Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
File:                     4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft (raw, json)
Hash identifier:          w8bNxXWYrNdSGClG8oD8MiQRGSZA6S7+s5qXrOvYOOI=
Subject key identifier:   DE:9D:EC:8E:AC:AD:10:60:B9:13:20:31:C9:F2:61:42:4C:30:14:33
Authority key identifier: E2:4B:E2:9D:4F:E0:C4:C8:43:50:17:2A:8A:34:96:CC:66:7C:13:F6
Certificate issuer:       /CN=e24be29d4fe0c4c84350172a8a3496cc667c13f6
Certificate serial:       019922C39CB1B70C294F6B9B5E33E6401709
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
Manifest number:          02F0
Signing time:             Sun 07 Sep 2025 06:01:08 +0000
Manifest this update:     Sun 07 Sep 2025 06:01:08 +0000
Manifest next update:     Mon 08 Sep 2025 06:01:08 +0000
Files and hashes:         1: 4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl (hash: 4GXLk1MVUGHjDg+l4TX/dWCY+AXlVxsmf2xggcFn8Fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:9c:b1:b7:0c:29:4f:6b:9b:5e:33:e6:40:17:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e24be29d4fe0c4c84350172a8a3496cc667c13f6
        Validity
            Not Before: Sep  7 06:01:08 2025 GMT
            Not After : Sep  8 06:01:08 2025 GMT
        Subject: CN=de9dec8eacad1060b9132031c9f261424c301433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5a:3d:c3:ff:3f:07:f4:1f:67:63:e1:dc:a9:
                    bd:12:00:9d:fa:03:d5:a6:a6:32:99:cb:eb:dc:c5:
                    9e:bc:28:04:64:dc:88:9d:b2:00:e6:7a:fb:53:b6:
                    11:d8:c3:61:4e:5e:b8:ca:2a:5d:76:71:6e:e1:5a:
                    3f:3c:f0:09:9d:00:f0:d7:cc:15:b5:da:07:49:e3:
                    43:c1:ed:04:05:20:b1:f0:8b:8c:b8:dd:68:f2:dc:
                    17:e4:52:93:f6:43:a9:fb:3a:4e:02:a4:c5:24:e4:
                    21:c5:93:ce:9a:59:6b:f6:7f:f6:b1:7a:05:c1:cd:
                    eb:74:e5:08:9c:ce:87:4e:c7:aa:91:fc:cc:34:ad:
                    bf:1d:63:72:e0:2a:ee:20:67:3e:da:6c:cf:90:8f:
                    b1:39:75:ed:8c:bf:73:b9:04:3b:2e:f4:32:d9:6b:
                    cb:29:94:be:0f:25:21:12:ae:20:c2:a7:54:7c:c1:
                    0f:80:f9:48:e3:1f:2d:bb:a2:b4:9a:e4:38:b8:5e:
                    c0:ec:b0:2a:62:be:37:16:46:f7:d2:d8:94:66:3d:
                    be:3d:2b:0f:7c:68:25:9b:c4:14:8f:c4:a6:81:d4:
                    80:be:e9:77:e1:f6:d9:87:1a:1a:7f:fd:7b:93:54:
                    d6:54:98:b8:70:fb:0a:66:48:35:8a:60:7d:8d:68:
                    c0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9D:EC:8E:AC:AD:10:60:B9:13:20:31:C9:F2:61:42:4C:30:14:33
            X509v3 Authority Key Identifier:
                keyid:E2:4B:E2:9D:4F:E0:C4:C8:43:50:17:2A:8A:34:96:CC:66:7C:13:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:b1:eb:7e:47:e8:05:a8:5f:8a:fe:23:a9:b7:92:ed:cb:a0:
         a3:f5:c5:a0:49:e2:8a:89:8b:4b:63:48:02:69:80:7a:d7:16:
         2d:f6:57:71:ce:6e:b0:b1:3e:89:f7:7d:12:c0:6a:a3:3b:23:
         ac:ef:d0:fe:23:c8:39:34:a9:5c:d5:5a:8d:2a:00:6b:cb:f5:
         9b:46:51:f2:b7:b4:8b:4b:6c:18:89:e2:36:ba:16:d3:35:00:
         80:9a:4f:de:6f:0e:16:d0:32:20:25:c7:e2:3d:9e:89:a8:57:
         7c:ba:56:6c:15:5c:7e:9a:03:e1:24:5f:ba:d0:f5:09:3c:95:
         2f:db:3b:c8:8b:3e:7f:26:a7:67:f3:3f:34:77:53:5f:6a:05:
         a6:cf:6f:9e:67:8f:3a:9b:03:57:8b:1c:b2:ca:3d:01:99:35:
         5c:7c:63:95:5e:0a:c2:91:be:c8:0d:e9:99:b7:4d:4b:f0:4a:
         11:d6:b3:45:f2:27:cc:35:e4:d1:17:19:0e:07:1b:80:65:da:
         29:7e:27:b2:4f:ed:7e:15:28:35:b7:d0:33:84:9f:25:69:eb:
         80:0d:f2:f1:6f:90:c6:58:7b:10:8f:c7:d5:5a:9a:30:ce:96:
         d0:b2:b6:61:d2:30:36:8b:18:82:07:86:f7:b1:fe:dd:b7:48:
         36:ed:a8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:16 2025 by rpki-client