Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
File:                     4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft (raw, json)
Hash identifier:          L5FbniwwcgvQJYEUWz+pjHTABruvDfcnHGL/rVxk6zk=
Subject key identifier:   15:AC:0E:F8:73:50:A9:35:8F:0A:61:17:05:AD:CB:A8:05:91:56:D8
Authority key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4
Certificate issuer:       /CN=e10d5c29a3439703d89b5abf03a75d861771bef4
Certificate serial:       0198481C13AE58D0CAC7A9251D519B156179
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
Manifest number:          1656
Signing time:             Sat 26 Jul 2025 19:00:56 +0000
Manifest this update:     Sat 26 Jul 2025 19:00:56 +0000
Manifest next update:     Sun 27 Jul 2025 19:00:56 +0000
Files and hashes:         1: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl (hash: HRmVT9MK0AQwd0yF/y0vdH+2ow9x0GqVfywzLPQYZsY=)
                          2: 9-vFuydN21S-GeBq1T1BcehlnOI.roa (hash: LgpmzSKFuTZY91lxioPVOeEryx/zl36XSgoLUOCwvZo=)
                          3: OrmnaIv7Ykw3uSFBs-BQky_7bs4.roa (hash: vkDAHcA+JuGp7WyKg9OyBQapexmqkZf8f/9s6IqTZIM=)
                          4: bLr6r57MqGHm8nK9w2IYUZH55ic.roa (hash: jUNvR24icg+/HoCVfLpAKbv7/xE1cDm9e9GWJS4plns=)
                          5: mslAiLHq2RhVoMBrlDZ7StvNRw0.roa (hash: 9NtVz0Q/+ObnJjRSZZ6ysBHLYm1GnmXiKVFqUmldHlw=)
                          6: s_WZrtHOlNd7wkkUhFGq2ejwDiQ.roa (hash: lRuZA83oB7sCJB/yZFB/ga5/o6PvU/KmR8+cgqPbV88=)
                          7: xxqAQj5ApVpCjQK_UbA4qZzprNM.roa (hash: kbcAcd5UMZoHVsf0Y1OkYvbV4qpft1douUqZabuqL8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:1c:13:ae:58:d0:ca:c7:a9:25:1d:51:9b:15:61:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e10d5c29a3439703d89b5abf03a75d861771bef4
        Validity
            Not Before: Jul 26 19:00:56 2025 GMT
            Not After : Jul 27 19:00:56 2025 GMT
        Subject: CN=15ac0ef87350a9358f0a611705adcba8059156d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c3:8b:9b:67:df:c6:6c:30:5a:5b:7d:80:7b:
                    60:e6:02:dc:f5:2e:fb:e8:05:fc:0b:ec:84:5f:43:
                    b0:97:6b:7d:40:0a:58:1c:6b:e7:d3:e4:dd:fb:2f:
                    f6:cc:37:86:3b:12:57:8f:e1:92:ab:e8:b4:39:80:
                    59:4c:d2:37:25:9b:b2:43:6d:b0:53:3a:f4:82:7d:
                    76:60:81:b8:5f:6d:2c:9e:1a:64:c6:b4:d5:bf:2f:
                    14:c0:46:bc:db:f8:6e:d7:2e:68:c5:2a:62:56:a4:
                    32:16:35:16:dc:42:d7:2b:47:1b:1d:c1:ff:7f:f8:
                    51:17:d2:f7:47:f4:51:07:2b:54:04:94:5b:ea:72:
                    af:f4:c0:fe:bd:0b:2c:3e:2f:ab:ad:25:4c:f8:7c:
                    64:14:d2:1b:92:4b:d2:00:6f:c3:bf:a1:c8:02:e1:
                    ee:b3:da:c8:cf:1b:3d:38:dd:f8:b0:8b:1e:9f:9a:
                    db:1d:3f:9d:42:18:6c:c7:38:50:45:0a:4e:4b:61:
                    51:f3:95:45:f2:84:68:6c:eb:4c:0c:10:bf:27:81:
                    19:12:e3:5e:d3:64:0d:3f:c1:65:d2:03:34:fc:34:
                    2d:60:d3:1b:5d:57:9e:2b:3e:91:7b:44:3d:c4:cf:
                    3a:dd:1f:75:55:ba:2f:8a:6f:5f:4f:31:7a:6f:9d:
                    bb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AC:0E:F8:73:50:A9:35:8F:0A:61:17:05:AD:CB:A8:05:91:56:D8
            X509v3 Authority Key Identifier:
                keyid:E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:48:26:48:16:39:c6:ef:de:9b:9d:3e:f6:76:a1:79:77:f6:
         fa:38:dc:72:d6:a5:b3:b1:5c:82:81:de:41:f4:77:57:d4:f8:
         95:e4:33:33:24:32:75:53:da:7b:d6:61:07:ec:7a:bc:58:63:
         2e:e0:4b:19:6c:41:df:ce:70:63:85:e4:02:97:92:fc:28:6d:
         20:7d:d1:cb:a3:c8:62:0d:f4:29:b2:15:72:e7:78:f6:e1:89:
         03:d9:08:95:fe:eb:f5:5a:ee:38:af:7d:c0:cd:e4:54:fc:cd:
         03:4a:1b:79:53:da:04:de:79:aa:d7:21:c1:a1:42:98:12:3d:
         24:72:05:e2:63:0d:82:ec:f1:e3:99:cd:52:a3:a0:75:2d:66:
         95:f6:23:a8:1e:ac:9a:49:1d:06:1f:4d:18:70:75:76:e8:76:
         b1:e0:a9:9a:f4:a7:5e:fd:2d:be:1a:04:39:ab:1c:10:85:41:
         f9:69:e3:b8:25:0d:57:a4:3c:46:f0:8f:80:ee:5d:e0:75:f5:
         82:a8:e3:3a:e0:f2:bd:52:4e:8c:ad:b6:ee:92:2c:40:cc:f0:
         a2:3b:e5:a6:13:ef:d9:53:66:00:51:f3:6c:f0:74:d3:36:ed:
         a7:b2:b2:73:b9:70:5c:fa:df:b1:28:0d:b2:5b:24:91:a3:32:
         f2:0f:bb:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIHBOuWNDKx6klHVGbFWF5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMGQ1YzI5YTM0Mzk3MDNkODliNWFiZjAzYTc1ZDg2MTc3
MWJlZjQwHhcNMjUwNzI2MTkwMDU2WhcNMjUwNzI3MTkwMDU2WjAzMTEwLwYDVQQD
EygxNWFjMGVmODczNTBhOTM1OGYwYTYxMTcwNWFkY2JhODA1OTE1NmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8OLm2ffxmwwWlt9gHtg5gLc9S77
6AX8C+yEX0Owl2t9QApYHGvn0+Td+y/2zDeGOxJXj+GSq+i0OYBZTNI3JZuyQ22w
Uzr0gn12YIG4X20snhpkxrTVvy8UwEa82/hu1y5oxSpiVqQyFjUW3ELXK0cbHcH/
f/hRF9L3R/RRBytUBJRb6nKv9MD+vQssPi+rrSVM+HxkFNIbkkvSAG/Dv6HIAuHu
s9rIzxs9ON34sIsen5rbHT+dQhhsxzhQRQpOS2FR85VF8oRobOtMDBC/J4EZEuNe
02QNP8Fl0gM0/DQtYNMbXVeeKz6Re0Q9xM863R91Vbovim9fTzF6b527qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWsDvhzUKk1jwphFwWty6gFkVbYMB8GA1UdIwQY
MBaAFOENXCmjQ5cD2JtavwOnXYYXcb70MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWIt
ZTQyYTU4MDY0YTYzLzEvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWItZTQyYTU4MDY0YTYz
LzEvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWEgmSBY5
xu/em50+9naheXf2+jjcctals7FcgoHeQfR3V9T4leQzMyQydVPae9ZhB+x6vFhj
LuBLGWxB385wY4XkApeS/ChtIH3Ry6PIYg30KbIVcud49uGJA9kIlf7r9VruOK99
wM3kVPzNA0obeVPaBN55qtchwaFCmBI9JHIF4mMNguzx45nNUqOgdS1mlfYjqB6s
mkkdBh9NGHB1duh2seCpmvSnXv0tvhoEOascEIVB+WnjuCUNV6Q8RvCPgO5d4HX1
gqjjOuDyvVJOjK227pIsQMzwojvlphPv2VNmAFHzbPB00zbtp7Kyc7lwXPrfsSgN
slskkaMy8g+7AA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:24:50 2025 by rpki-client