Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.mft
File:                     4GMUdXVI8HToT68_y7e4LYLe8-U.mft (raw, json)
Hash identifier:          PxK6juP936PNDK+fdqiZU5PW9bRRlIrM9qJ+uHg1Is4=
Subject key identifier:   8C:1E:F0:ED:3B:9D:F8:D3:D6:A2:6C:74:E9:1E:ED:26:1F:76:40:95
Authority key identifier: E0:63:14:75:75:48:F0:74:E8:4F:AF:3F:CB:B7:B8:2D:82:DE:F3:E5
Certificate issuer:       /CN=e06314757548f074e84faf3fcbb7b82d82def3e5
Certificate serial:       019848C0C61F1351144D46ED252AEC7DEFD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4GMUdXVI8HToT68_y7e4LYLe8-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.mft
Manifest number:          1605
Signing time:             Sat 26 Jul 2025 22:00:49 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:49 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:49 +0000
Files and hashes:         1: 4GMUdXVI8HToT68_y7e4LYLe8-U.crl (hash: jsuhI8AJCsIqZhSKRSzCfgvsKFr/1izbpONFfm0I6r0=)
                          2: _uc6ePERzBPoPdpauMr-UXjyyZU.roa (hash: vCpgESgcY5qI/pPtl3hBvs20Co9NLRffYPoazf5J82E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4GMUdXVI8HToT68_y7e4LYLe8-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:c6:1f:13:51:14:4d:46:ed:25:2a:ec:7d:ef:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e06314757548f074e84faf3fcbb7b82d82def3e5
        Validity
            Not Before: Jul 26 22:00:49 2025 GMT
            Not After : Jul 27 22:00:49 2025 GMT
        Subject: CN=8c1ef0ed3b9df8d3d6a26c74e91eed261f764095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:61:9b:89:60:9d:2d:71:0a:f7:96:51:6d:8a:
                    71:0a:b6:03:ee:90:7a:c7:5e:2d:5c:51:e8:e1:00:
                    8e:1d:67:75:ab:b6:7e:63:ae:03:3c:48:23:b8:42:
                    55:c5:a2:dc:53:fa:3a:e9:3d:a1:6f:ed:de:50:e5:
                    2e:e3:69:5a:b8:d0:8f:5b:4f:16:e6:89:d2:3a:db:
                    67:24:78:80:b0:3b:43:f2:a7:25:16:5d:46:a7:f9:
                    ed:7c:92:c6:01:6f:9b:8a:94:39:80:d8:36:da:e0:
                    95:cd:b3:46:be:bf:a6:eb:22:46:42:bd:59:40:13:
                    86:dc:4e:5b:54:3a:cf:67:e5:72:22:be:a4:50:e2:
                    15:6a:b6:ea:f8:c7:c0:1b:d7:cd:c5:2e:13:fb:5c:
                    e3:52:c5:ef:b1:ef:2e:13:f7:75:f6:9a:f2:0d:60:
                    64:b2:79:79:7f:88:a2:a7:54:2a:ae:64:c3:ba:5e:
                    e0:01:c7:c1:52:2f:6f:ba:3a:2b:e1:e8:4f:4a:e1:
                    06:dc:8e:aa:15:5b:c0:9a:c2:79:7c:c8:bb:32:7f:
                    dd:1b:a8:74:4f:d6:be:80:d1:d0:03:15:55:01:21:
                    7e:08:aa:c7:1d:fc:fd:41:64:a4:fc:c8:3f:a1:a7:
                    d3:af:7d:09:56:b0:0f:de:54:d7:e1:71:a7:87:20:
                    43:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:1E:F0:ED:3B:9D:F8:D3:D6:A2:6C:74:E9:1E:ED:26:1F:76:40:95
            X509v3 Authority Key Identifier:
                keyid:E0:63:14:75:75:48:F0:74:E8:4F:AF:3F:CB:B7:B8:2D:82:DE:F3:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GMUdXVI8HToT68_y7e4LYLe8-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:63:ed:58:85:ea:d3:4a:52:f0:41:d4:26:9f:54:b6:47:92:
         e5:ef:36:f0:52:67:c6:b7:88:09:2d:d4:a2:35:89:d0:03:e5:
         75:9f:9a:e1:53:b2:89:44:47:ad:02:13:ca:af:88:6c:21:2a:
         3c:4d:d7:4b:f0:ed:53:74:02:4e:fd:ea:6a:91:27:c5:6f:45:
         e7:40:22:a7:91:69:b6:b4:33:0a:3c:61:17:0c:a7:f7:31:9a:
         da:cb:e0:18:03:4d:bd:94:ac:07:34:62:a9:96:7e:e3:09:d2:
         3f:3a:70:e7:54:ee:f8:b4:82:6e:57:2b:84:f2:4b:91:8f:39:
         47:d0:c4:c7:73:bc:b4:db:8e:0a:5b:85:93:01:e8:db:37:47:
         ff:80:9a:dd:56:33:c9:be:51:ef:57:a7:48:29:5f:72:84:0e:
         0a:3a:96:91:dc:40:57:5c:7c:8b:86:37:3a:37:5b:45:64:d8:
         2c:13:ea:cb:c7:5a:3a:3a:97:d3:84:71:7c:65:96:4f:ec:c5:
         43:9b:9f:cf:90:86:ef:4c:f8:24:87:c2:96:97:3d:b2:be:10:
         9a:28:9b:03:ec:6d:29:e1:4c:e6:92:4f:40:64:a3:7c:f4:ba:
         bd:07:ee:8d:57:14:26:d3:7e:7b:92:7a:5a:f3:d5:3f:ac:3c:
         6f:99:6c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:24:57 2025 by rpki-client