmlZjNF43pV1TNogR1WVfw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:9b:0f:96:ab:1f:71:8a:fb:2d:05:22:0d:f8:33:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2abf6d3df539bb7c1684fb4f46179d0da06b083
        Validity
            Not Before: Jul 26 12:00:23 2025 GMT
            Not After : Jul 27 12:00:23 2025 GMT
        Subject: CN=e135704d3e4ec7819fe418bb16cc271dc199a3df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ee:0a:64:b1:e9:f9:b8:b7:7a:17:a9:a0:06:
                    fd:66:3b:81:99:a9:7f:f4:83:f9:72:99:d8:bd:38:
                    83:cb:04:5e:8e:06:6e:c6:0e:ad:9e:75:f6:13:d1:
                    13:4a:51:41:f1:10:14:ae:14:8e:c3:7d:83:3d:81:
                    10:06:bb:48:fa:46:4c:ff:0c:db:9b:8a:61:d2:fa:
                    70:74:a5:16:29:d2:23:22:9c:d7:39:80:15:b7:ca:
                    71:9b:40:ac:90:09:26:9a:ec:e1:46:2c:7f:64:11:
                    5d:53:17:db:bb:00:9f:9b:16:77:77:c0:11:12:be:
                    a0:85:c8:68:a4:6d:e5:bb:ab:21:bf:9b:29:0c:04:
                    0a:08:a7:ed:7d:c4:e2:a7:0d:c8:1e:d6:7f:f3:8a:
                    ee:d9:64:be:30:f9:43:5d:3b:e3:1c:7e:a5:dd:35:
                    0c:ef:6c:ef:ba:d9:ff:5c:62:8f:93:7a:0c:d5:b3:
                    7b:dd:25:54:22:4b:a1:3b:16:ed:f2:69:93:95:56:
                    a4:2a:2b:c9:4c:02:e4:37:82:d7:af:cb:bb:1c:f9:
                    e2:30:56:4f:c7:cd:52:e9:cd:55:b9:48:cb:9d:d3:
                    df:1d:64:e1:b7:c0:5c:56:5d:c1:f0:ab:e5:3b:c3:
                    5d:b9:3c:07:da:bf:41:8d:2b:3d:f5:53:95:5e:9b:
                    6b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:35:70:4D:3E:4E:C7:81:9F:E4:18:BB:16:CC:27:1D:C1:99:A3:DF
            X509v3 Authority Key Identifier:
                keyid:E2:AB:F6:D3:DF:53:9B:B7:C1:68:4F:B4:F4:61:79:D0:DA:06:B0:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:d6:6b:79:0d:16:e6:49:f8:7a:80:5d:b2:01:b3:79:5b:4a:
         e4:1e:ec:85:24:2e:80:f2:ba:52:75:0c:10:b2:52:48:42:a9:
         0c:8c:44:40:75:2b:98:51:82:43:4a:89:b5:d0:e3:aa:fc:56:
         85:e6:57:3a:3f:03:fd:09:d8:3f:ea:40:d1:9e:a7:8b:b9:39:
         85:39:12:41:ad:f7:b6:90:02:cc:00:30:09:32:6d:43:2d:f8:
         87:d3:ac:09:55:c1:2b:a2:78:2f:09:eb:26:ad:30:3c:ea:bd:
         f4:74:5b:f2:2c:da:12:ae:19:b9:ae:3f:6e:c6:d8:19:b0:b4:
         82:ca:93:a0:5d:7a:a4:47:78:8a:61:90:05:18:2f:f1:2a:1e:
         f5:ff:c0:5f:50:0f:9f:28:56:2c:b9:e6:b3:fb:90:21:25:ea:
         3d:a7:d3:f8:87:6e:67:7c:41:49:d5:0a:6f:b2:ed:5b:ca:df:
         85:72:2c:a5:90:b8:f2:a7:f2:6d:52:7c:3b:94:2c:38:d5:e9:
         95:12:bd:17:c5:b2:e0:f7:f3:4a:1c:e7:20:9f:d2:18:15:d0:
         89:30:ec:67:d9:96:c9:bf:f9:4e:8d:68:2e:25:fa:2e:80:cf:
         38:79:13:f1:ce:cc:96:b9:70:64:b1:4f:3a:1a:cf:f3:11:fe:
         48:84:f2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:27:27 2025 by rpki-client