Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
File:                     4sFE7jL911AT5_G4wtgH09rti74.mft (raw, json)
Hash identifier:          tIO+CaFLw1BpOKeeuI0+XPgonn9bA5na2/nDRzJcokA=
Subject key identifier:   1E:22:96:B6:5D:D6:36:03:09:90:28:32:99:9B:BF:17:F7:4C:DF:45
Authority key identifier: E2:C1:44:EE:32:FD:D7:50:13:E7:F1:B8:C2:D8:07:D3:DA:ED:8B:BE
Certificate issuer:       /CN=e2c144ee32fdd75013e7f1b8c2d807d3daed8bbe
Certificate serial:       019933EDE673EE820E1F07A35D989B811918
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
Manifest number:          167A
Signing time:             Wed 10 Sep 2025 14:00:52 +0000
Manifest this update:     Wed 10 Sep 2025 14:00:52 +0000
Manifest next update:     Thu 11 Sep 2025 14:00:52 +0000
Files and hashes:         1: 4sFE7jL911AT5_G4wtgH09rti74.crl (hash: U7opqsdyKcG867lPxCtQDS3ZpuzH+IsElOd6rAZCZTk=)
                          2: at7Oxyqw1YSxEoUOaW5RKvIjf0s.roa (hash: yOhpw2razZhrT29WlGA/CY3Yi3Lil58jkjnW17t8rig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 14:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:33:ed:e6:73:ee:82:0e:1f:07:a3:5d:98:9b:81:19:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c144ee32fdd75013e7f1b8c2d807d3daed8bbe
        Validity
            Not Before: Sep 10 14:00:52 2025 GMT
            Not After : Sep 11 14:00:52 2025 GMT
        Subject: CN=1e2296b65dd6360309902832999bbf17f74cdf45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7e:24:d1:ec:ba:4b:2f:32:21:4e:33:6f:85:
                    c7:21:0f:f6:ce:e2:1f:46:4a:a5:d0:fe:5a:c9:fe:
                    a7:ce:f7:e7:b3:4b:da:08:93:81:14:04:63:4d:03:
                    31:90:55:ba:2d:7e:19:b4:a7:46:1f:e1:70:dd:3c:
                    ac:52:54:47:ff:d4:fe:dd:19:e0:1a:4c:9f:4d:19:
                    d0:3f:b4:b4:27:fb:e1:78:e1:88:bb:eb:2f:0b:ae:
                    28:14:cd:82:b1:72:9d:c8:bd:1e:9f:07:81:20:28:
                    4a:39:1a:cc:bf:aa:5f:87:aa:54:3d:2d:3b:82:41:
                    88:a0:59:90:39:f5:42:fb:14:a8:1d:40:52:3c:47:
                    2b:29:d8:46:11:67:d3:43:24:1c:2f:1b:c4:05:4a:
                    f1:6c:79:58:4f:f5:24:6f:0e:73:9a:bd:ca:0a:34:
                    ae:7c:ba:78:e5:08:45:b6:8f:ed:86:54:15:54:2f:
                    75:a9:bc:29:5f:68:62:2d:8f:10:ab:a6:12:19:6b:
                    1d:52:23:9b:db:16:ef:4e:3c:17:de:bb:18:89:4f:
                    57:bd:ad:b6:fd:6c:32:77:9d:59:0a:57:fd:62:38:
                    63:fb:d3:00:4d:a8:06:5b:45:c6:bc:95:3e:ab:c1:
                    35:a0:f5:35:e2:27:f1:b5:df:ba:cd:66:22:c2:dd:
                    0c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:22:96:B6:5D:D6:36:03:09:90:28:32:99:9B:BF:17:F7:4C:DF:45
            X509v3 Authority Key Identifier:
                keyid:E2:C1:44:EE:32:FD:D7:50:13:E7:F1:B8:C2:D8:07:D3:DA:ED:8B:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:7f:94:88:17:8f:4d:6b:f7:c4:ea:6a:92:f7:e9:ae:06:2e:
         46:08:68:f4:99:6f:c2:fe:3a:4a:99:ea:dc:87:80:ac:6e:d1:
         c4:57:8b:a1:16:ab:91:32:29:ce:22:74:01:6c:f5:90:ab:df:
         2d:6c:6e:c8:ca:7f:49:c6:09:b5:cb:16:a1:1a:68:3f:ca:c0:
         75:72:c3:63:7a:15:67:57:11:f0:70:14:92:91:b2:c0:7c:11:
         75:1d:05:5b:fc:ed:e0:c6:fd:cf:de:ce:a3:3f:1f:e9:26:cf:
         43:a6:11:3b:d7:a5:23:e4:8b:47:13:72:26:35:6f:11:0d:4f:
         74:a9:9d:c5:ac:92:60:82:2a:de:27:05:03:64:91:81:c1:67:
         5e:b3:00:74:67:17:94:1b:e4:de:03:92:86:55:46:e2:d3:bb:
         83:b9:16:c2:54:0d:43:04:c2:cf:2e:1d:53:cb:04:dc:5d:75:
         67:04:12:12:27:f3:fe:c9:62:8b:08:7c:4a:83:6c:d4:12:e7:
         24:a7:ba:6f:3b:a7:9a:c2:84:6f:79:9f:a2:58:51:56:22:20:
         75:64:f4:41:45:83:ca:4b:0c:6b:16:71:e8:09:89:9f:a5:11:
         00:18:8d:ec:9f:e8:2b:0a:8f:c1:a1:2a:67:a7:a8:68:9b:54:
         c5:57:0d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:31:07 2025 by rpki-client