Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
File:                     4jSU4MwSx1rtHQHesVvk4mYrSFo.mft (raw, json)
Hash identifier:          kqAJjMXp0bgfuPlMU1lbn8GYTFxiX5nm87y8ws4F4bA=
Subject key identifier:   07:93:B7:41:38:AB:EA:9E:5C:16:7B:22:5A:64:BE:12:6A:B5:92:64
Authority key identifier: E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A
Certificate issuer:       /CN=e23494e0cc12c75aed1d01deb15be4e2662b485a
Certificate serial:       019A2176F78E3859454AD8A2E8272DA82D7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
Manifest number:          09AB
Signing time:             Sun 26 Oct 2025 17:00:35 +0000
Manifest this update:     Sun 26 Oct 2025 17:00:35 +0000
Manifest next update:     Mon 27 Oct 2025 17:00:35 +0000
Files and hashes:         1: 4jSU4MwSx1rtHQHesVvk4mYrSFo.crl (hash: qsmQGwwH7cEfYGx1qoIYOk03eOc8FwIi7DKxE/ZCguM=)
                          2: LASSugvVGOxlTSqLMMa1Fpo5qcI.roa (hash: 7gLhtiJHn2UN7WnAAMzittKwA7y319dAzNsYcYCU/0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 17:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:21:76:f7:8e:38:59:45:4a:d8:a2:e8:27:2d:a8:2d:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e23494e0cc12c75aed1d01deb15be4e2662b485a
        Validity
            Not Before: Oct 26 17:00:35 2025 GMT
            Not After : Oct 27 17:00:35 2025 GMT
        Subject: CN=0793b74138abea9e5c167b225a64be126ab59264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:36:ff:b1:a3:5d:55:f3:d0:88:9f:7a:cc:63:
                    28:f2:2c:ca:fd:81:ae:c2:a8:57:cc:fe:9f:ab:ee:
                    bf:0e:c1:1f:fa:9c:6c:23:64:4c:40:80:86:9a:74:
                    0d:9c:44:93:5d:6d:11:c5:d8:06:b8:ce:13:72:d5:
                    bc:b3:5f:6d:94:f5:a9:c8:44:47:f8:a4:5d:02:c0:
                    ca:88:d3:af:ea:6d:7d:b8:a9:c9:93:16:92:51:21:
                    62:da:bb:14:ee:58:36:5a:fe:9e:63:cf:df:4c:19:
                    22:05:d2:7a:85:9d:fd:45:db:78:a1:96:e8:72:ec:
                    1e:6d:eb:ec:6f:53:5f:f8:4b:83:51:5e:c1:ce:8a:
                    52:1a:35:13:ac:d9:0c:6d:bd:4e:53:4f:dc:b9:78:
                    2b:e2:bf:37:b3:af:7b:ed:8a:49:37:7d:4a:16:84:
                    02:34:01:68:59:86:0c:ce:5e:c6:4e:ab:2b:a1:8a:
                    79:d0:b0:de:c9:d4:ce:b8:ad:17:34:bd:6d:5c:3b:
                    f6:ab:76:85:57:66:9e:9c:05:5b:27:74:fa:57:74:
                    bb:42:45:97:7b:db:1b:05:94:d7:82:f0:c1:f7:2f:
                    a0:3a:c8:aa:0c:40:9f:f9:87:6e:e9:60:f5:5c:8d:
                    72:89:37:47:f0:9f:ac:2c:bf:37:4e:20:7b:cd:ae:
                    09:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:93:B7:41:38:AB:EA:9E:5C:16:7B:22:5A:64:BE:12:6A:B5:92:64
            X509v3 Authority Key Identifier:
                keyid:E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:d3:13:8c:36:c4:bb:52:f4:c5:93:68:0f:78:b1:41:2d:36:
         ad:79:c5:9d:05:92:ff:5c:9d:3c:53:38:c2:2d:29:f5:7c:98:
         f9:80:7e:f2:27:e1:2c:e5:a5:88:e1:b8:b2:92:43:f7:89:f3:
         ee:bd:72:55:81:c9:f2:f3:a0:cc:84:76:3a:c5:28:0f:89:2a:
         63:96:f0:b5:7d:ff:bb:a6:fa:c6:1d:20:cb:78:8d:c9:cd:11:
         68:ec:12:ae:25:7d:b0:27:da:22:92:a3:12:22:48:fe:7a:99:
         56:94:79:2a:1b:2e:04:ce:e2:df:2c:60:f2:f7:56:cf:47:d5:
         3f:5e:c7:57:b3:4d:e6:ee:43:ab:fb:00:87:66:0d:2f:87:b3:
         47:9a:89:b6:93:19:7b:50:bb:ed:e8:bb:d6:14:fb:b8:9d:aa:
         dc:af:66:e3:9f:5c:9a:c0:19:07:ea:7e:08:06:b3:a3:38:9f:
         04:2e:7f:ad:56:28:1f:93:a7:b6:d8:2a:12:bf:1d:5e:ba:7b:
         3b:5b:86:d5:e4:20:64:60:60:5b:ae:9e:fc:e1:71:e6:d1:a9:
         3e:0b:aa:2e:f2:ab:9f:49:fa:fe:79:1d:57:d6:60:67:bb:70:
         c7:30:3d:ca:57:f9:d7:b0:18:95:19:5b:45:1c:5a:ab:a1:af:
         73:22:17:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:42:14 2025 by rpki-client