Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
File:                     4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft (raw, json)
Hash identifier:          6p5NrV1LgFjJtSx3cdQpWBAqYYRwGzO8Iy0+dE38P5A=
Subject key identifier:   9F:35:F0:61:FB:6A:1E:5C:10:E7:0D:11:64:BF:6B:19:64:07:99:31
Authority key identifier: E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
Certificate issuer:       /CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Certificate serial:       0199221ED678F911D8F2822A9CD4A166F189
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
Manifest number:          1673
Signing time:             Sun 07 Sep 2025 03:01:10 +0000
Manifest this update:     Sun 07 Sep 2025 03:01:10 +0000
Manifest next update:     Mon 08 Sep 2025 03:01:10 +0000
Files and hashes:         1: 4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl (hash: NfPiOEwuykV6qajQ0etYL/KOq7bU2fWHckguof275VY=)
                          2: GTwCdmzWA6QaEWyYwKO0fp9YsNw.roa (hash: q4hcGqvhzh6uIbHfBuaV53eS+/uSJfnfNZEVM082vyA=)
                          3: nejv_OwVDfkOnJjwA5e7gYQjidY.roa (hash: FJcl36JaiMGpcbPH3v7IF+mtOr442ZnbZlg142+ovR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:d6:78:f9:11:d8:f2:82:2a:9c:d4:a1:66:f1:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e215be4532e9588c40531a7f331eabfbf4770a5e
        Validity
            Not Before: Sep  7 03:01:10 2025 GMT
            Not After : Sep  8 03:01:10 2025 GMT
        Subject: CN=9f35f061fb6a1e5c10e70d1164bf6b1964079931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7b:ea:e3:4d:56:bd:35:20:e9:4c:2e:24:9f:
                    f8:7c:95:79:92:38:c8:5a:0d:d2:87:48:89:48:16:
                    b3:0f:1c:c6:a2:38:7c:e8:02:3e:7f:78:48:ea:c1:
                    be:98:10:b7:85:68:13:68:31:02:e9:e3:b0:8a:db:
                    e7:83:bf:66:bc:8f:0f:34:2d:b5:f0:38:ce:02:f8:
                    98:5b:b1:b1:dc:f6:40:c2:78:b7:10:e1:d2:ab:3a:
                    1c:92:b1:c9:5e:c6:55:01:b9:02:c2:54:4a:1c:96:
                    99:54:d2:1d:1f:67:30:02:d5:08:31:81:52:01:46:
                    c1:16:85:89:cc:4a:41:c5:aa:65:73:3e:57:f2:7c:
                    a7:59:7b:0a:dd:51:29:d6:2c:51:e8:72:ac:6d:74:
                    d1:58:81:c6:f7:51:89:c3:55:5b:6c:11:3f:4e:ad:
                    2f:1f:3d:f7:1e:61:fb:39:c5:62:a4:2e:90:d7:27:
                    f4:03:e2:27:58:1e:22:43:e1:e2:19:75:2e:46:7a:
                    09:4a:b8:93:d0:ff:36:1c:24:00:12:d0:22:49:7d:
                    3d:15:ac:b3:ec:41:40:ac:36:c6:74:7e:07:45:22:
                    20:54:e2:8f:2b:3d:ce:31:50:5a:65:49:7e:eb:b3:
                    d9:e0:0e:9b:79:2f:69:f1:28:89:48:5d:71:01:81:
                    0f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:35:F0:61:FB:6A:1E:5C:10:E7:0D:11:64:BF:6B:19:64:07:99:31
            X509v3 Authority Key Identifier:
                keyid:E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:a7:7f:4d:30:63:21:f4:86:2a:e0:a3:a3:b9:09:cd:9f:c7:
         75:41:c0:c0:25:b7:bb:97:1d:83:d8:74:1d:fe:f6:cc:9c:81:
         bc:f9:64:9c:fe:0a:ab:a1:fe:80:5d:74:23:3b:8e:7f:fa:de:
         39:ed:46:30:39:dd:18:2e:70:2e:43:17:fe:a9:59:ba:03:5b:
         9f:01:d2:b0:f4:30:0a:48:8d:59:2e:8c:40:4d:39:af:80:75:
         fc:1a:ff:5d:ad:8c:b8:9c:15:be:51:8d:d4:f6:31:5e:47:fb:
         b9:46:f8:27:b5:83:50:c4:e6:45:3a:eb:29:5e:fa:87:8d:02:
         5d:ff:93:26:92:f2:31:8a:ee:cc:eb:03:90:28:63:b3:8b:50:
         91:f7:76:a4:e0:73:81:e7:50:da:b6:44:19:8b:20:5d:92:3e:
         d6:90:99:27:4a:77:a2:fd:78:f5:5e:20:98:fd:4d:34:3d:04:
         ba:77:e4:9a:53:f9:2a:f0:20:d6:21:26:25:98:04:6d:fc:26:
         f9:c9:06:c1:37:6c:46:6b:1a:b9:cd:aa:c9:fe:92:92:fe:a4:
         80:85:a5:26:3e:d6:bd:f8:6f:05:0e:a0:bc:df:01:de:cb:30:
         d4:85:84:68:25:2b:82:a0:8f:bb:ce:f8:a2:a9:de:99:2e:59:
         97:09:15:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHtZ4+RHY8oIqnNShZvGJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMTViZTQ1MzJlOTU4OGM0MDUzMWE3ZjMzMWVhYmZiZjQ3
NzBhNWUwHhcNMjUwOTA3MDMwMTEwWhcNMjUwOTA4MDMwMTEwWjAzMTEwLwYDVQQD
Eyg5ZjM1ZjA2MWZiNmExZTVjMTBlNzBkMTE2NGJmNmIxOTY0MDc5OTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXvq401WvTUg6UwuJJ/4fJV5kjjI
Wg3Sh0iJSBazDxzGojh86AI+f3hI6sG+mBC3hWgTaDEC6eOwitvng79mvI8PNC21
8DjOAviYW7Gx3PZAwni3EOHSqzockrHJXsZVAbkCwlRKHJaZVNIdH2cwAtUIMYFS
AUbBFoWJzEpBxaplcz5X8nynWXsK3VEp1ixR6HKsbXTRWIHG91GJw1VbbBE/Tq0v
Hz33HmH7OcVipC6Q1yf0A+InWB4iQ+HiGXUuRnoJSriT0P82HCQAEtAiSX09Fayz
7EFArDbGdH4HRSIgVOKPKz3OMVBaZUl+67PZ4A6beS9p8SiJSF1xAYEPbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ818GH7ah5cEOcNEWS/axlkB5kxMB8GA1UdIwQY
MBaAFOIVvkUy6ViMQFMafzMeq/v0dwpeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGhXLVJUTHBXSXhBVXhwX014NnItX1IzQ2w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS80ZWU4NWUtMjJjYi00MmVkLTkwNzEt
NDY1MWZkODAyNzM3LzEvNGhXLVJUTHBXSXhBVXhwX014NnItX1IzQ2w0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS80ZWU4NWUtMjJjYi00MmVkLTkwNzEtNDY1MWZkODAyNzM3
LzEvNGhXLVJUTHBXSXhBVXhwX014NnItX1IzQ2w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzKd/TTBj
IfSGKuCjo7kJzZ/HdUHAwCW3u5cdg9h0Hf72zJyBvPlknP4Kq6H+gF10IzuOf/re
Oe1GMDndGC5wLkMX/qlZugNbnwHSsPQwCkiNWS6MQE05r4B1/Br/Xa2MuJwVvlGN
1PYxXkf7uUb4J7WDUMTmRTrrKV76h40CXf+TJpLyMYruzOsDkChjs4tQkfd2pOBz
gedQ2rZEGYsgXZI+1pCZJ0p3ov149V4gmP1NND0EunfkmlP5KvAg1iEmJZgEbfwm
+ckGwTdsRmsauc2qyf6Skv6kgIWlJj7WvfhvBQ6gvN8B3ssw1IWEaCUrgqCPu874
oqnemS5ZlwkVEg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:45:22 2025 by rpki-client