Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
File:                     63-M4hWMPflQU5Fx2exS39UVY-Q.mft (raw, json)
Hash identifier:          QyUmG2nGr6O+Da5VDEKW/jXQ4myRoBfQEGiy3SLt2wU=
Subject key identifier:   81:24:0E:74:FE:B1:B3:F3:54:0D:56:93:B7:24:63:83:6A:80:73:5B
Authority key identifier: EB:7F:8C:E2:15:8C:3D:F9:50:53:91:71:D9:EC:52:DF:D5:15:63:E4
Certificate issuer:       /CN=eb7f8ce2158c3df950539171d9ec52dfd51563e4
Certificate serial:       019922556336F625A523558E408AAD1A32BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
Manifest number:          04CC
Signing time:             Sun 07 Sep 2025 04:00:45 +0000
Manifest this update:     Sun 07 Sep 2025 04:00:45 +0000
Manifest next update:     Mon 08 Sep 2025 04:00:45 +0000
Files and hashes:         1: 63-M4hWMPflQU5Fx2exS39UVY-Q.crl (hash: 8wd7ZLbljSy9YMJ6MxmIWBB+UzAUL9di23KjDPo/JZs=)
                          2: DPTDWBpdKrc9YDbO3iE7iMsVeAQ.roa (hash: fxH7j3HYZ2DZdpLTyIS3kM2MJPIcdJrQ7M2HUQ6LWKQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:63:36:f6:25:a5:23:55:8e:40:8a:ad:1a:32:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7f8ce2158c3df950539171d9ec52dfd51563e4
        Validity
            Not Before: Sep  7 04:00:45 2025 GMT
            Not After : Sep  8 04:00:45 2025 GMT
        Subject: CN=81240e74feb1b3f3540d5693b72463836a80735b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:24:45:ac:36:98:76:4d:31:c0:f7:ad:50:40:
                    9f:cc:ee:54:7e:66:a0:41:18:01:bc:e5:e5:62:95:
                    3b:28:53:b0:76:07:d4:9a:99:9d:1c:64:82:2c:ab:
                    f7:0e:ba:da:4e:87:3c:28:15:c0:08:fe:b4:49:ec:
                    d3:80:ed:54:91:e6:08:53:73:48:84:57:84:a6:c3:
                    83:0e:55:82:67:fd:b2:7c:7b:18:04:47:42:7a:4d:
                    78:84:88:8d:89:2d:b4:60:33:50:c1:d7:7a:6a:8d:
                    af:ba:94:b2:c4:94:2b:92:30:71:23:26:06:0d:38:
                    fe:f4:e3:0d:0d:fb:c7:08:b8:ba:a5:02:78:47:9d:
                    eb:04:69:c5:cc:b1:8a:cc:1e:82:5c:e4:13:47:b5:
                    7b:cd:b7:a3:1d:53:97:15:fd:b8:cb:23:9b:67:ee:
                    d8:f7:f9:85:fb:2a:9c:32:19:08:ac:b7:5e:c9:b5:
                    f5:47:db:70:8a:25:3e:d9:a9:42:73:0e:f5:fa:5a:
                    6a:c2:78:99:9d:c7:bb:44:9d:c3:31:ed:48:e0:79:
                    d7:88:7b:9e:bd:47:45:13:06:21:1f:3b:42:45:22:
                    87:d8:47:12:04:76:cb:67:15:cf:19:ee:5d:6f:76:
                    ec:63:e1:68:62:8d:7f:b4:9e:0b:07:58:48:15:c5:
                    d2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:24:0E:74:FE:B1:B3:F3:54:0D:56:93:B7:24:63:83:6A:80:73:5B
            X509v3 Authority Key Identifier:
                keyid:EB:7F:8C:E2:15:8C:3D:F9:50:53:91:71:D9:EC:52:DF:D5:15:63:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:60:3b:14:9a:7a:7d:95:15:26:b8:b2:2c:94:26:55:74:86:
         45:94:56:5b:23:de:e0:41:6e:30:55:d1:96:0a:04:c9:0c:b9:
         30:d3:f1:6d:6d:07:61:35:54:dc:54:90:67:51:9b:05:77:81:
         ba:75:a2:70:bc:c6:f2:14:67:d9:ef:0a:75:7c:84:97:be:0a:
         2c:80:4b:5f:c6:cb:cf:67:4e:5e:b9:53:20:06:a7:fb:df:73:
         b7:9e:d7:ae:f4:66:23:aa:28:ef:b3:7d:49:a8:91:36:ba:08:
         46:6d:7c:9c:12:5d:8c:b1:a6:91:4f:89:d5:b0:71:9d:6a:a3:
         b2:a1:85:2a:9f:f8:db:c2:f4:50:61:b5:d7:4d:d8:af:05:71:
         a4:ee:87:47:31:23:1e:b2:f4:8a:c6:21:ee:1f:5c:02:d4:45:
         4e:e7:42:d2:f8:09:b1:55:cf:5c:c6:1b:83:20:99:ba:55:22:
         5c:48:69:0c:0d:b2:42:5e:f0:07:df:96:f5:e7:c8:05:68:b6:
         82:1b:fb:5c:56:a8:5a:58:8d:41:a0:88:4d:67:f4:cf:d9:d3:
         2b:0c:b2:be:a7:d6:df:5a:12:ef:18:b3:0e:98:2f:fa:bb:bf:
         a4:05:5c:9c:b4:25:7a:b6:27:46:bf:c3:80:36:b7:a1:42:0e:
         2b:f8:84:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:37:39 2025 by rpki-client