Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
File:                     4awDIrPqtlcuzioKxavxZKW7_yA.mft (raw, json)
Hash identifier:          D4xOltd3GFWlLeWcNz2O+j6OE/HVDbdI5dw4BkxPxJ8=
Subject key identifier:   30:82:B5:5E:67:CC:90:E6:70:64:C5:20:40:2B:E2:3D:9C:0B:FA:5E
Authority key identifier: E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
Certificate issuer:       /CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Certificate serial:       01992DEC81D0C9D89AD5BD0D58CA9E2D5AB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
Manifest number:          1681
Signing time:             Tue 09 Sep 2025 10:01:38 +0000
Manifest this update:     Tue 09 Sep 2025 10:01:38 +0000
Manifest next update:     Wed 10 Sep 2025 10:01:38 +0000
Files and hashes:         1: 4awDIrPqtlcuzioKxavxZKW7_yA.crl (hash: qCqx0PpeVEWmQxIuZW2yBwzkekC02WbevsNw7jR85do=)
                          2: 6L9DAlbkXK81Q7l3f78qPgHOMdg.roa (hash: H7lXA9IHNO8CGxsceOfFah+3Pwu6dBzOzorUprp44zU=)
                          3: AoQHR-c0TNu8hCvrBSny9rtvc-s.roa (hash: OjMzYAMFYdPVuu7HxYZKXpI6mzGVW1BBR3UyiRLx1pA=)
                          4: LDm4Z6KcMo2VYx3_khyYeC8O4Iw.roa (hash: zcLdl9fx/6GOLrBrDhcPW18T+TQSB2ZgDSkWNEHGluY=)
                          5: OVTjGADJ7YYJwQ0oJOwTN2X0vSY.roa (hash: qsBTTkXpQxhgbXJV5zUDTdGyL3Kcpnnbr12OpzsF9V0=)
                          6: eXkwSgVPS9XZOX05ekvLiV3Hea8.roa (hash: hwC7YsLscA1OGWq1yDoBRShx/gTjgCqvH47aihQduUg=)
                          7: iUA_IwEqfJ8BhVVMkLta3FBDcJI.roa (hash: g9DJpEgCtRPJxvNkDJtIioFWz51zGoXhXWCOUZKMHlI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 08:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2d:ec:81:d0:c9:d8:9a:d5:bd:0d:58:ca:9e:2d:5a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
        Validity
            Not Before: Sep  9 10:01:38 2025 GMT
            Not After : Sep 10 10:01:38 2025 GMT
        Subject: CN=3082b55e67cc90e67064c520402be23d9c0bfa5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:76:b7:79:58:e0:40:e2:13:4b:d1:61:a9:0c:
                    5a:37:30:f2:29:75:5a:62:b9:7f:19:33:16:da:19:
                    a2:ae:31:aa:be:4c:15:43:58:97:2e:7b:16:5a:e2:
                    2b:59:0a:2e:d3:9c:6e:b8:68:d2:60:1f:2e:00:e0:
                    4c:b1:5b:60:52:09:e6:bf:dc:a7:4e:46:65:28:16:
                    dd:34:a3:e7:69:1f:e3:ba:6c:1b:46:b1:e6:7a:c7:
                    85:39:60:cf:67:07:2e:fc:e1:8b:23:02:f7:a5:02:
                    ad:fe:07:37:c5:09:e9:c7:fb:4f:6a:ec:e9:54:cb:
                    c2:60:56:ab:3c:52:5f:b8:66:e9:bf:1d:ef:4b:e2:
                    8e:3e:85:f5:f9:3f:ca:f0:b7:f1:31:a8:58:37:c2:
                    a7:d4:21:f6:1a:c3:c0:54:59:43:92:9c:46:b3:5e:
                    ec:d9:62:5d:55:1a:f7:9e:3c:3b:e6:11:46:c9:22:
                    8d:5e:0f:59:19:0f:05:b9:fc:be:88:ac:6f:22:cb:
                    3f:3f:72:7f:55:cf:aa:7e:a9:e0:71:3d:e9:ce:f7:
                    12:71:ca:fe:de:d0:cd:0e:2c:d1:b3:68:10:90:c6:
                    f0:df:8c:6b:e0:c0:75:2d:31:68:bd:db:32:15:a7:
                    21:b3:d8:34:e6:1a:bd:ef:40:79:36:11:56:6f:30:
                    3b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:82:B5:5E:67:CC:90:E6:70:64:C5:20:40:2B:E2:3D:9C:0B:FA:5E
            X509v3 Authority Key Identifier:
                keyid:E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:3c:e1:8f:d0:c3:a1:79:d9:5a:7f:af:3a:dc:03:c6:f6:b8:
         ae:a0:f9:b3:cc:a1:e8:17:1e:c9:f8:c7:03:7b:21:a9:34:93:
         ae:95:7e:39:58:f0:ba:82:57:97:4d:f9:0d:f2:5f:5a:44:af:
         30:c8:10:2d:84:23:20:84:82:e8:19:a2:7c:a2:40:ad:f5:8c:
         00:94:93:10:6e:9b:50:2d:55:fa:b1:b7:7e:79:b3:40:75:ff:
         e8:d3:af:a4:8a:85:a9:c6:e0:3b:67:56:52:33:c4:39:b4:a6:
         5b:85:44:d1:c5:4d:e4:7f:0a:71:f9:81:ba:7b:7f:32:12:62:
         1b:c1:53:31:8c:29:ea:c8:c9:dd:14:ba:19:6f:1e:35:4f:55:
         1f:7f:cf:fc:16:cf:e5:d4:d1:6d:73:9c:fc:43:5b:56:92:c2:
         f2:d2:5d:d4:60:87:e9:bf:c0:61:d0:2b:51:e7:ec:83:74:50:
         90:30:67:80:77:81:50:49:29:2a:ce:1b:50:47:da:fa:a8:e8:
         d7:a7:c2:36:95:d2:ea:1c:4e:ef:d4:aa:c8:ca:42:dc:8c:30:
         f3:4d:e3:e0:c0:bf:90:24:64:05:c7:37:d8:05:3e:e4:6f:99:
         e6:5a:55:5f:a8:91:9d:71:8d:a3:dc:32:ae:a3:56:24:e3:ca:
         a2:0b:ed:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 17:51:53 2025 by rpki-client