Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
File:                     4g-H2rlrUPdu6kmxgeqU0mogUyc.mft (raw, json)
Hash identifier:          zEj/1LDc0jIhycc0pJbZGsgPzQY3ROZTOf3CNiaduZ0=
Subject key identifier:   44:71:69:64:06:A6:20:07:E8:9B:C4:97:C8:CB:D4:5F:C3:6F:70:34
Authority key identifier: E2:0F:87:DA:B9:6B:50:F7:6E:EA:49:B1:81:EA:94:D2:6A:20:53:27
Certificate issuer:       /CN=e20f87dab96b50f76eea49b181ea94d26a205327
Certificate serial:       019922FA8479B15B7441019D30E15BD94A2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
Manifest number:          1674
Signing time:             Sun 07 Sep 2025 07:01:07 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:07 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:07 +0000
Files and hashes:         1: 4g-H2rlrUPdu6kmxgeqU0mogUyc.crl (hash: DMiLFnLVvfis3oRMlR54ZEDTk+u10YGXldXtFj5gEQ0=)
                          2: 8e6EuYvdvJ1TbEt2w_l--VFTSVE.roa (hash: lEOGzvYRz251FXAafldpzBiZsWV7u1gV99thpvyYuY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:84:79:b1:5b:74:41:01:9d:30:e1:5b:d9:4a:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e20f87dab96b50f76eea49b181ea94d26a205327
        Validity
            Not Before: Sep  7 07:01:07 2025 GMT
            Not After : Sep  8 07:01:07 2025 GMT
        Subject: CN=4471696406a62007e89bc497c8cbd45fc36f7034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:72:26:f0:42:59:ed:5d:20:1c:45:06:0f:eb:
                    67:74:8b:db:59:86:ec:75:04:1c:61:8c:49:58:6f:
                    77:01:d8:56:72:cd:06:1c:5c:74:84:41:de:94:f1:
                    b2:e2:84:ca:b9:61:9e:be:7a:ce:ac:ac:89:12:ac:
                    96:69:2c:f5:62:9a:cc:c2:cb:d4:26:7c:c0:c0:72:
                    1c:38:24:5d:92:d4:71:0e:d6:9f:a4:3e:36:d4:53:
                    04:a2:2a:2b:1c:1c:10:a3:32:2c:00:fd:24:c3:7e:
                    79:47:fa:46:db:b3:7d:97:42:05:46:b7:56:e2:4f:
                    8e:1c:ab:6f:81:2d:c8:29:d0:12:3f:69:1a:b3:b3:
                    28:8b:51:c7:33:8d:bc:b6:6c:cf:83:a5:ff:80:eb:
                    1e:c5:3c:99:bf:a6:2f:41:27:ce:ed:fd:c5:22:7c:
                    a5:fc:e4:23:54:00:57:dc:8c:7a:14:3d:b6:91:71:
                    92:63:4d:68:12:4b:6c:21:5f:0c:da:9d:b1:8b:4d:
                    f8:c4:2c:dc:d4:27:a1:dd:6c:9f:34:ca:fc:44:7d:
                    66:39:21:11:f1:7a:51:4c:9a:4f:25:2d:69:78:fd:
                    24:d8:3b:0d:df:7c:39:7f:cc:24:59:ac:5f:c7:ca:
                    a0:66:9b:96:18:17:1c:80:f8:a4:ce:e9:f7:8a:61:
                    6d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:71:69:64:06:A6:20:07:E8:9B:C4:97:C8:CB:D4:5F:C3:6F:70:34
            X509v3 Authority Key Identifier:
                keyid:E2:0F:87:DA:B9:6B:50:F7:6E:EA:49:B1:81:EA:94:D2:6A:20:53:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:34:f5:03:9c:48:b9:91:1a:68:3e:76:42:64:bd:03:71:8e:
         69:f4:9c:ad:59:72:89:81:fc:33:c2:a7:fb:bf:27:42:c1:2f:
         84:e8:3f:20:06:e9:b0:73:0a:87:d5:e7:9a:52:b1:fb:34:59:
         c4:b9:3b:43:68:b7:40:d6:86:59:bb:55:2d:80:17:9e:c7:4c:
         69:4d:07:92:96:00:ec:4d:f1:4c:f5:6d:9b:f7:46:07:a0:a3:
         3a:49:97:da:d4:ff:d5:35:8c:82:68:ba:56:d7:b2:7d:2c:af:
         98:96:38:4e:e1:22:60:47:ef:21:a4:94:d9:09:dd:0c:7b:40:
         30:75:db:a2:c7:76:5d:e1:69:6e:a6:db:ef:cd:21:d4:ad:89:
         6e:f1:38:64:af:f5:46:4a:2b:9f:68:9b:04:5e:13:f1:4a:70:
         4c:1b:0c:c1:46:9c:11:ac:b0:e2:fd:06:a6:4d:d9:5a:66:f8:
         f7:7d:0d:72:ff:3f:1a:7d:0c:7f:94:f5:58:f7:23:25:58:ab:
         53:1e:c5:33:2d:c0:bb:6a:4f:a6:9f:9f:b1:ae:82:8d:74:13:
         fd:c8:af:91:f5:21:46:07:52:34:a1:53:ee:46:7c:29:ed:e2:
         47:6f:be:2a:4e:da:df:80:90:4a:fe:0e:00:08:da:c6:95:4d:
         a5:b3:32:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+oR5sVt0QQGdMOFb2UosMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMGY4N2RhYjk2YjUwZjc2ZWVhNDliMTgxZWE5NGQyNmEy
MDUzMjcwHhcNMjUwOTA3MDcwMTA3WhcNMjUwOTA4MDcwMTA3WjAzMTEwLwYDVQQD
Eyg0NDcxNjk2NDA2YTYyMDA3ZTg5YmM0OTdjOGNiZDQ1ZmMzNmY3MDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHIm8EJZ7V0gHEUGD+tndIvbWYbs
dQQcYYxJWG93AdhWcs0GHFx0hEHelPGy4oTKuWGevnrOrKyJEqyWaSz1YprMwsvU
JnzAwHIcOCRdktRxDtafpD421FMEoiorHBwQozIsAP0kw355R/pG27N9l0IFRrdW
4k+OHKtvgS3IKdASP2kas7Moi1HHM428tmzPg6X/gOsexTyZv6YvQSfO7f3FInyl
/OQjVABX3Ix6FD22kXGSY01oEktsIV8M2p2xi034xCzc1Ceh3WyfNMr8RH1mOSER
8XpRTJpPJS1peP0k2DsN33w5f8wkWaxfx8qgZpuWGBccgPikzun3imFtowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERxaWQGpiAH6JvEl8jL1F/Db3A0MB8GA1UdIwQY
MBaAFOIPh9q5a1D3bupJsYHqlNJqIFMnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGctSDJybHJVUGR1NmtteGdlcVUwbW9nVXljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zZmJhMDUtZGFlZC00M2I3LWI4NzAt
ZmEwMmMxMjY1ZDVlLzEvNGctSDJybHJVUGR1NmtteGdlcVUwbW9nVXljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8zZmJhMDUtZGFlZC00M2I3LWI4NzAtZmEwMmMxMjY1ZDVl
LzEvNGctSDJybHJVUGR1NmtteGdlcVUwbW9nVXljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHTT1A5xI
uZEaaD52QmS9A3GOafScrVlyiYH8M8Kn+78nQsEvhOg/IAbpsHMKh9XnmlKx+zRZ
xLk7Q2i3QNaGWbtVLYAXnsdMaU0HkpYA7E3xTPVtm/dGB6CjOkmX2tT/1TWMgmi6
VteyfSyvmJY4TuEiYEfvIaSU2QndDHtAMHXbosd2XeFpbqbb780h1K2JbvE4ZK/1
Rkorn2ibBF4T8UpwTBsMwUacEayw4v0Gpk3ZWmb4930Ncv8/Gn0Mf5T1WPcjJVir
Ux7FMy3Au2pPpp+fsa6CjXQT/civkfUhRgdSNKFT7kZ8Ke3iR2++Kk7a34CQSv4O
AAjaxpVNpbMy8w==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:38 2025 by rpki-client