Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
File:                     4Pi55HhWy7oIK3r0KXobcj2vxAI.mft (raw, json)
Hash identifier:          S9dJWo7ckheUZ6H8q5+ew6cCacsALdWQvRgjHK8pjFo=
Subject key identifier:   76:77:B0:56:29:92:02:BE:74:80:B2:EB:A5:C0:85:EA:AC:D7:1B:3F
Authority key identifier: E0:F8:B9:E4:78:56:CB:BA:08:2B:7A:F4:29:7A:1B:72:3D:AF:C4:02
Certificate issuer:       /CN=e0f8b9e47856cbba082b7af4297a1b723dafc402
Certificate serial:       01983CF3109525A055C52E4E51C001433A79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
Manifest number:          0EAC
Signing time:             Thu 24 Jul 2025 15:00:19 +0000
Manifest this update:     Thu 24 Jul 2025 15:00:19 +0000
Manifest next update:     Fri 25 Jul 2025 15:00:19 +0000
Files and hashes:         1: 4Pi55HhWy7oIK3r0KXobcj2vxAI.crl (hash: LKz4HfUPwdLAtXREWZJedJLLodLjG1hDAjyOgXEgMVw=)
                          2: Mz3zdOLpdrQGVZtJncItYpvPliE.roa (hash: 6F2PNmZ9ECufEFXZhtjXXLlbHL0vIzCdtjQEK5a/NJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 14:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3c:f3:10:95:25:a0:55:c5:2e:4e:51:c0:01:43:3a:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f8b9e47856cbba082b7af4297a1b723dafc402
        Validity
            Not Before: Jul 24 15:00:19 2025 GMT
            Not After : Jul 25 15:00:19 2025 GMT
        Subject: CN=7677b056299202be7480b2eba5c085eaacd71b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:14:25:e4:b5:72:1a:57:f4:f0:30:a2:9a:10:
                    48:da:9d:f4:01:81:e4:b8:33:d0:12:de:86:d9:0d:
                    5c:1a:35:84:51:03:37:c1:82:a3:50:3d:16:06:39:
                    3a:68:18:14:cf:89:9d:57:1b:5d:30:c5:fc:ac:44:
                    75:0f:d5:41:19:bc:df:ca:48:4d:98:8d:09:8e:63:
                    20:3c:9b:69:a2:26:65:cd:56:bc:af:05:83:a3:3f:
                    1b:74:87:c7:29:39:f2:63:a1:31:09:aa:c0:f7:62:
                    6e:a6:9e:10:e3:60:75:5b:df:47:f4:75:1d:2a:a9:
                    23:b5:f2:ac:ad:83:a8:12:b8:e0:69:21:8d:7d:b6:
                    fc:12:bf:5d:e8:db:f6:ca:52:b9:30:1a:aa:1f:22:
                    9f:c8:00:c3:0d:ad:53:d2:20:f4:6b:34:93:bc:97:
                    cb:e6:b8:2e:55:89:b6:4f:ec:77:db:2c:46:0b:cc:
                    cb:15:9e:22:4f:15:39:46:2b:8f:87:a9:ed:86:54:
                    a1:e5:c5:89:6d:e7:5a:9d:f1:01:d8:12:72:3c:16:
                    ff:84:ee:b2:dc:70:3b:09:c0:f8:42:85:f6:b0:f9:
                    2d:69:09:10:2a:5b:fd:52:14:ce:60:16:17:8d:9d:
                    9b:09:8d:35:83:67:37:9c:43:47:62:f3:ad:01:99:
                    6f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:77:B0:56:29:92:02:BE:74:80:B2:EB:A5:C0:85:EA:AC:D7:1B:3F
            X509v3 Authority Key Identifier:
                keyid:E0:F8:B9:E4:78:56:CB:BA:08:2B:7A:F4:29:7A:1B:72:3D:AF:C4:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:96:bc:c8:34:e0:bc:e2:54:e9:ec:c5:a2:42:d6:f3:1c:28:
         ce:6c:d1:dc:75:60:de:53:e8:2c:62:bc:6d:47:bc:1c:c1:9e:
         28:a1:2c:34:c6:f6:e2:43:3b:3a:2c:cc:30:69:46:7b:e8:84:
         8f:eb:e1:8b:4e:7c:46:81:83:21:71:d2:a3:94:7d:ae:15:d3:
         00:90:55:0b:75:2e:86:f7:d8:ca:4f:ec:a5:b8:16:74:0b:79:
         f0:7b:05:9c:d8:81:82:f4:fb:c6:fb:97:b7:b3:e4:55:9a:65:
         8b:70:10:35:40:1a:6f:22:15:cf:1b:18:fe:f1:80:af:62:96:
         30:e2:d7:40:f7:6f:98:e4:17:f5:9e:f3:8d:c5:eb:fb:4d:fe:
         de:44:a5:30:9f:ee:d9:fa:49:68:75:be:29:8f:5a:b7:17:db:
         3e:e9:b9:49:f0:e2:9d:c4:bd:61:78:97:e7:3b:27:30:af:89:
         96:23:38:f3:20:66:bf:d3:2f:6e:cc:9d:13:bc:ac:57:ee:7a:
         be:77:df:82:7e:d7:c0:c4:82:ef:c3:6e:44:25:dd:12:b1:e9:
         3b:d6:f2:df:a8:e2:32:81:e1:aa:8e:79:29:62:09:98:79:06:
         4e:71:4a:2e:ea:5d:5c:47:f5:eb:4a:db:97:b2:6d:71:62:81:
         a1:68:5b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 17:08:47 2025 by rpki-client