Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
File:                     SF4-4cMlgXX0_22bVZ2lTIPsC08.mft (raw, json)
Hash identifier:          USLhhPEy6sOUI0nRX1ZStEbY2u0S9/8QYklVLRUVl28=
Subject key identifier:   54:AF:45:0F:53:E9:A2:60:27:08:D2:E5:39:CB:CD:97:59:54:7B:7C
Authority key identifier: 48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F
Certificate issuer:       /CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f
Certificate serial:       019A217743EEB4DABBB91306D0CD59BE154D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
Manifest number:          16F6
Signing time:             Sun 26 Oct 2025 17:00:55 +0000
Manifest this update:     Sun 26 Oct 2025 17:00:55 +0000
Manifest next update:     Mon 27 Oct 2025 17:00:55 +0000
Files and hashes:         1: SF4-4cMlgXX0_22bVZ2lTIPsC08.crl (hash: PqHpDxzf42O7TAD+m8q4uyXO1mWxUXKhvjAcxreqf4g=)
                          2: ZopMcF1edsiLC5IB_2wqcv1pm7I.roa (hash: 9APA6+f5SQgw2656vPCnPyRgFDtV/KHCNYnrSKLYasE=)
                          3: fB9-x9nzQMLGXiKWPiofGOiCCDo.roa (hash: /Yz5duUUoV4QyYXJiuuC625duaCe5B8wdcwUeuj9HvE=)
                          4: l38wLN6Gw_epossfbuxRMwnX5sY.roa (hash: EA/nu4qnZGykrdQkMaUMT/48WUqEkVXJbnvFzsWJo70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 17:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:21:77:43:ee:b4:da:bb:b9:13:06:d0:cd:59:be:15:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f
        Validity
            Not Before: Oct 26 17:00:55 2025 GMT
            Not After : Oct 27 17:00:55 2025 GMT
        Subject: CN=54af450f53e9a2602708d2e539cbcd9759547b7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9c:c9:45:04:18:27:a1:e0:37:ad:ed:69:b7:
                    66:1a:e9:bd:ed:c0:fd:f6:43:5c:95:b4:9c:8e:b4:
                    89:b5:b1:21:3e:d7:1b:5a:17:d6:e8:dd:bd:df:0e:
                    c8:86:3b:fb:9a:6f:8c:ab:a2:4a:93:28:16:28:7c:
                    af:e1:e7:f0:c7:74:6f:77:fa:68:15:91:47:2e:e5:
                    e0:93:89:f6:de:d4:d9:44:1e:16:a3:04:43:87:9e:
                    0d:00:6b:15:95:2b:20:2c:63:ca:32:43:d1:30:cc:
                    c8:a1:ad:b1:a5:8a:85:e4:66:a8:4d:c4:17:b1:a5:
                    64:47:46:a1:bd:80:70:4f:39:68:7f:6a:bb:5d:0b:
                    60:fb:7b:31:b0:26:ca:cd:60:45:11:df:51:41:83:
                    16:07:e1:66:40:55:de:6f:af:83:d4:1a:38:8f:48:
                    de:d3:13:d6:16:70:a8:b2:11:e1:fe:99:5b:70:43:
                    52:49:db:3f:8f:82:4a:43:f8:01:ac:cd:9d:5b:e2:
                    c7:12:0e:7b:44:9d:12:87:6e:a7:7a:24:80:1a:a9:
                    1e:d5:c3:b4:a2:0c:55:d8:3e:8d:31:31:ac:1a:c7:
                    13:90:d3:08:e2:b3:ff:3a:8b:97:91:54:30:7b:0a:
                    d0:1b:42:fa:b3:cd:a3:11:c3:db:5c:f2:7b:02:0f:
                    7c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AF:45:0F:53:E9:A2:60:27:08:D2:E5:39:CB:CD:97:59:54:7B:7C
            X509v3 Authority Key Identifier:
                keyid:48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:66:1a:b3:4a:e6:44:0b:23:37:be:8a:b9:10:e6:53:d7:01:
         f6:6e:a1:d0:e7:9e:d7:77:f0:b2:5b:48:9e:1f:58:c4:3c:a6:
         c1:cf:89:17:ba:7e:06:f0:3b:7b:20:92:5f:54:ff:7a:73:e6:
         e1:da:33:02:96:64:3f:5a:ad:cf:62:53:94:4d:2e:15:58:f4:
         19:45:f7:d0:2d:12:2b:11:d6:25:ec:26:0b:87:8b:29:24:4d:
         28:60:76:4f:9b:38:c2:d3:c6:ff:0f:14:81:e9:d8:af:50:81:
         6b:0f:97:80:f6:71:21:17:33:4e:ff:d2:bc:78:20:cc:79:8d:
         2e:86:fd:b7:15:55:d1:1f:bc:51:9f:bf:e6:18:d1:9c:06:48:
         0e:56:d6:ad:26:b4:dd:a7:f7:aa:f8:06:28:f2:90:f8:6b:19:
         3b:2a:04:04:1a:b6:38:8c:ef:32:57:c6:85:a0:3c:0e:13:e8:
         4d:49:43:10:2f:cc:a7:bc:da:e8:3b:2a:ac:a9:59:11:85:71:
         56:7e:bc:6b:94:77:4a:3b:3c:51:41:e9:f0:98:4d:71:a5:db:
         27:42:86:53:b9:b4:75:5b:8f:44:ba:94:94:1f:c8:8e:a5:2a:
         d9:35:1a:4f:ad:e8:bc:b3:42:f6:e0:42:75:74:95:15:19:af:
         fa:e0:49:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:39:09 2025 by rpki-client