Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
File:                     4McMwtIdqMLqZIFTT0jaSVqoS90.mft (raw, json)
Hash identifier:          ZVsFW6Bvfaa0qaYnACeZxjFJG5FUcHxwqkACbGqclNw=
Subject key identifier:   42:B3:6B:1A:0B:A5:00:C8:4E:0D:47:D7:A1:CF:EA:F1:D7:08:9F:BF
Authority key identifier: E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD
Certificate issuer:       /CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd
Certificate serial:       019922C323ED84CC1CD1F16F31A7436C9C6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
Manifest number:          1671
Signing time:             Sun 07 Sep 2025 06:00:37 +0000
Manifest this update:     Sun 07 Sep 2025 06:00:37 +0000
Manifest next update:     Mon 08 Sep 2025 06:00:37 +0000
Files and hashes:         1: 4McMwtIdqMLqZIFTT0jaSVqoS90.crl (hash: qaeevJ8wkByuPk/7OAcEi9vSsthDz8uJuqg4oYXSJrE=)
                          2: Eyx-nlRpe0-godGFL3xYlKtLlbQ.roa (hash: 9oeY/MAa6lvwYN19OiXxeJ1LVR37sI0FzCd1Eq/rgTE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:23:ed:84:cc:1c:d1:f1:6f:31:a7:43:6c:9c:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd
        Validity
            Not Before: Sep  7 06:00:37 2025 GMT
            Not After : Sep  8 06:00:37 2025 GMT
        Subject: CN=42b36b1a0ba500c84e0d47d7a1cfeaf1d7089fbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:12:75:16:1d:35:d5:e9:b8:c6:7b:f7:21:b6:
                    da:c2:d8:41:79:2a:20:f6:6a:91:1b:bf:dd:29:3a:
                    3e:7f:36:74:1c:ff:a6:02:2b:18:93:3f:16:84:3a:
                    5c:1e:c9:bb:71:76:e0:c5:e0:9d:e6:34:50:95:31:
                    88:21:df:80:82:58:da:e3:d6:c2:28:c4:74:00:58:
                    bd:14:3f:d0:8c:b8:1a:b6:1b:84:f2:e4:72:0e:bd:
                    fd:47:23:5d:2a:56:21:0f:98:60:4f:3d:db:21:04:
                    39:4f:e8:5e:b1:54:b6:77:26:c0:e9:ca:ca:76:73:
                    74:2d:af:b7:31:e1:41:33:b0:22:ae:72:b6:04:b3:
                    45:d1:ce:cf:7c:6c:57:75:cd:5b:ce:40:c9:c2:5b:
                    de:c6:77:5e:72:dd:a9:06:fb:70:f7:d6:fe:cd:3f:
                    b3:22:ac:f7:ce:12:93:c8:96:18:89:82:b1:1d:9d:
                    2e:c3:b0:35:e8:4a:fb:8f:bb:1b:f9:54:48:d2:f1:
                    30:92:d9:91:1f:be:cd:eb:24:be:7f:c4:77:2a:4c:
                    ce:c6:8f:6c:a5:76:6a:4b:02:cb:fd:aa:e6:e1:18:
                    dc:54:73:27:97:66:fb:a7:74:c7:34:81:99:94:63:
                    48:b6:e5:ee:5f:79:27:9b:8b:10:03:24:9f:ff:2a:
                    f5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B3:6B:1A:0B:A5:00:C8:4E:0D:47:D7:A1:CF:EA:F1:D7:08:9F:BF
            X509v3 Authority Key Identifier:
                keyid:E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ca:0c:bf:3f:44:69:8e:37:ef:fb:30:84:3e:04:66:15:1b:
         f9:aa:4d:2d:ff:a8:74:f1:a6:b8:d6:a2:d4:35:2c:8b:f9:00:
         d8:50:9a:aa:0b:f0:92:7e:1e:76:71:de:69:e5:bf:30:4d:22:
         10:4a:4e:f1:0d:69:21:ee:5e:c1:a7:9d:93:45:f0:7b:e0:cb:
         64:ae:d4:1a:ce:90:86:de:50:d0:0e:40:79:2b:6d:cd:da:41:
         5b:09:f0:78:16:ae:a9:bd:fb:98:6c:9f:17:1f:6d:b6:00:bb:
         a1:b9:3d:33:d3:12:d5:13:43:7b:5b:9b:f0:7f:26:c3:f6:42:
         bd:4e:28:2a:dc:67:00:d0:09:93:4d:ef:98:94:0b:24:bd:a1:
         be:f9:f5:ce:2c:93:d8:2a:92:19:c0:2d:2f:a3:6f:b5:1c:50:
         ee:b3:75:ba:31:e9:57:1e:ca:94:1d:29:25:39:ae:cd:55:d6:
         13:e0:03:1e:61:95:d2:0c:78:52:9e:c4:d8:d9:57:ea:58:f0:
         fb:36:5f:c4:1d:f5:66:a7:40:63:de:91:9c:1c:ca:c1:0c:8e:
         1a:a9:b8:28:42:ab:48:96:b2:3d:ef:fe:dd:56:fa:f0:c7:0d:
         f6:b0:7d:57:e0:27:8c:61:d1:b9:0b:61:85:02:85:bf:70:85:
         51:92:5d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:33 2025 by rpki-client