Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
File:                     4jSU4MwSx1rtHQHesVvk4mYrSFo.mft (raw, json)
Hash identifier:          BTgIjKUyu35/nwae5Gf+ohjqb3gjXzXFdajqCPdXEVU=
Subject key identifier:   F7:92:B6:5B:06:F8:A6:71:69:EC:E3:D3:21:54:38:D4:CA:AF:00:CA
Authority key identifier: E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A
Certificate issuer:       /CN=e23494e0cc12c75aed1d01deb15be4e2662b485a
Certificate serial:       01984A40C3EA0FD2F64CD6544A02A059A8E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
Manifest number:          08B7
Signing time:             Sun 27 Jul 2025 05:00:15 +0000
Manifest this update:     Sun 27 Jul 2025 05:00:15 +0000
Manifest next update:     Mon 28 Jul 2025 05:00:15 +0000
Files and hashes:         1: 4jSU4MwSx1rtHQHesVvk4mYrSFo.crl (hash: qP7Led6n7TUhahCQ/ccXlqYIWzyEh17BO2VmbU8sVkg=)
                          2: LASSugvVGOxlTSqLMMa1Fpo5qcI.roa (hash: 7gLhtiJHn2UN7WnAAMzittKwA7y319dAzNsYcYCU/0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:40:c3:ea:0f:d2:f6:4c:d6:54:4a:02:a0:59:a8:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e23494e0cc12c75aed1d01deb15be4e2662b485a
        Validity
            Not Before: Jul 27 05:00:15 2025 GMT
            Not After : Jul 28 05:00:15 2025 GMT
        Subject: CN=f792b65b06f8a67169ece3d3215438d4caaf00ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:78:14:b6:c9:5b:05:e7:1e:6f:de:47:50:28:
                    a8:5e:68:ff:22:bc:31:8f:1c:7d:35:2f:65:82:a0:
                    42:5a:d7:f0:99:52:ea:3a:00:7c:9f:5e:38:d9:32:
                    f6:f6:45:61:ca:64:b5:39:23:bc:2f:34:a9:78:98:
                    10:76:aa:34:a8:01:a9:a9:d1:ff:6e:de:0f:79:b2:
                    a8:4c:b5:7c:06:1a:d7:90:e4:e2:86:83:bf:34:05:
                    ad:83:e2:06:76:41:52:a0:97:6d:bc:c6:9d:41:d7:
                    b3:34:2b:e9:3f:bb:41:fe:2f:14:11:6b:b7:a9:91:
                    eb:91:7f:50:48:91:36:3b:a9:a2:b9:31:67:63:c1:
                    c1:b1:f4:ac:eb:ad:84:d6:52:57:b3:30:70:2c:4f:
                    44:ab:db:69:67:5a:6a:65:cf:ab:55:06:a2:13:e1:
                    e7:b2:0a:91:76:01:1a:cd:0f:c5:7f:ec:3e:72:d8:
                    2e:df:78:0f:af:37:5c:56:24:3c:8f:78:3a:b4:0f:
                    38:a3:12:be:8e:12:2c:ff:3f:93:ef:ee:f6:58:91:
                    5d:1f:ac:bf:5c:c1:4b:2e:ac:4b:3f:5c:10:55:6a:
                    1f:b4:50:81:ac:90:c5:f6:2f:f3:04:65:6c:3c:27:
                    0a:e3:0d:37:3a:50:be:b3:1e:2c:cb:83:c8:6d:37:
                    7c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:92:B6:5B:06:F8:A6:71:69:EC:E3:D3:21:54:38:D4:CA:AF:00:CA
            X509v3 Authority Key Identifier:
                keyid:E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:42:84:1a:6c:bf:f6:0b:d7:81:23:ee:99:6f:45:8e:c0:a8:
         95:11:26:1f:ca:12:7d:21:67:d4:bd:a6:97:7d:22:6f:d6:50:
         3b:4b:59:ed:eb:b1:25:06:3e:8d:36:0e:22:9f:62:dd:23:cb:
         ea:c5:8d:2a:89:19:51:a7:2a:71:ee:ac:f2:6a:2b:ed:69:41:
         c3:3a:94:a3:10:cc:31:1b:40:a7:73:ac:69:aa:ed:7b:75:85:
         67:07:61:76:48:71:cf:ae:d2:20:da:f8:70:7e:98:ca:50:b9:
         77:ed:f4:5d:93:c3:74:b7:7b:ae:8c:b3:42:f1:11:4a:e5:2c:
         fa:eb:ad:53:ec:3e:53:43:ef:61:a7:f3:50:ef:f2:af:bb:a0:
         0c:65:00:d6:a4:aa:a9:06:45:8c:25:f0:6a:70:dd:33:a3:bd:
         1a:46:04:19:0b:a2:29:86:93:a3:19:e4:ea:4e:8a:71:56:88:
         b2:95:cf:22:7b:43:c0:aa:ec:9c:75:c8:cb:2e:e7:2c:89:3e:
         d4:31:8a:bb:f1:0c:dd:6e:26:43:75:02:13:9a:f3:ee:3e:f0:
         9d:79:62:41:38:09:5a:0f:c3:12:bd:e7:78:26:6d:94:14:22:
         52:77:8d:f0:2c:2a:78:ce:cf:12:2b:4a:be:79:d7:6f:40:f8:
         6b:64:af:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:10:34 2025 by rpki-client