Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.mft
File:                     4VE2_v81dO-bImLeWbBqIZCPqz4.mft (raw, json)
Hash identifier:          LBxubrQNwUW/y2dsZNdL3R9ucXHYZc+8YdjAoObhzdk=
Subject key identifier:   72:27:09:8C:96:8B:6C:98:04:51:D1:62:F7:9A:B8:47:A7:A3:A0:E6
Authority key identifier: E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
Certificate issuer:       /CN=e15136feff3574ef9b2262de59b06a21908fab3e
Certificate serial:       01984AAE925048D0CAE78D268C4426F66A62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.mft
Manifest number:          11C3
Signing time:             Sun 27 Jul 2025 07:00:11 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:11 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:11 +0000
Files and hashes:         1: 1FOy1U_lPtu1-Ih_B8WFKjN4las.roa (hash: Rs2B7kZOg5bKnwaWecY78bd4lNJsNXs69BxarIuh1l4=)
                          2: 4VE2_v81dO-bImLeWbBqIZCPqz4.crl (hash: lmAti28H4UPxUbHSqejd7dPoUwYQIzXCv+YyjD+P6Gs=)
                          3: Jn7xXP0hy7A2gK4lsZgTaRpNzlQ.roa (hash: 5loPMarEGhhNHTtXsrCjFteZBtyifn+6Bwt73fRzVZ0=)
                          4: _CzYDq1H-ll_gAkdUOBSR_Q_Cpk.roa (hash: fttU6reXvXB5pDq9s86n/2e7Kd4PICvzVXyn5B2qQSw=)
                          5: _VM6Mj4CguVY0d_OX4HaJGpBWSs.roa (hash: cSXjXfka+X+cP+Z+HXidhFSrH7TuR0mB9cfQoGvxchQ=)
                          6: u0_XUAi6wQ1hABfhWKCbz_SY6GM.roa (hash: BUqUqz0zRzt+jltkuQPae7kaRGHqPqrUZusSMYIjZsw=)
                          7: wYadpHd2MX7rl23MXpoBrWpPMd0.roa (hash: ChsIKqBtAjttRoCTB73tSTtBmtG5Dj14Yia5A9yjnoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:ae:92:50:48:d0:ca:e7:8d:26:8c:44:26:f6:6a:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15136feff3574ef9b2262de59b06a21908fab3e
        Validity
            Not Before: Jul 27 07:00:11 2025 GMT
            Not After : Jul 28 07:00:11 2025 GMT
        Subject: CN=7227098c968b6c980451d162f79ab847a7a3a0e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:40:93:5f:83:88:41:78:af:55:1a:dc:99:de:
                    94:9e:f9:cb:a5:8e:17:47:07:88:5c:1e:e9:2e:fd:
                    4b:d7:9c:5d:f8:7a:9b:72:5a:59:60:21:54:64:1f:
                    07:d5:1c:a6:94:28:05:97:57:1e:ff:a4:f1:38:aa:
                    6e:68:b0:ed:67:b9:6e:e4:29:0d:1c:16:04:0d:d3:
                    aa:9f:3e:58:c7:8c:d5:69:b3:98:45:66:b2:b5:73:
                    b4:12:88:e0:db:74:85:75:39:9b:12:b5:4a:05:c5:
                    90:63:26:47:c0:1d:dd:c1:6a:dd:e7:47:0d:4e:f4:
                    ae:62:e0:d7:60:4d:3a:69:27:6b:64:7b:15:e1:60:
                    1b:95:21:df:91:f5:6c:a7:80:cc:d0:81:32:e9:6f:
                    33:75:66:5a:56:ac:25:58:88:57:cc:7a:0a:41:31:
                    f0:9e:13:42:b2:c3:6d:4d:08:74:b2:be:77:e1:ab:
                    c5:25:55:51:ad:34:c8:2b:e5:51:a5:11:38:51:9a:
                    84:37:0c:c5:7e:59:d2:e6:e8:af:c8:92:1c:d8:db:
                    98:a6:85:c6:38:5e:1f:ba:bb:53:00:b7:6f:f9:5e:
                    18:45:4f:db:91:06:16:fa:75:f0:52:a3:87:d2:2a:
                    61:b6:d5:91:a1:55:0e:00:b9:35:3d:30:60:70:4d:
                    aa:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:27:09:8C:96:8B:6C:98:04:51:D1:62:F7:9A:B8:47:A7:A3:A0:E6
            X509v3 Authority Key Identifier:
                keyid:E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:c8:c2:da:7a:da:bf:75:d2:8b:56:f3:53:bf:dd:8f:48:41:
         28:be:06:64:5b:8a:9d:11:6a:dd:84:0b:fd:85:4e:a8:b1:d3:
         43:92:81:62:7d:ce:3e:05:fa:84:3b:cc:e1:2c:79:6e:09:5d:
         7a:51:b9:91:96:5c:e7:28:08:45:f2:9f:e3:94:ca:0b:57:99:
         df:4e:34:ed:f5:2c:1b:e7:09:f7:e9:7b:78:61:88:9b:14:c4:
         33:e1:d6:8c:51:1b:f2:39:67:29:cb:9d:43:b6:71:76:94:f8:
         ce:6f:be:d2:92:0b:4f:57:42:55:9d:93:84:a8:9f:44:22:91:
         d7:3c:56:a7:6d:7f:16:3c:06:57:93:76:e8:1d:11:1f:f5:d1:
         06:20:8f:80:b8:2b:21:ca:8d:9c:b7:68:ef:f5:7a:05:b2:d2:
         06:bd:de:8a:5c:33:b2:26:a9:ea:73:a3:04:e3:89:ff:fc:60:
         80:09:cc:88:fa:9e:23:76:ee:55:64:ae:0d:db:6a:75:21:26:
         a8:44:1a:5b:1c:a6:bb:1a:b0:d3:14:68:8d:ce:ba:f7:03:11:
         56:82:9f:fc:c9:3c:43:28:5f:b8:9c:97:37:b6:ef:67:8f:0f:
         4c:48:19:0c:e7:e3:dc:4b:e9:50:31:55:3d:75:f5:e9:ce:7c:
         3e:98:11:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:04:57 2025 by rpki-client