Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
File:                     ToWU69x9fPfaLgA8hNhqfBr4cbw.mft (raw, json)
Hash identifier:          VmccXAibmIygJlv4Va5B6CeRZej7VVr4/9OGGRJSuwk=
Subject key identifier:   E3:90:FC:7B:0E:CB:FC:F6:F4:26:3F:0B:1B:18:5F:39:EC:DB:07:1E
Authority key identifier: 4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC
Certificate issuer:       /CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc
Certificate serial:       019840D01AC2CB7624AC35F28235F9BD56D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
Manifest number:          049F
Signing time:             Fri 25 Jul 2025 09:00:36 +0000
Manifest this update:     Fri 25 Jul 2025 09:00:36 +0000
Manifest next update:     Sat 26 Jul 2025 09:00:36 +0000
Files and hashes:         1: GanlBJdb2pr7VV04ogaTHUPUlUg.roa (hash: Vbl6ZyOGtSJws1SpPK0y8iRHBk5yj2N+r0ihm4gCy0w=)
                          2: ToWU69x9fPfaLgA8hNhqfBr4cbw.crl (hash: hCzbllQ4TGUk8Ow4FVlBjpMQ/s3FOosbsiUdCyXLV04=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 08:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:40:d0:1a:c2:cb:76:24:ac:35:f2:82:35:f9:bd:56:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc
        Validity
            Not Before: Jul 25 09:00:36 2025 GMT
            Not After : Jul 26 09:00:36 2025 GMT
        Subject: CN=e390fc7b0ecbfcf6f4263f0b1b185f39ecdb071e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:81:38:4f:07:03:43:79:7c:92:5d:96:cc:8d:
                    ef:d0:00:2e:41:6a:1b:98:c7:52:10:9b:c6:db:9d:
                    77:5c:e1:ba:6c:00:af:47:bd:db:4d:62:c0:11:9c:
                    bf:1f:77:4d:a3:9f:82:d7:03:75:ae:b0:75:ed:11:
                    70:59:79:5e:9d:78:77:21:fe:95:59:90:92:f8:eb:
                    48:b3:c3:53:9c:33:7f:fa:36:42:d0:3b:a8:22:18:
                    31:35:05:a0:4b:51:52:58:d8:6b:f1:96:d1:b7:0c:
                    cd:b7:bf:6d:06:9d:f2:ac:ce:3f:95:17:3b:d1:d6:
                    c4:08:20:67:93:00:70:32:28:14:ca:c2:88:e5:12:
                    f7:2f:b7:44:94:63:44:8e:65:0e:2e:6b:f8:d9:0a:
                    c7:9e:f0:55:96:4f:82:67:44:f1:a8:7d:c6:30:ab:
                    1f:26:10:5f:3a:91:47:2d:21:a9:fc:ae:f8:9e:f7:
                    ea:2e:40:fc:a9:a8:de:bd:54:3b:d3:83:48:90:cd:
                    c6:85:70:82:d7:2a:8c:d4:85:59:39:25:df:72:c4:
                    35:0e:19:51:87:77:9b:6c:01:b7:47:cc:03:46:e0:
                    12:cc:6a:c7:ef:26:69:c9:a8:6f:37:1a:75:67:0b:
                    86:70:f5:49:2f:4c:06:d4:b8:e6:49:db:9f:da:93:
                    65:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:90:FC:7B:0E:CB:FC:F6:F4:26:3F:0B:1B:18:5F:39:EC:DB:07:1E
            X509v3 Authority Key Identifier:
                keyid:4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:61:d4:ed:40:5a:3f:e2:f2:06:6d:2a:53:22:c1:b1:eb:a8:
         66:ea:38:0a:fc:c3:72:c9:91:4e:82:6f:65:5f:39:ff:4e:de:
         12:38:2a:f8:aa:a5:fa:1d:77:cd:d1:e1:ea:d6:e2:fb:28:5c:
         4e:ba:bf:1d:85:ed:e4:7e:30:50:2f:c1:01:18:d2:c4:74:66:
         08:20:30:13:ae:13:b4:4f:c8:a3:f6:05:b8:e1:f0:ab:e6:3e:
         01:19:ed:91:75:be:e9:c5:66:65:c0:77:9a:c5:e4:a6:8c:c2:
         74:26:cd:ae:09:9e:f9:9a:30:38:3a:9f:4d:b0:12:7c:6c:e2:
         a1:1c:c9:e6:ae:b5:60:4a:26:2c:dd:aa:a5:23:bc:ae:ef:5f:
         6f:04:c7:83:2e:bf:22:60:e7:60:5b:08:cd:90:4a:4a:be:a1:
         2e:84:1c:09:6e:af:a7:bd:b3:78:da:29:25:80:54:5b:72:32:
         f7:bb:71:35:2e:d6:04:6f:09:7a:2d:34:d1:3c:da:b4:11:64:
         61:e7:c4:73:cd:09:69:f3:72:21:c1:5a:ba:d7:fb:f2:06:ac:
         aa:e8:e9:3c:8c:cd:26:72:7f:2d:78:72:8c:10:0d:43:5b:8b:
         1c:d7:05:da:75:e3:40:4a:e9:88:1e:e1:04:2a:ab:b8:5b:08:
         cf:d1:53:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 15:50:00 2025 by rpki-client