Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
File:                     4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft (raw, json)
Hash identifier:          eZ9ITxPFoz0P+FtPCF28ZGLdM8K9bAOczEUFt+QBwmQ=
Subject key identifier:   33:14:00:E6:14:88:72:94:EB:78:FE:FD:9C:8E:2A:27:70:00:11:6A
Authority key identifier: E1:0F:BB:9B:3C:D1:C2:16:AD:C6:99:E5:ED:AD:5F:53:1D:9A:FC:B6
Certificate issuer:       /CN=e10fbb9b3cd1c216adc699e5edad5f531d9afcb6
Certificate serial:       0198CB36EAFA44BB5197CAC0B971EACD5D40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
Manifest number:          0D00
Signing time:             Thu 21 Aug 2025 06:00:30 +0000
Manifest this update:     Thu 21 Aug 2025 06:00:30 +0000
Manifest next update:     Fri 22 Aug 2025 06:00:30 +0000
Files and hashes:         1: 4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl (hash: 3JagQmGctPbewQpPGWllpLRysIRF6UpCPt6gU/w+nYc=)
                          2: Q8-T8rHgFoT7CVxsMFqUQCc8JdY.roa (hash: RshmXbtDnZ3rOqJWlQSI0/TW/t+laA0v6rWUW/sLLhQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Aug 2025 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:cb:36:ea:fa:44:bb:51:97:ca:c0:b9:71:ea:cd:5d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e10fbb9b3cd1c216adc699e5edad5f531d9afcb6
        Validity
            Not Before: Aug 21 06:00:30 2025 GMT
            Not After : Aug 22 06:00:30 2025 GMT
        Subject: CN=331400e614887294eb78fefd9c8e2a277000116a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:89:90:9f:a9:54:4f:4f:35:46:3b:b1:58:82:
                    59:8b:90:c8:d9:8b:75:06:d9:c9:7a:8d:64:af:e1:
                    76:67:db:7b:ed:c8:1f:2f:c6:ac:b7:af:f4:2f:ca:
                    e7:d9:42:ce:32:89:f7:89:40:bf:77:4d:dd:9a:82:
                    ce:86:f9:36:f5:0c:50:d3:1c:fb:dd:91:1d:d2:4a:
                    a8:67:e4:e4:7f:1d:19:47:11:d5:68:08:55:d0:40:
                    b3:7d:1a:e0:68:19:a4:55:92:12:23:86:50:32:da:
                    3a:90:56:20:3e:4e:66:d9:b8:34:ee:61:86:84:c0:
                    56:d4:b5:aa:c5:23:67:f8:7d:10:54:6d:e6:15:02:
                    82:3e:1d:94:75:74:ff:77:f2:96:bb:43:1e:1a:7b:
                    7e:1e:39:07:49:4b:7e:76:52:18:63:d3:73:16:25:
                    aa:05:4c:9a:47:90:77:01:04:8a:06:e2:ff:dc:12:
                    63:54:9e:91:bb:81:ee:9c:65:2f:38:a0:37:2c:46:
                    bd:34:82:17:43:ec:e5:f6:54:05:8f:3e:7c:9a:7c:
                    23:d7:68:6a:20:99:74:3f:48:de:fb:63:bb:e6:ee:
                    66:19:58:ab:aa:2e:af:02:a0:89:c9:de:d5:a2:23:
                    49:d3:03:96:b0:b8:0d:d2:c0:bb:b5:e2:fb:1a:3c:
                    5d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:14:00:E6:14:88:72:94:EB:78:FE:FD:9C:8E:2A:27:70:00:11:6A
            X509v3 Authority Key Identifier:
                keyid:E1:0F:BB:9B:3C:D1:C2:16:AD:C6:99:E5:ED:AD:5F:53:1D:9A:FC:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:bb:37:64:1c:eb:b6:6c:7f:92:6c:25:ad:ff:f0:f5:ea:32:
         17:1b:c3:2e:94:19:06:5f:5b:9f:d4:21:c5:f6:8b:7b:f8:a0:
         63:dd:36:94:15:64:6c:fc:0b:7b:f4:d8:f6:d1:41:f1:69:8d:
         8a:c0:88:11:f9:fb:53:06:85:57:ae:33:29:61:2e:ba:3d:5e:
         81:83:e2:bb:6b:91:71:bb:5b:2e:99:4c:3b:38:6d:db:28:9b:
         c4:a3:bb:09:96:31:2e:9f:78:ad:2a:36:b5:e6:e7:00:1f:3e:
         ed:76:02:e6:de:90:e6:cf:22:f5:32:11:c5:10:55:5c:d4:42:
         f5:08:e9:1d:bc:1b:24:7e:c3:6c:9c:fe:31:c0:e3:55:30:56:
         52:91:1c:de:1f:b9:9b:04:99:e8:6e:fd:cc:01:68:8d:05:fe:
         62:f0:e9:a7:a3:1b:70:74:3d:df:97:c3:87:fb:1b:fa:99:57:
         b0:42:9d:bc:3f:bd:a3:33:8c:6b:a2:b9:35:8f:d0:ea:c2:cd:
         f6:e9:5c:d4:56:9b:30:d6:db:62:61:0a:6f:e9:6b:34:cc:15:
         ba:b9:90:cd:8b:b1:f4:d6:9d:14:b2:fd:ce:04:91:65:88:d0:
         ac:8b:fa:8b:93:a0:a3:98:04:c9:2d:69:c8:34:56:83:30:d8:
         68:68:e4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 12:47:31 2025 by rpki-client