Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft
File:                     4PL1Rd2yNOOD02uKjWtWo43XL4k.mft (raw, json)
Hash identifier:          qWJ3pLqixxNJrAueK0LXQ/7YDaCqmSRQ+UQTpywno/4=
Subject key identifier:   A0:EF:98:78:FD:BE:5D:DE:0F:DE:03:9F:18:78:B3:29:9A:A5:2E:D3
Authority key identifier: E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89
Certificate issuer:       /CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89
Certificate serial:       019826A269B20A62E07EE8B50E4848E58A90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft
Manifest number:          0801
Signing time:             Sun 20 Jul 2025 07:00:34 +0000
Manifest this update:     Sun 20 Jul 2025 07:00:34 +0000
Manifest next update:     Mon 21 Jul 2025 07:00:34 +0000
Files and hashes:         1: 4PL1Rd2yNOOD02uKjWtWo43XL4k.crl (hash: Jd3UCcSYCebYp7ycOTdECYGZgXn0nRYltYySYc2awzY=)
                          2: XiEwAhXSmb2kKQcnLFCKbFJrlrE.roa (hash: Yd4FhLWqP85JzI7J+m2iFxGbkWfW5fOZQ9iT2O1gqws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 07:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:26:a2:69:b2:0a:62:e0:7e:e8:b5:0e:48:48:e5:8a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89
        Validity
            Not Before: Jul 20 07:00:34 2025 GMT
            Not After : Jul 21 07:00:34 2025 GMT
        Subject: CN=a0ef9878fdbe5dde0fde039f1878b3299aa52ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ec:51:72:66:ee:82:6b:48:80:54:4c:67:79:
                    7d:67:a2:eb:e5:66:c1:f1:06:b2:61:87:b5:a6:40:
                    98:56:11:f8:69:24:51:7d:87:9d:9e:5a:fd:55:76:
                    4b:45:51:39:a1:42:57:85:6e:68:1c:d6:c4:72:12:
                    4f:4a:c9:51:88:13:ad:5b:b3:d7:ec:93:b0:9f:a4:
                    7f:5d:06:91:a2:b9:43:75:96:91:bf:ac:0d:ed:29:
                    f9:36:cf:83:29:4a:a3:d6:fe:24:a9:90:66:ff:09:
                    1c:ba:f9:ec:95:ac:db:e9:b6:43:5b:88:8d:26:44:
                    8f:8c:fd:d7:be:5d:30:de:f0:89:53:d1:71:6f:2a:
                    3f:45:98:88:16:fb:6a:ad:38:8a:c6:4e:3a:98:fd:
                    f5:2d:b0:ec:62:4c:21:a2:73:c7:02:f6:9c:7a:d2:
                    5f:c1:e5:64:b9:f3:3f:ac:3e:b3:37:36:f1:93:c5:
                    f1:ed:1f:4d:ea:dd:53:92:23:38:c7:53:d7:64:dd:
                    2e:f4:f5:1a:00:11:52:a1:26:12:65:f4:38:e5:2e:
                    ef:83:33:cc:f3:5d:a3:3b:88:05:cb:0d:bd:ba:cc:
                    7e:74:79:bb:ed:a3:f2:91:39:be:a1:5f:68:cb:09:
                    69:4f:99:5d:2d:d8:cf:b8:b1:ac:ed:a5:d1:37:31:
                    f1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:EF:98:78:FD:BE:5D:DE:0F:DE:03:9F:18:78:B3:29:9A:A5:2E:D3
            X509v3 Authority Key Identifier:
                keyid:E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:e3:f2:a1:19:dc:32:95:3d:bb:1d:f1:ef:2a:1d:cd:5a:59:
         40:05:c4:3c:cc:f2:72:00:d0:2a:6d:10:f3:1f:bb:42:4e:52:
         46:0b:af:45:88:23:4c:6f:a0:08:a7:82:79:db:9f:fc:c6:fc:
         f3:c0:ef:c4:41:bb:cd:d9:5a:cb:16:47:ce:84:b8:a0:36:bd:
         23:dd:6e:9e:e2:45:0f:f2:bf:d2:5c:b3:78:1c:7f:8c:19:ac:
         c7:07:05:7e:e0:2d:41:be:b6:ab:71:6a:9d:01:c9:4f:8e:d1:
         d1:94:49:f0:ed:f7:f6:c2:18:40:74:0a:3f:f6:f9:6b:78:cd:
         c2:f0:e6:4f:0e:58:c2:49:84:99:16:27:33:42:d8:dd:20:b8:
         9b:67:ee:d6:bd:88:b3:c7:51:d2:cb:81:67:aa:d1:47:cc:97:
         d3:56:1b:08:a9:ef:fa:4e:f2:3b:d5:25:66:01:09:a1:93:01:
         ea:86:ae:83:72:f5:2a:77:aa:8d:bd:39:1f:26:f9:fa:6a:56:
         f9:28:27:c9:e7:75:4e:a6:0e:e2:5e:24:53:50:36:93:4b:11:
         a4:eb:4e:41:9d:bf:ca:06:7d:f6:1d:91:a3:50:ff:71:7d:c5:
         32:a7:ef:d0:7c:cc:b0:2a:d6:6a:17:63:2d:51:26:86:39:77:
         69:c9:cb:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:24:48 2025 by rpki-client