Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
File:                     4jRLpjQJYdpe60riOemgYmd5Pi4.mft (raw, json)
Hash identifier:          YkPUmPkIZS+pxJPgOzZIu2hbAEQP6SWai0UWNaAsBZ8=
Subject key identifier:   0D:B7:A8:91:2D:70:9C:0F:E2:C9:4D:00:BC:CA:4A:FB:E6:7B:CC:EB
Authority key identifier: E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E
Certificate issuer:       /CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
Certificate serial:       019A0AEEE12FF528D413AC20B7044B9FAF3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
Manifest number:          0D3D
Signing time:             Wed 22 Oct 2025 08:00:18 +0000
Manifest this update:     Wed 22 Oct 2025 08:00:18 +0000
Manifest next update:     Thu 23 Oct 2025 08:00:18 +0000
Files and hashes:         1: 4jRLpjQJYdpe60riOemgYmd5Pi4.crl (hash: W5TGEGQ/+xtsPd/3B9169BphSw2ZeLKuuwos6xKrFGI=)
                          2: WpIYL0DvGR69MNqQHSOeKTTXrTw.roa (hash: SM3OGEHCPKRu3sADiQcW/ukfL9VQE5Fwf5KPU4G5dDQ=)
                          3: kxBC-y0IllTJVS30L0NxSPbYl5k.roa (hash: URvxTuHHPgKr+L+8uNywgEsk29rIbLnVfs2KTbEBNVw=)
                          4: pOMTJTMzSvxdTwpBEEiCIJOdgS4.roa (hash: N66sR+vsnvfn2vQyEXUghMnGW+xEPargkQo2ZBulpiM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Oct 2025 08:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:0a:ee:e1:2f:f5:28:d4:13:ac:20:b7:04:4b:9f:af:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
        Validity
            Not Before: Oct 22 08:00:18 2025 GMT
            Not After : Oct 23 08:00:18 2025 GMT
        Subject: CN=0db7a8912d709c0fe2c94d00bcca4afbe67bcceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5e:29:66:2a:fb:ad:b4:ba:0e:11:9d:c7:b3:
                    fd:12:b5:f1:c9:c2:be:a5:26:d4:76:31:ac:c6:f6:
                    f9:3a:65:63:da:4e:96:a8:8a:4f:2a:e5:17:5c:7d:
                    d3:fd:2d:ac:44:b1:5a:2e:10:c3:70:68:09:0d:ed:
                    30:0f:fe:f2:23:0b:7b:79:10:26:3a:58:be:8c:14:
                    47:ab:4e:70:e0:e1:a2:82:0e:a1:9a:ef:e5:eb:f6:
                    d8:f9:2e:02:d6:7e:be:83:c4:47:60:c5:45:dc:53:
                    35:35:4b:a2:a5:4b:ba:a3:0a:bb:da:a4:c5:02:32:
                    63:d8:06:66:9f:a8:18:7f:bb:2a:81:9d:16:59:02:
                    8a:02:b5:e4:14:d7:6a:8a:67:08:48:83:cf:00:e6:
                    e4:23:de:0c:34:5f:92:27:e2:f1:b6:17:ea:27:71:
                    6b:fb:42:34:37:0d:c9:60:e7:60:cf:ef:07:e0:34:
                    23:17:6b:a3:9d:e3:51:ca:00:69:fb:0a:bc:b6:7c:
                    00:10:27:07:50:93:79:91:c2:19:2c:8e:1a:8f:e4:
                    2e:65:97:5f:ed:4c:35:66:ee:3f:1b:e5:c8:c2:d7:
                    24:41:6c:c9:7c:01:49:4f:42:3f:60:8c:06:8e:73:
                    b1:0a:46:8e:c8:d4:ae:0a:39:a9:79:c9:70:89:0a:
                    01:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B7:A8:91:2D:70:9C:0F:E2:C9:4D:00:BC:CA:4A:FB:E6:7B:CC:EB
            X509v3 Authority Key Identifier:
                keyid:E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:85:61:be:df:0e:23:f3:f7:b2:dd:fd:18:43:9f:9a:31:7b:
         e2:18:1d:b6:a3:1c:8e:e3:0a:60:ba:9b:9a:c5:12:49:31:0b:
         ad:d5:88:71:a0:45:54:b1:8b:83:70:05:5a:bb:4b:76:7f:e6:
         ee:d3:ee:4d:96:37:01:62:e5:ab:12:ac:e3:30:57:cc:c4:d5:
         1c:bc:7c:0c:86:4d:88:5e:e4:65:f0:68:2f:01:1c:74:06:17:
         f4:bb:a1:65:5c:7c:19:11:d6:a3:6b:59:12:c1:35:6b:43:8c:
         6f:50:cf:72:b7:34:23:a4:48:7c:8a:94:0a:d0:89:f4:de:c9:
         14:b5:0c:44:fa:44:e5:27:66:fb:f9:4d:98:bd:d9:9e:b7:7a:
         e2:82:28:8b:72:09:fa:5d:01:31:e3:1a:19:5e:e1:e9:e3:47:
         6a:c2:96:35:f0:14:8c:84:7a:4b:8d:19:b6:b1:bc:75:93:b6:
         a4:20:ee:e1:fc:b4:5f:db:6f:c9:a3:75:b6:18:c3:91:e7:ae:
         bf:eb:97:98:49:7b:41:b9:d9:8f:0c:86:34:26:fc:8d:76:88:
         62:db:58:89:c0:ab:e2:a7:f1:62:a2:39:9e:b2:6b:fa:a4:58:
         3f:3e:5e:c3:7f:19:80:59:c2:24:c0:67:46:8c:19:8e:f9:29:
         1b:dc:ae:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoK7uEv9SjUE6wgtwRLn68/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMzQ0YmE2MzQwOTYxZGE1ZWViNGFlMjM5ZTlhMDYyNjc3
OTNlMmUwHhcNMjUxMDIyMDgwMDE4WhcNMjUxMDIzMDgwMDE4WjAzMTEwLwYDVQQD
EygwZGI3YTg5MTJkNzA5YzBmZTJjOTRkMDBiY2NhNGFmYmU2N2JjY2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwV4pZir7rbS6DhGdx7P9ErXxycK+
pSbUdjGsxvb5OmVj2k6WqIpPKuUXXH3T/S2sRLFaLhDDcGgJDe0wD/7yIwt7eRAm
Oli+jBRHq05w4OGigg6hmu/l6/bY+S4C1n6+g8RHYMVF3FM1NUuipUu6owq72qTF
AjJj2AZmn6gYf7sqgZ0WWQKKArXkFNdqimcISIPPAObkI94MNF+SJ+LxthfqJ3Fr
+0I0Nw3JYOdgz+8H4DQjF2ujneNRygBp+wq8tnwAECcHUJN5kcIZLI4aj+QuZZdf
7Uw1Zu4/G+XIwtckQWzJfAFJT0I/YIwGjnOxCkaOyNSuCjmpeclwiQoByQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA23qJEtcJwP4slNALzKSvvme8zrMB8GA1UdIwQY
MBaAFOI0S6Y0CWHaXutK4jnpoGJneT4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGpSTHBqUUpZZHBlNjByaU9lbWdZbWQ1UGk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NGVjNDMtNTkzNS00YWIyLWIxM2Qt
MDJlYjlhNDEyNjM3LzEvNGpSTHBqUUpZZHBlNjByaU9lbWdZbWQ1UGk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80NGVjNDMtNTkzNS00YWIyLWIxM2QtMDJlYjlhNDEyNjM3
LzEvNGpSTHBqUUpZZHBlNjByaU9lbWdZbWQ1UGk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYVhvt8O
I/P3st39GEOfmjF74hgdtqMcjuMKYLqbmsUSSTELrdWIcaBFVLGLg3AFWrtLdn/m
7tPuTZY3AWLlqxKs4zBXzMTVHLx8DIZNiF7kZfBoLwEcdAYX9LuhZVx8GRHWo2tZ
EsE1a0OMb1DPcrc0I6RIfIqUCtCJ9N7JFLUMRPpE5Sdm+/lNmL3Znrd64oIoi3IJ
+l0BMeMaGV7h6eNHasKWNfAUjIR6S40ZtrG8dZO2pCDu4fy0X9tvyaN1thjDkeeu
v+uXmEl7QbnZjwyGNCb8jXaIYttYicCr4qfxYqI5nrJr+qRYPz5ew38ZgFnCJMBn
RowZjvkpG9yurg==
-----END CERTIFICATE-----
Generated at Wed Oct 22 16:26:10 2025 by rpki-client