Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft
File:                     4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft (raw, json)
Hash identifier:          E08M7t2DV7TpGXobbXfuyBlGrdmWcxgXkzMnR2oSbIY=
Subject key identifier:   59:88:CC:91:06:A7:48:FC:80:D5:A8:00:B9:40:DC:4E:3E:7F:09:F5
Authority key identifier: E2:C7:56:C6:91:07:37:52:26:0E:DA:0B:29:DF:31:40:CE:C4:8C:18
Certificate issuer:       /CN=e2c756c691073752260eda0b29df3140cec48c18
Certificate serial:       019848C0CED2D925ED074AFCDBC3FBCCE763
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft
Manifest number:          0EEC
Signing time:             Sat 26 Jul 2025 22:00:52 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:52 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:52 +0000
Files and hashes:         1: 4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl (hash: x4JL425s/6Txxdo7idIjGc8oRmfFRry9lHtsKSqcQ+0=)
                          2: i00Nyy2VhQK9HEEpvIhSRMcDQ0o.roa (hash: NEwL6l83UnBavD9cItWgIj0+1vFCka7pyL3HvdCPyl0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 22:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:ce:d2:d9:25:ed:07:4a:fc:db:c3:fb:cc:e7:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c756c691073752260eda0b29df3140cec48c18
        Validity
            Not Before: Jul 26 22:00:52 2025 GMT
            Not After : Jul 27 22:00:52 2025 GMT
        Subject: CN=5988cc9106a748fc80d5a800b940dc4e3e7f09f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3b:89:bc:0b:09:bf:f2:22:da:92:74:cc:98:
                    06:36:89:40:a8:46:a5:65:5c:52:51:2d:07:18:4d:
                    26:ac:75:ff:20:55:df:61:13:eb:c6:d1:e5:4c:24:
                    20:50:1d:68:f3:a2:68:7a:29:51:e8:f0:b2:f6:66:
                    f6:1f:f8:67:64:82:e2:5e:f9:95:3d:7b:8f:ac:8e:
                    dd:47:5a:dc:6b:b6:fa:21:4a:ed:0f:10:9a:4c:9c:
                    2c:11:84:a8:69:d5:e0:3f:a8:6d:41:4e:ab:c5:c7:
                    fb:04:1e:d6:60:99:82:58:d7:d2:fa:60:1e:16:0a:
                    50:98:be:ae:2a:57:a5:94:55:84:2f:99:eb:b7:6e:
                    c4:24:ef:24:c9:0f:cd:32:0e:96:f8:e9:f5:d1:3d:
                    08:20:bb:61:c9:13:bc:31:21:dc:ce:1a:22:db:a4:
                    92:91:ce:07:07:cd:a8:9b:62:2d:67:7a:e0:cd:14:
                    2d:84:07:84:4e:60:58:13:98:af:08:21:ae:35:d3:
                    71:12:fc:22:ad:86:5f:18:49:b9:d6:d6:27:d7:17:
                    46:ae:a3:23:d1:5a:ec:29:04:5d:4c:84:fc:ff:8b:
                    89:f1:ba:c9:e8:5b:b6:47:c3:9e:cf:dc:89:92:62:
                    35:c8:0b:df:e4:dc:d6:35:9e:82:70:a1:4b:88:db:
                    7a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:88:CC:91:06:A7:48:FC:80:D5:A8:00:B9:40:DC:4E:3E:7F:09:F5
            X509v3 Authority Key Identifier:
                keyid:E2:C7:56:C6:91:07:37:52:26:0E:DA:0B:29:DF:31:40:CE:C4:8C:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:69:6e:0c:f2:32:44:26:8a:30:24:d5:47:6b:50:50:09:16:
         f2:57:a6:8c:33:41:2b:57:32:83:78:11:cc:f5:c1:fc:dc:3b:
         b4:0e:04:7c:cf:e7:a1:b9:20:1d:3f:d1:18:b0:33:0e:72:0e:
         66:7f:e9:23:3d:a5:b8:4f:2c:45:2b:a7:5a:4d:b2:db:ed:a5:
         e7:6c:f6:30:39:66:e5:77:d4:fc:0c:76:ad:2b:4e:29:96:d8:
         bc:8a:90:f0:2f:2e:9f:d9:ab:3b:60:ec:eb:18:f4:7a:0f:1b:
         e7:f3:37:d5:b6:04:b0:f4:b3:c9:14:9a:34:e6:3a:3b:2e:b6:
         35:34:96:b6:fa:df:12:00:e1:f6:69:e2:6f:17:7e:ed:d0:c1:
         7a:ea:36:4f:99:2d:a8:27:8a:96:1e:4c:5c:f0:a2:1e:2e:92:
         64:b6:34:fc:17:0c:ca:64:d3:89:1f:80:53:75:fc:e3:50:19:
         5a:82:2e:e0:55:a0:0d:be:1c:95:1a:61:4b:12:64:64:73:20:
         47:16:cc:b8:a7:ea:4a:06:12:92:c3:34:1b:81:da:68:8e:75:
         5c:5c:da:2f:c0:61:9e:02:42:e6:c1:cd:0c:74:06:a8:62:89:
         5d:ea:ed:bd:09:ea:ef:47:a6:8a:64:5d:a0:ad:2a:c5:1d:4d:
         ce:54:aa:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:47:13 2025 by rpki-client