Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
File:                     CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft (raw, json)
Hash identifier:          cU6d6biHPWVbUslWFUAzz2ejqW4ipi2sJyxTNx7/MmU=
Subject key identifier:   1F:0D:DE:92:A0:A7:68:C0:F8:72:49:D8:73:E5:71:B1:67:48:E2:04
Authority key identifier: 09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5
Certificate issuer:       /CN=092be762fbb10fee42d6de5567936ecd1f83ded5
Certificate serial:       019827EC75619E092D9C7AAE8F39A7E842E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
Manifest number:          4A
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
Manifest this update:     Sun 20 Jul 2025 13:01:04 +0000
Manifest next update:     Mon 21 Jul 2025 13:01:04 +0000
Files and hashes:         1: 0En_rM3ItFKYLhaLLd8WBZOTlpA.roa (hash: 152maO322NYmeUI+2QBI3Muc080/yMuLJaeicPAME94=)
                          2: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl (hash: bHa8wrmeZynkKpMCQhTKGaBKljaKahzY5Ab7g5Du+pM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:27:ec:75:61:9e:09:2d:9c:7a:ae:8f:39:a7:e8:42:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=092be762fbb10fee42d6de5567936ecd1f83ded5
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Jul 21 13:01:04 2025 GMT
        Subject: CN=1f0dde92a0a768c0f87249d873e571b16748e204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b9:9f:11:c8:45:b7:2c:e8:75:c4:d5:95:72:
                    df:aa:45:45:dc:69:33:32:e1:1b:68:94:ca:cc:67:
                    54:c5:01:d1:62:a0:f4:c6:51:3e:1f:cb:55:2a:a4:
                    5c:db:1e:3d:6a:31:53:1b:31:24:a6:cb:19:80:2c:
                    8f:cf:5f:cf:f3:d0:cf:cc:4d:0c:37:09:fa:ad:87:
                    23:27:e2:58:65:ef:93:20:d4:47:f3:8e:ae:15:6c:
                    ec:a2:19:09:be:64:8e:fe:76:6f:a5:fd:18:a9:6a:
                    1a:72:37:c2:6e:8b:8e:af:ae:17:2d:61:db:e5:1d:
                    69:d8:ad:c9:d1:7c:8f:e1:9d:2e:d3:63:1c:7a:28:
                    65:ee:5e:b3:da:7f:1e:6b:ce:77:1a:47:8f:ab:ce:
                    02:80:7f:25:d6:12:e2:26:5c:78:b7:4f:d2:58:21:
                    b3:19:93:a0:d6:b8:13:e1:a3:16:fb:94:dd:5f:e4:
                    a8:ac:b5:54:85:1b:09:1d:06:3a:8e:3a:08:ec:aa:
                    fd:84:bd:d2:6b:35:cc:57:db:ae:4b:ee:46:f9:85:
                    20:fc:63:de:44:39:95:b9:d0:28:42:e3:93:12:8f:
                    16:87:e3:c9:ad:d1:75:ff:1b:2c:5c:e1:8a:cf:62:
                    c4:57:de:de:4a:e1:91:72:ca:bb:e2:2b:88:1b:af:
                    6e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0D:DE:92:A0:A7:68:C0:F8:72:49:D8:73:E5:71:B1:67:48:E2:04
            X509v3 Authority Key Identifier:
                keyid:09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:d9:df:e1:9b:ee:01:e8:53:fa:16:4b:ac:e7:a4:05:95:4f:
         ae:f7:e5:2b:20:93:44:fc:8b:fc:7d:29:56:88:cc:ca:0d:f1:
         48:19:16:45:5b:ff:70:0a:4a:50:04:50:83:9e:ee:f8:38:8b:
         0e:4c:14:82:5a:27:2b:9a:31:67:d1:61:b0:28:65:74:38:58:
         02:27:b0:df:f0:d7:57:ec:08:63:75:47:f4:84:7d:55:1f:34:
         f6:cc:f2:5e:1e:10:c6:30:be:3e:f1:be:86:4f:ea:57:f1:20:
         b4:00:60:e9:ac:21:ed:56:28:96:e2:10:1f:2c:cf:bf:27:c2:
         a1:d4:a6:6a:72:af:45:56:76:08:3b:2d:36:52:39:9d:6b:c6:
         8d:d3:cb:0b:ee:9d:58:af:21:97:28:47:36:2e:48:91:1b:c6:
         4c:a2:53:de:f6:56:d9:4b:c7:88:b1:e3:24:a9:d3:16:4f:99:
         ae:81:74:69:31:12:18:d8:64:a2:d0:2b:5b:a3:5f:50:0b:e3:
         dd:bb:2f:b9:31:3d:ab:b9:6b:43:d7:26:8d:8e:69:f0:00:a3:
         b1:5f:f7:8e:61:09:54:35:cd:7e:6f:36:7b:ab:b1:d9:27:2b:
         d5:43:87:3d:e4:83:94:74:67:65:4f:ee:ac:f3:16:01:ba:a7:
         2f:1a:4f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:22:33 2025 by rpki-client