Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
File:                     4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft (raw, json)
Hash identifier:          mDsK/BrKyhTrQ146kjlgUz8ujKO1MHaNleTAkZ4Qsao=
Subject key identifier:   3C:C3:32:19:4E:19:58:FE:F6:EE:B7:9D:9F:AA:D8:63:31:24:E3:7D
Authority key identifier: E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5
Certificate issuer:       /CN=e2c137106c1a46aea07c24b11729fd7d216a24f5
Certificate serial:       019A059217DE5E41644C0D7504061E37F56E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
Manifest number:          0D2F
Signing time:             Tue 21 Oct 2025 07:00:51 +0000
Manifest this update:     Tue 21 Oct 2025 07:00:51 +0000
Manifest next update:     Wed 22 Oct 2025 07:00:51 +0000
Files and hashes:         1: 4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl (hash: UUTcdze3MSquBWLo2xfgzCzKNoIof673wRoDSiT3FFA=)
                          2: f9bSypnQ1K1dn8AOmITCAE2WfeM.roa (hash: laJDW9FEQ26/eBw7OzSphhRdw2m3zDOPQril8cOuxC0=)
                          3: qF1Sjwc0E4igMvbiTG0GFEV_V8w.roa (hash: C2rdzoCh63UKjy4imOMfxu3Z/XTp23zoXQCrUfaLgrk=)
                          4: wr0uj1SbyF4a3afbyHifWHkLV18.roa (hash: whbGKVVedV+YGL/Rez8V9NgGyEYM+j686HKrZpVv8SA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 07:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:05:92:17:de:5e:41:64:4c:0d:75:04:06:1e:37:f5:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c137106c1a46aea07c24b11729fd7d216a24f5
        Validity
            Not Before: Oct 21 07:00:51 2025 GMT
            Not After : Oct 22 07:00:51 2025 GMT
        Subject: CN=3cc332194e1958fef6eeb79d9faad8633124e37d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a4:0a:ff:c3:22:c5:00:d8:3c:63:72:df:c3:
                    b4:88:b6:42:1e:0e:18:03:42:88:ed:fb:e9:01:6a:
                    42:ab:ad:72:e4:04:6e:68:ba:f8:46:ad:01:2a:01:
                    b4:39:2a:c8:8e:73:ef:90:94:fa:4a:d1:11:ba:41:
                    f8:93:9a:4d:55:f3:68:47:03:ba:4b:45:f2:5a:6f:
                    30:18:e5:43:8f:3f:df:3a:f6:51:c9:79:e8:b1:c8:
                    5f:96:4c:14:92:b1:95:bc:89:a5:99:6c:65:0d:4a:
                    05:03:03:77:38:71:f7:00:d7:bd:82:12:ba:52:d0:
                    9b:4b:dd:52:64:04:77:ae:ea:32:c6:c7:e6:90:45:
                    05:5a:3c:66:95:45:e6:2d:d3:e6:7b:87:22:5b:05:
                    00:df:cc:3f:9b:d2:27:f1:37:19:b9:27:3d:03:d6:
                    b9:f0:9a:e2:12:99:d6:69:74:bc:24:e7:a3:e1:05:
                    06:95:3c:4d:28:01:1a:1e:f4:4c:0a:5b:1d:76:7c:
                    de:81:ad:48:cf:67:97:89:b1:34:37:b4:e4:7b:51:
                    20:ca:ff:18:ba:f5:13:97:d4:56:0a:21:a6:0c:7e:
                    d2:f8:de:84:1f:b8:d4:aa:d4:10:e8:4a:f1:ca:fd:
                    21:23:66:6e:2b:e7:a8:1f:47:29:16:3d:dc:38:67:
                    c9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C3:32:19:4E:19:58:FE:F6:EE:B7:9D:9F:AA:D8:63:31:24:E3:7D
            X509v3 Authority Key Identifier:
                keyid:E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:bc:f0:65:f3:48:d3:12:f3:64:e3:2a:67:7f:b3:2d:93:0d:
         7b:f1:be:1e:a8:8e:63:dd:b2:39:02:08:59:61:8b:fc:67:60:
         ed:62:77:2a:8b:e4:ec:89:e1:89:30:3a:52:31:d7:de:68:05:
         ad:cf:1d:79:ec:b6:fc:55:bf:bc:70:47:29:78:3e:40:d8:f3:
         83:6d:a5:f8:4e:22:8a:7f:96:f6:a9:b9:6a:6d:2b:75:d1:57:
         a8:f1:93:e0:64:65:74:8a:6a:eb:0d:92:66:1e:b3:93:cd:98:
         ea:b9:46:11:8e:17:ce:0a:3d:3e:03:d9:dc:dd:bc:3e:09:2a:
         44:03:20:e3:a5:c6:5a:3f:82:ed:82:5b:9f:b9:86:b0:d2:bf:
         d1:68:72:01:d6:c0:a5:5d:f4:a6:dc:f8:a7:05:f9:78:b5:8c:
         d2:66:c7:e4:31:2f:1d:7a:41:97:be:29:35:b9:36:cb:57:5d:
         68:98:71:64:47:00:7f:aa:3a:70:1e:f2:e7:4d:c9:50:e5:cb:
         27:be:b5:f1:9e:b9:bd:30:38:10:98:32:3b:d4:fb:8d:c1:af:
         1b:33:7a:6f:f3:b7:af:fd:13:9f:f5:73:98:d2:a7:e9:15:4a:
         33:bd:c0:d0:aa:35:92:1f:b9:25:ec:80:1e:ac:14:4e:48:c2:
         28:42:9b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 16:05:22 2025 by rpki-client