Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
File:                     4qKrCidaLQTx4mNassd-s65gOMw.mft (raw, json)
Hash identifier:          fQq0DCHgDrr10gOByhZIEA3GcK3ZzPKv+XOr/iizkfg=
Subject key identifier:   60:8E:3B:98:F2:0B:71:B5:4C:1F:10:AE:19:D2:40:6C:FF:E6:6F:46
Authority key identifier: E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC
Certificate issuer:       /CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc
Certificate serial:       0198537AE0F991D86B61EE35471A8F6C6576
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
Manifest number:          0949
Signing time:             Tue 29 Jul 2025 00:00:18 +0000
Manifest this update:     Tue 29 Jul 2025 00:00:18 +0000
Manifest next update:     Wed 30 Jul 2025 00:00:18 +0000
Files and hashes:         1: 4qKrCidaLQTx4mNassd-s65gOMw.crl (hash: g0wzgAn7g9rCo15hIbTM1BPuuoOmC0BnLxa47bQtRv8=)
                          2: r-_fYxsQeAAnWT8K8BN3aabue4c.roa (hash: vX8iAlHxAeCaWnzF37mIFqPFZYMuvvYEyZXEicfJpc8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:7a:e0:f9:91:d8:6b:61:ee:35:47:1a:8f:6c:65:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc
        Validity
            Not Before: Jul 29 00:00:18 2025 GMT
            Not After : Jul 30 00:00:18 2025 GMT
        Subject: CN=608e3b98f20b71b54c1f10ae19d2406cffe66f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:89:69:f0:2d:97:40:78:a9:a6:f3:8e:1d:78:
                    90:2c:55:9a:86:7d:f3:39:0f:cc:2b:e3:a3:b9:b7:
                    8a:cf:3e:ef:66:6c:1c:29:2c:ee:58:eb:4c:1e:74:
                    c3:ee:0c:bd:ec:f3:30:81:16:ea:20:99:f8:67:dd:
                    0f:3e:38:19:aa:c4:da:13:ae:78:74:1c:59:a1:8c:
                    bb:d7:bf:52:a2:c9:37:ed:9f:88:04:a2:ab:7c:81:
                    2d:fe:47:63:d4:90:74:0e:0e:26:15:f1:9f:74:94:
                    54:5f:5b:70:23:26:61:52:9b:94:19:2d:07:fd:92:
                    14:76:5c:9d:fe:15:75:09:6a:80:39:fa:32:70:e8:
                    2c:fa:3a:4a:cf:62:5e:63:de:4e:c9:ef:fd:45:df:
                    f8:59:98:af:4d:ae:9d:bb:cd:97:ee:f5:7f:a4:87:
                    c5:b9:81:8f:47:ee:03:53:ca:09:c4:47:5e:fe:d3:
                    61:07:32:17:ae:19:d9:37:32:bb:74:ff:d6:e8:e5:
                    a5:a2:74:d7:48:f0:73:1e:27:0f:85:59:24:1e:25:
                    de:43:37:b6:7d:45:4b:4b:cb:3d:06:7e:19:91:94:
                    2c:86:3a:b4:3a:7b:f1:0c:cf:a8:a7:04:6a:f0:19:
                    a8:6e:1a:9f:eb:1f:a3:13:2e:3d:88:b0:14:ac:c8:
                    e5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:8E:3B:98:F2:0B:71:B5:4C:1F:10:AE:19:D2:40:6C:FF:E6:6F:46
            X509v3 Authority Key Identifier:
                keyid:E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:0f:28:6b:5f:02:24:70:08:ae:34:45:f0:82:31:12:f6:a2:
         02:f4:af:b6:82:b0:32:5e:00:ce:cb:53:d0:19:ea:14:47:7c:
         fb:f0:bb:2c:a0:82:ac:0a:b8:4e:aa:a6:a8:7f:4b:94:13:b2:
         7b:b2:6a:44:e8:8d:5f:61:1d:e8:2a:e0:93:37:2d:01:5b:d5:
         4c:fb:a8:1b:1b:6f:0f:4e:83:06:f2:10:78:fd:8c:3f:b6:64:
         75:00:23:db:bb:9b:86:49:fd:60:d8:20:d1:2b:d9:01:e3:b1:
         0f:25:e5:fd:f2:39:d8:02:9f:f7:a3:8b:ec:3d:1a:c3:7b:9f:
         fc:25:af:5f:40:17:d0:81:a1:89:54:61:75:03:17:8a:1e:e6:
         8a:b4:63:16:47:14:97:c0:93:cb:3c:df:7e:03:63:04:1c:dc:
         d5:34:72:86:2f:67:fe:2b:4a:47:ec:d9:52:d9:be:f2:40:72:
         d2:cb:28:93:18:20:0a:06:8c:f2:66:33:4a:cf:6d:b2:fe:6c:
         95:78:e8:35:03:20:77:39:42:65:f6:d3:bb:9f:6d:96:0e:28:
         5e:ac:b7:e1:94:63:71:22:eb:35:5a:93:de:e0:ee:e2:89:2d:
         b3:e8:82:55:44:c2:68:77:42:dd:03:fd:6f:d5:7c:51:36:8b:
         59:fd:ae:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 01:50:28 2025 by rpki-client