Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.mft
File:                     c4_ZRngh0FKG9LM76GF2ZRtq_z4.mft (raw, json)
Hash identifier:          9NHB9EMB9KmW/ivyC935USxyj1BKI1jo/ENIJox5QaU=
Subject key identifier:   ED:9D:58:53:0C:AC:8D:85:33:20:D0:32:A6:AB:14:FD:DD:CA:11:41
Authority key identifier: 73:8F:D9:46:78:21:D0:52:86:F4:B3:3B:E8:61:76:65:1B:6A:FF:3E
Certificate issuer:       /CN=738fd9467821d05286f4b33be86176651b6aff3e
Certificate serial:       01995F0F397A5991BF04C6F99A49AA72E904
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c4_ZRngh0FKG9LM76GF2ZRtq_z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.mft
Manifest number:          1622
Signing time:             Thu 18 Sep 2025 23:00:56 +0000
Manifest this update:     Thu 18 Sep 2025 23:00:56 +0000
Manifest next update:     Fri 19 Sep 2025 23:00:56 +0000
Files and hashes:         1: c4_ZRngh0FKG9LM76GF2ZRtq_z4.crl (hash: IO+/YHIFEj/Ni8M8VseoEBzmvY7YxLNcHAp0rtRBlf0=)
                          2: clN4rn78ALDRkU6Gc0tlA0L76yY.roa (hash: HSAiRzNpFiSSFt3gFQJ5gPuQzchbTNDXBSkeKqZgK9w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c4_ZRngh0FKG9LM76GF2ZRtq_z4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Sep 2025 22:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:5f:0f:39:7a:59:91:bf:04:c6:f9:9a:49:aa:72:e9:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=738fd9467821d05286f4b33be86176651b6aff3e
        Validity
            Not Before: Sep 18 23:00:56 2025 GMT
            Not After : Sep 19 23:00:56 2025 GMT
        Subject: CN=ed9d58530cac8d853320d032a6ab14fdddca1141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f0:c8:20:0b:04:97:f2:73:f5:8e:5d:90:0e:
                    a4:b5:e6:fe:b3:0a:a9:cd:e6:38:bb:41:d2:d7:a6:
                    5c:3d:e7:40:db:8e:49:d0:d8:b4:4c:91:84:0d:35:
                    bc:3a:a3:40:0b:d3:1d:35:95:e0:0b:32:48:0c:e1:
                    92:ce:3f:48:e4:a2:09:ad:20:e4:0a:4f:b3:2b:57:
                    75:5b:3f:3a:00:21:3b:53:5f:60:4b:e7:f6:81:a1:
                    88:d4:ce:9e:89:b2:24:e1:e4:03:97:c4:e0:28:20:
                    4b:e5:f1:16:0a:3f:81:bf:f6:a1:cc:24:e7:83:0a:
                    9c:87:fe:f6:5c:b8:f9:ed:fc:be:ea:88:13:33:ab:
                    ac:da:ef:62:54:99:ba:a9:2a:8b:16:5e:0b:83:de:
                    40:cf:d1:7f:fc:55:96:d1:16:58:ce:79:33:2e:c1:
                    89:62:a3:d9:8a:d8:b6:af:cf:8e:21:e0:7c:72:2c:
                    b7:98:34:9c:4a:fb:c8:13:ac:2a:28:d8:bd:a4:65:
                    4e:63:fd:65:5f:47:c4:e6:5c:4d:d1:31:7f:02:d9:
                    d4:4c:c5:dd:3a:0d:1c:89:f7:55:c3:c9:c6:57:11:
                    72:e7:ab:bf:49:92:71:35:44:93:5c:65:76:7a:b4:
                    08:70:38:55:f9:37:af:1b:27:b4:7f:fa:e8:3d:c9:
                    90:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:9D:58:53:0C:AC:8D:85:33:20:D0:32:A6:AB:14:FD:DD:CA:11:41
            X509v3 Authority Key Identifier:
                keyid:73:8F:D9:46:78:21:D0:52:86:F4:B3:3B:E8:61:76:65:1B:6A:FF:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4_ZRngh0FKG9LM76GF2ZRtq_z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:72:d1:54:c3:7a:b6:c3:0f:f6:f3:90:d9:69:6a:a2:7b:7f:
         62:d9:58:5f:b3:c5:6f:5f:dd:f6:7a:a8:06:c2:f1:7f:c7:f4:
         99:55:c8:25:87:ec:c9:c6:0a:4b:cf:2f:b8:8d:87:fa:88:a5:
         62:68:a7:a1:75:46:8d:03:9c:fd:ff:d5:69:23:56:28:88:6b:
         0b:0c:04:98:16:d9:91:6c:72:3c:c2:03:4b:76:82:c2:ae:95:
         03:77:fa:88:ae:ab:f2:3b:7f:88:10:ac:cc:55:91:2d:8b:ed:
         92:be:30:4e:53:61:5b:87:c1:79:37:09:7a:18:df:dd:5f:19:
         dd:cc:84:5a:2d:dd:31:72:18:11:cf:0d:50:2b:32:5e:46:e5:
         48:2d:28:22:df:cf:f4:0e:05:ee:dc:0a:01:d3:ab:d0:66:2a:
         01:82:b9:4d:27:a9:81:82:b6:8b:92:e0:a5:cd:bf:e6:64:72:
         c1:e0:df:0d:1c:df:c1:c5:60:c6:32:f5:06:61:64:2b:2b:4a:
         53:f9:82:e6:4a:96:18:f3:93:41:e9:4d:38:db:d2:8b:5f:81:
         c5:8e:81:95:74:64:23:f6:eb:d4:01:0d:d6:f0:c9:90:8f:47:
         38:e9:f9:96:33:15:27:ec:55:7d:db:b3:fa:4b:aa:1d:1d:23:
         2f:93:3f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 06:12:01 2025 by rpki-client