Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
File:                     4cg4iRtR4GfqLr-aRNloAUhWLpY.mft (raw, json)
Hash identifier:          Ra8QHDqbB4DkJyM5jWouwfGBPrlQZ+Wzjagt9rrUQyA=
Subject key identifier:   F0:16:87:1B:4D:34:33:58:E0:BF:67:A9:E2:18:33:E8:41:EB:05:99
Authority key identifier: E1:C8:38:89:1B:51:E0:67:EA:2E:BF:9A:44:D9:68:01:48:56:2E:96
Certificate issuer:       /CN=e1c838891b51e067ea2ebf9a44d9680148562e96
Certificate serial:       019848893EA62AC5537BE67A5D57BB3499B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
Manifest number:          0F28
Signing time:             Sat 26 Jul 2025 21:00:10 +0000
Manifest this update:     Sat 26 Jul 2025 21:00:10 +0000
Manifest next update:     Sun 27 Jul 2025 21:00:10 +0000
Files and hashes:         1: 4cg4iRtR4GfqLr-aRNloAUhWLpY.crl (hash: J2lfQ+uZ5B/OCBtzCAUoGt8xqfBfdTAs6NkJZHKk9AA=)
                          2: bmdi-xlLqO-hV5jpMLaaLmUh0MY.roa (hash: fx7rUOLjdEuqg3ZsveozXFH6Izun+R1RWfyBZEftQT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:89:3e:a6:2a:c5:53:7b:e6:7a:5d:57:bb:34:99:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1c838891b51e067ea2ebf9a44d9680148562e96
        Validity
            Not Before: Jul 26 21:00:10 2025 GMT
            Not After : Jul 27 21:00:10 2025 GMT
        Subject: CN=f016871b4d343358e0bf67a9e21833e841eb0599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0b:b6:0a:11:35:d3:e5:1c:cc:5d:7a:67:83:
                    4d:6e:87:88:fb:06:f7:59:be:49:e0:a0:09:4a:64:
                    d3:6b:40:91:33:0f:52:c4:d7:0f:e0:7f:46:a2:27:
                    a3:6f:8d:61:83:07:46:4a:cb:8a:bc:26:a9:63:27:
                    df:b7:d5:f9:5b:e3:85:7b:d3:76:4e:13:96:ec:82:
                    df:1f:bf:d8:bb:bb:fc:94:6a:bb:86:63:80:46:a6:
                    82:fc:14:f7:b9:26:63:2e:c5:a4:9e:ec:6d:c3:c8:
                    63:96:27:df:14:87:56:13:1b:0e:82:6a:38:ce:bb:
                    5a:c4:83:0a:e6:13:a7:b8:15:1d:f6:a9:6c:59:1a:
                    c1:fc:79:19:a2:e7:c9:db:83:22:7e:1d:c7:c3:54:
                    19:8b:89:74:b4:15:50:7e:4c:2b:7d:eb:ee:da:ad:
                    1d:99:ba:3f:fe:8b:31:c0:32:14:9c:d7:ca:c6:11:
                    ad:bc:b5:43:82:46:c2:6c:95:d1:aa:6e:ae:a7:90:
                    8c:ee:b8:07:df:30:53:1f:3a:55:ce:86:ef:92:01:
                    68:ed:23:8d:0a:81:cf:c4:b4:a3:af:1f:8d:ee:40:
                    0b:90:69:34:a4:03:ec:04:57:de:42:2b:99:5f:ce:
                    5c:c0:51:37:c9:a7:a7:7f:e2:85:47:00:e0:1b:b1:
                    54:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:16:87:1B:4D:34:33:58:E0:BF:67:A9:E2:18:33:E8:41:EB:05:99
            X509v3 Authority Key Identifier:
                keyid:E1:C8:38:89:1B:51:E0:67:EA:2E:BF:9A:44:D9:68:01:48:56:2E:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:4d:ef:8c:c1:4f:41:19:59:3b:2c:3e:5e:4c:3f:6e:f0:07:
         9a:43:5b:de:02:f9:9b:19:cf:cd:3d:4c:c2:f6:96:4d:4d:4d:
         94:37:c8:c0:72:6b:2f:5e:a8:0f:23:d6:c3:ff:2d:74:f1:1c:
         45:08:62:ad:cc:ee:59:02:1d:83:b7:2c:18:7e:fc:e3:3b:1d:
         d1:0d:19:a1:0c:72:b3:0f:81:9e:ea:ae:70:e2:cc:26:a9:7e:
         d8:41:b0:3a:79:7c:a0:a8:37:9f:3c:a8:de:37:26:c1:38:0c:
         ef:d3:ad:0e:ab:1f:3a:29:96:19:56:56:14:51:39:56:f1:7a:
         8e:76:7b:30:dc:e4:a6:57:87:f6:6f:e4:a4:32:f0:0c:9f:a1:
         05:2e:43:d3:1b:9c:36:a3:0f:69:cd:8d:79:d0:23:c6:da:a6:
         ef:6a:95:a3:35:5f:30:70:d4:8c:bc:47:aa:f8:7b:55:0d:fa:
         79:dd:a2:65:bf:34:16:99:4a:19:41:39:5d:59:aa:2e:ba:2e:
         ea:21:65:e8:8d:67:c1:bf:d3:cb:44:ba:5b:0e:70:7c:6f:6b:
         80:ed:6d:88:b0:7b:fc:5a:6d:5d:2b:70:1b:23:b3:9e:56:cb:
         82:7b:1c:c1:58:f8:f1:a2:2c:8c:33:d0:23:c9:51:ee:65:e8:
         73:18:43:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:56:42 2025 by rpki-client