Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
File:                     m4Me6Uw3ubEVnH13MpNhgatUHYA.mft (raw, json)
Hash identifier:          Ox/7dIl+v44FvrN5UFjlsGqJAAnYx6xDOn9wLAOYADc=
Subject key identifier:   89:0C:16:35:C7:32:B0:E4:8B:B1:C3:76:53:E0:53:D2:F8:CA:B1:47
Authority key identifier: 9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80
Certificate issuer:       /CN=9b831ee94c37b9b1159c7d7732936181ab541d80
Certificate serial:       0198469AD6C4CCAA6DF433303AE382B7E9C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
Manifest number:          1602
Signing time:             Sat 26 Jul 2025 12:00:09 +0000
Manifest this update:     Sat 26 Jul 2025 12:00:09 +0000
Manifest next update:     Sun 27 Jul 2025 12:00:09 +0000
Files and hashes:         1: m4Me6Uw3ubEVnH13MpNhgatUHYA.crl (hash: QfZeDJG2ipPqAsWHUjkzX7Bm4zfweWDmwJvn1THe/uw=)
                          2: q2ym0slk0xbm2oB654qSKIP-iHM.roa (hash: T79hvxao/FCQThpWza9B8knVI82t4LDRrMr2rSD4Axs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:9a:d6:c4:cc:aa:6d:f4:33:30:3a:e3:82:b7:e9:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b831ee94c37b9b1159c7d7732936181ab541d80
        Validity
            Not Before: Jul 26 12:00:09 2025 GMT
            Not After : Jul 27 12:00:09 2025 GMT
        Subject: CN=890c1635c732b0e48bb1c37653e053d2f8cab147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:44:2c:53:42:9c:78:2f:b0:75:b6:1f:2a:64:
                    f9:cf:f0:38:f8:41:a2:ad:42:99:16:50:85:18:ec:
                    ff:f9:b2:47:4a:6f:e2:dc:a3:2b:b2:5f:04:25:cb:
                    a6:e2:51:e3:a5:12:ed:e9:bd:9e:e8:dc:9a:a7:f3:
                    8c:06:42:07:a3:89:a1:f8:32:99:f6:c6:b7:c9:03:
                    44:44:09:77:28:74:5a:84:9c:2c:ce:9f:90:1d:ef:
                    06:7a:d9:b1:57:6d:3b:d2:ce:ea:ff:35:5b:2b:b3:
                    2e:8a:80:51:d9:ea:76:96:5e:12:a5:32:8e:04:29:
                    f7:c6:2b:ea:15:7a:b5:5a:d6:16:83:83:93:db:4d:
                    05:60:f4:e5:7e:4f:37:26:c0:d6:37:b9:2c:15:3e:
                    6c:c7:07:8a:8d:57:ca:fb:39:41:ba:6d:80:ac:19:
                    71:14:84:dd:52:f8:86:1e:75:cb:fd:17:b4:87:2c:
                    df:cd:84:27:a9:0b:a6:84:9d:1e:08:5a:31:f1:f2:
                    89:33:c1:9e:f6:1b:39:f3:4a:75:69:da:81:39:79:
                    6f:8b:8c:3b:46:01:47:3c:e8:88:a9:72:a0:0d:f9:
                    5d:26:74:e8:bb:7e:fc:80:2e:b8:ad:08:3c:29:98:
                    7d:99:87:0e:ee:a4:92:0d:fe:b3:b4:68:31:44:0b:
                    56:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0C:16:35:C7:32:B0:E4:8B:B1:C3:76:53:E0:53:D2:F8:CA:B1:47
            X509v3 Authority Key Identifier:
                keyid:9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:86:9f:69:58:c7:c3:81:3b:ce:75:78:0e:ff:f2:24:75:ab:
         22:c0:ed:c9:de:c9:41:4d:b0:12:56:dd:90:d7:86:3c:ff:23:
         17:75:ac:11:22:3b:9f:3d:17:2d:3f:89:96:ba:dd:1b:70:0b:
         7c:47:1a:17:3d:09:d9:ff:f6:bb:47:38:7f:bb:16:fb:0f:4b:
         01:79:1f:95:c2:61:96:3a:21:4b:b3:63:43:0f:14:d6:f8:9f:
         a8:04:3c:66:07:92:ab:33:6b:1d:40:91:a4:79:b2:3b:aa:f6:
         3f:55:2a:6b:5e:64:a6:da:40:bb:63:87:e9:8e:91:0a:d9:b9:
         db:13:6f:85:40:d7:a8:9e:91:fb:10:0b:fd:76:76:48:13:30:
         2e:d1:05:60:20:c6:e2:75:24:b3:18:76:cd:6f:f0:04:42:fe:
         52:b5:46:d2:79:11:b7:1f:ac:b4:3d:4c:93:15:a8:11:c8:f0:
         3a:25:cd:e2:bf:6d:8b:c5:2c:e6:db:7c:a6:4b:72:d2:a2:df:
         3f:f4:7e:06:ca:35:55:c8:29:28:2a:59:0a:74:85:bc:3d:d4:
         2f:a4:71:44:42:31:f8:0d:17:db:12:cf:11:41:a2:14:39:aa:
         cd:87:b9:73:20:a7:0a:f3:2c:e8:fc:25:d4:99:04:6b:8e:18:
         33:da:c1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:08:30 2025 by rpki-client