Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
File:                     T2F9awPi_l-JEcvrX64tyjvWZ38.mft (raw, json)
Hash identifier:          x4SaD2SN3RKJKhAGVQvWuiBQ1PalShVrAqVYgO1veKA=
Subject key identifier:   C6:38:76:26:37:5E:4E:05:87:C2:70:B5:2B:B1:85:91:A7:38:5C:8D
Authority key identifier: 4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F
Certificate issuer:       /CN=4f617d6b03e2fe5f8911cbeb5fae2dca3bd6677f
Certificate serial:       01984A09EBA7B3F59CEA27772FB14F7ED0D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
Manifest number:          12E2
Signing time:             Sun 27 Jul 2025 04:00:20 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:20 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:20 +0000
Files and hashes:         1: NwaNp5L0RusVDFFM4pIExblfTEU.roa (hash: B2/PCGdwG+WPaQH+f8v2+xUGdjLlo6CPicFBvC+Ii04=)
                          2: T2F9awPi_l-JEcvrX64tyjvWZ38.crl (hash: Cs7JXymuj1eSzrUYDkW4vL5etyBvqhwSWrx9kNcMkj8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:09:eb:a7:b3:f5:9c:ea:27:77:2f:b1:4f:7e:d0:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f617d6b03e2fe5f8911cbeb5fae2dca3bd6677f
        Validity
            Not Before: Jul 27 04:00:20 2025 GMT
            Not After : Jul 28 04:00:20 2025 GMT
        Subject: CN=c6387626375e4e0587c270b52bb18591a7385c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b2:e5:03:65:48:11:99:f7:55:84:c3:df:1a:
                    6f:ed:5d:e0:6f:af:50:96:3d:ba:0b:97:65:66:c8:
                    97:38:72:a4:6a:32:2b:cd:57:d7:de:23:df:e4:72:
                    88:77:ff:94:07:d6:80:b4:fa:fa:f8:a3:15:71:6c:
                    5a:75:ab:f4:8d:f2:27:ac:63:56:cd:4d:de:21:ed:
                    f8:2a:d7:5b:3f:ca:13:8d:95:76:f6:90:95:19:f3:
                    f0:10:cf:25:9c:f6:9f:50:f9:03:b8:2e:aa:ac:5e:
                    af:c2:25:d0:9a:6c:5f:24:c6:fe:73:f3:a5:89:74:
                    02:19:04:a2:02:45:e0:73:d7:9d:f5:5c:6a:c6:63:
                    d4:bb:38:23:d4:2e:f8:92:b6:f7:7c:fa:4d:9e:2f:
                    12:7a:09:bb:ff:76:6c:fa:d9:e4:d1:50:31:ca:e6:
                    06:fc:db:20:01:73:69:45:d4:cd:50:82:50:06:83:
                    59:17:23:7c:5f:c8:70:24:42:87:f9:8c:51:3e:29:
                    74:ab:50:af:9b:98:4c:51:40:97:f9:14:15:e6:b7:
                    4a:85:04:30:2a:2b:75:f0:c7:53:e1:1a:68:0a:ea:
                    ff:99:f6:b3:46:49:37:ed:92:d2:07:41:18:03:2b:
                    30:bf:76:fc:46:b1:8c:69:4b:01:ea:31:b0:9c:c0:
                    eb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:38:76:26:37:5E:4E:05:87:C2:70:B5:2B:B1:85:91:A7:38:5C:8D
            X509v3 Authority Key Identifier:
                keyid:4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:8a:f5:62:5b:01:0f:15:f1:a1:14:a7:00:aa:d3:c0:4d:44:
         de:be:4a:15:4f:95:c7:4f:ce:b3:6f:0f:b8:03:58:49:90:46:
         3b:b2:aa:ed:1b:a0:5b:96:1a:0a:f2:d7:e7:d0:c2:85:9a:64:
         5b:82:c9:ba:bf:ae:92:fc:b5:bf:46:b5:20:22:fe:f2:26:49:
         63:46:04:1b:6d:28:df:c1:2a:87:41:4d:2f:80:a8:f7:4b:be:
         3f:ff:72:1a:8f:b8:b6:94:fe:e9:22:89:f0:b5:21:ef:09:ad:
         86:f9:b2:c0:2a:a8:db:aa:e5:c1:a8:62:77:d9:62:4f:fe:d8:
         16:e1:06:3b:a0:2f:a3:2f:5c:57:aa:e0:b3:a6:1a:44:8f:3f:
         0e:bd:13:d3:04:60:b7:9a:4a:6e:01:d7:5e:fc:82:a7:ff:32:
         2b:7c:0f:3b:23:7c:06:9c:3f:99:bd:3c:7b:6e:a4:8a:35:4e:
         84:1c:ae:07:ba:b9:7c:e0:ff:33:03:45:f2:bf:ad:7c:81:98:
         0d:d1:bb:1b:a8:30:64:d2:33:a9:09:66:f9:b1:b8:19:e3:aa:
         f2:85:53:a6:50:b5:4b:05:b6:78:19:92:47:9b:8e:3a:a5:c7:
         d9:df:97:a7:98:2d:0d:36:e8:cc:c6:43:cb:5c:56:ed:ea:83:
         c6:c1:46:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:57:19 2025 by rpki-client