Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft
File:                     4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft (raw, json)
Hash identifier:          palZpN5QD3+RBDV6y8o6uY6CMXrwD607+2t9qXWMMFw=
Subject key identifier:   9A:9C:B8:F2:4E:6B:94:62:EB:0C:78:0D:1E:C0:C7:0B:2E:E9:E0:E1
Authority key identifier: E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8
Certificate issuer:       /CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
Certificate serial:       01993124B227291CAEF2C3A8926398C310DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft
Manifest number:          154C
Signing time:             Wed 10 Sep 2025 01:01:52 +0000
Manifest this update:     Wed 10 Sep 2025 01:01:52 +0000
Manifest next update:     Thu 11 Sep 2025 01:01:52 +0000
Files and hashes:         1: 22dU6SeEOk5lA-ybXbkk_F-RHPI.roa (hash: opc+OMEhIAAy9MN7L41tT+6qaGIbCCKGC8RYJFu35pA=)
                          2: 4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl (hash: ieXFIQXfQCKMax7+s+YziuNouVafrdAXoh4+J5Iz3ek=)
                          3: 4qLU7z4WKhDamvGgGu3FYecZcUk.roa (hash: 9qwkIu/qIJXyrkkz5BO3j8+teV1VtOtIs2m6qOT2uI4=)
                          4: 7RaGRpteAPU-JEOa6gyOeUUaz1M.roa (hash: OqBBLrE7nX8ZR8+lsbAyGBi0x2gZcydxjiv43PsnDSA=)
                          5: aFtgicTtP5TQ2xvmPhZkgfQfMmE.roa (hash: XOi5YDN2Wfonsac/Qx8Uho2A7mZbabtT5+5wbH9JkHA=)
                          6: iHNmmkHnkrPi1F2vS2DFfQgsEUE.roa (hash: 3V9ILLN3TdUu9XJlmFd4WmoL+cfzk6qYW28NQJnYdZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 21:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:31:24:b2:27:29:1c:ae:f2:c3:a8:92:63:98:c3:10:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
        Validity
            Not Before: Sep 10 01:01:52 2025 GMT
            Not After : Sep 11 01:01:52 2025 GMT
        Subject: CN=9a9cb8f24e6b9462eb0c780d1ec0c70b2ee9e0e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:18:9a:75:82:82:bc:a1:9f:66:a0:d7:29:cb:
                    12:d3:58:c5:43:69:92:95:c8:0b:2b:4d:b9:22:a2:
                    2f:fd:33:b9:07:aa:e9:99:78:50:ac:d5:cf:a9:b5:
                    6b:c0:07:e4:81:01:7d:b4:a3:ef:c3:21:2d:ab:28:
                    19:f1:cc:56:d8:fa:10:d8:fc:bb:98:90:4b:9c:b3:
                    94:80:d4:2a:52:b0:c3:4d:c0:cf:76:84:57:df:88:
                    48:a9:8c:50:6d:85:e6:ff:ae:14:00:91:f4:45:0c:
                    2f:27:eb:b2:ef:b6:db:0b:be:6e:08:93:69:62:b7:
                    e5:66:a9:61:b7:86:54:14:1d:83:5a:16:d8:04:4e:
                    2d:28:e7:df:8c:38:08:8b:13:50:81:0a:01:03:37:
                    14:09:bc:f6:22:cc:e2:c9:b9:50:5c:5a:e2:9a:e8:
                    fe:29:c3:ea:ca:64:6f:7b:82:df:bf:c4:8e:8f:cb:
                    9c:fd:0f:e8:ee:45:aa:8d:ad:21:34:6d:48:c6:04:
                    2d:a6:2a:eb:2c:3e:a1:1e:b6:7c:2d:5a:cc:33:a4:
                    2b:7d:76:ea:6f:07:e0:86:46:ec:75:92:02:7a:25:
                    b1:a2:13:ac:34:e0:7b:8b:7b:cd:55:39:36:cb:6b:
                    b6:f5:12:b6:2d:41:6b:43:2d:c2:3e:95:2e:72:51:
                    e1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:9C:B8:F2:4E:6B:94:62:EB:0C:78:0D:1E:C0:C7:0B:2E:E9:E0:E1
            X509v3 Authority Key Identifier:
                keyid:E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:04:86:15:bb:cb:38:f8:6a:23:70:46:73:a1:b0:0a:52:ea:
         4b:bc:a8:75:dd:2a:00:0e:6a:37:ef:b5:a4:1a:cf:af:33:b2:
         bd:73:42:9b:e3:37:ae:2f:9d:1f:2b:51:c1:59:99:0e:1d:7f:
         ff:cd:75:ac:04:3a:be:61:f4:e4:c0:cf:da:b9:83:27:36:54:
         fd:c4:96:76:c8:dc:36:6b:62:5d:bf:42:c8:74:75:d8:55:ad:
         0d:b0:79:e4:d0:60:cf:bc:87:06:36:51:4e:1a:ba:6e:07:e5:
         45:ea:82:43:d7:1f:a8:66:ca:66:ff:5c:9e:8f:ff:34:6c:37:
         9e:7b:7d:5d:28:49:88:b2:cc:d9:42:ef:27:4d:4c:88:89:87:
         f8:4f:de:3e:ea:a7:87:93:c7:56:60:31:c4:b6:97:ff:91:c5:
         c6:23:23:bb:83:d4:e7:4a:60:96:0e:01:5f:89:04:ac:ee:b6:
         2f:bc:d5:83:76:54:6d:ba:25:97:4d:ae:4a:00:3f:35:ec:aa:
         7d:62:3d:4f:aa:f2:ab:a6:7c:fd:56:55:75:78:c5:4a:22:8b:
         7f:47:f6:87:0b:b8:97:0c:b6:77:43:f2:ba:de:6d:85:37:c6:
         be:39:2b:66:26:82:90:ce:b6:73:08:2f:65:91:f4:6e:a7:4b:
         7a:4a:1a:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxJLInKRyu8sOokmOYwxDfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZThmNDFmNmIwMmI5M2Y4NWQxYTdiNDhiNDhjZmEzMjJm
MDg4ZjgwHhcNMjUwOTEwMDEwMTUyWhcNMjUwOTExMDEwMTUyWjAzMTEwLwYDVQQD
Eyg5YTljYjhmMjRlNmI5NDYyZWIwYzc4MGQxZWMwYzcwYjJlZTllMGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RiadYKCvKGfZqDXKcsS01jFQ2mS
lcgLK025IqIv/TO5B6rpmXhQrNXPqbVrwAfkgQF9tKPvwyEtqygZ8cxW2PoQ2Py7
mJBLnLOUgNQqUrDDTcDPdoRX34hIqYxQbYXm/64UAJH0RQwvJ+uy77bbC75uCJNp
YrflZqlht4ZUFB2DWhbYBE4tKOffjDgIixNQgQoBAzcUCbz2IsziyblQXFrimuj+
KcPqymRve4Lfv8SOj8uc/Q/o7kWqja0hNG1IxgQtpirrLD6hHrZ8LVrMM6QrfXbq
bwfghkbsdZICeiWxohOsNOB7i3vNVTk2y2u29RK2LUFrQy3CPpUuclHh0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqcuPJOa5Ri6wx4DR7Axwsu6eDhMB8GA1UdIwQY
MBaAFOHo9B9rArk/hdGntItIz6Mi8Ij4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGVqMEgyc0N1VC1GMGFlMGkwalBveUx3aVBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85YmE5NDAtMDA3OC00ZmQwLWFmZGUt
NTM3YTJiMGI0ZGRhLzEvNGVqMEgyc0N1VC1GMGFlMGkwalBveUx3aVBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS85YmE5NDAtMDA3OC00ZmQwLWFmZGUtNTM3YTJiMGI0ZGRh
LzEvNGVqMEgyc0N1VC1GMGFlMGkwalBveUx3aVBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjASGFbvL
OPhqI3BGc6GwClLqS7yodd0qAA5qN++1pBrPrzOyvXNCm+M3ri+dHytRwVmZDh1/
/811rAQ6vmH05MDP2rmDJzZU/cSWdsjcNmtiXb9CyHR12FWtDbB55NBgz7yHBjZR
Thq6bgflReqCQ9cfqGbKZv9cno//NGw3nnt9XShJiLLM2ULvJ01MiImH+E/ePuqn
h5PHVmAxxLaX/5HFxiMju4PU50pglg4BX4kErO62L7zVg3ZUbboll02uSgA/Neyq
fWI9T6ryq6Z8/VZVdXjFSiKLf0f2hwu4lwy2d0Pyut5thTfGvjkrZiaCkM62cwgv
ZZH0bqdLekoaBw==
-----END CERTIFICATE-----
Generated at Wed Sep 10 05:10:13 2025 by rpki-client