Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft
File:                     F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft (raw, json)
Hash identifier:          CfJ4OJtSkru/RGp/FsieUa6wn3JEWI3RJLzLGTqVSvw=
Subject key identifier:   1E:58:4A:D1:90:93:54:DE:3C:FF:98:A8:C9:A0:4F:87:A6:F3:F0:40
Authority key identifier: 17:88:25:28:6B:EE:C9:12:D1:98:8D:08:D2:E2:77:F5:18:F3:E4:AA
Certificate issuer:       /CN=178825286beec912d1988d08d2e277f518f3e4aa
Certificate serial:       01992255BD2423CB5A8140678FE8EAC430D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft
Manifest number:          1671
Signing time:             Sun 07 Sep 2025 04:01:08 +0000
Manifest this update:     Sun 07 Sep 2025 04:01:08 +0000
Manifest next update:     Mon 08 Sep 2025 04:01:08 +0000
Files and hashes:         1: F4glKGvuyRLRmI0I0uJ39Rjz5Ko.crl (hash: CgKhjkuZjRlLuh9TP8+D6XN15eIU6ghKz6mwYqqk9wg=)
                          2: JTEomKX4OOyZxOy0baHsaALemoI.roa (hash: JGEo9LSNLQbTCM9QYbM4j5mLQD81VFGImQN07wE3Oxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:bd:24:23:cb:5a:81:40:67:8f:e8:ea:c4:30:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=178825286beec912d1988d08d2e277f518f3e4aa
        Validity
            Not Before: Sep  7 04:01:08 2025 GMT
            Not After : Sep  8 04:01:08 2025 GMT
        Subject: CN=1e584ad1909354de3cff98a8c9a04f87a6f3f040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6c:f2:8b:2a:e3:c9:0b:05:13:08:9b:9f:ee:
                    03:e6:f5:3c:83:c4:60:60:8a:aa:13:c5:b4:86:fe:
                    28:f8:db:d2:d5:03:8e:7f:32:d8:71:70:86:46:9f:
                    dd:86:33:b6:0f:6d:7f:91:ec:ef:3b:99:46:22:1b:
                    0d:a3:66:f7:50:8a:4e:fe:64:a0:b6:5c:31:f6:7b:
                    fd:ee:f0:77:f7:3f:19:99:95:66:5a:26:e9:57:17:
                    10:03:e7:6c:20:06:4d:42:e4:45:c9:9b:65:d4:d0:
                    33:fc:5f:45:bd:9f:cf:0b:92:d0:aa:45:8f:ae:38:
                    6b:bb:e1:bb:72:63:8e:99:fa:e3:14:7b:59:a9:2c:
                    30:e5:61:26:bd:2d:62:ec:3e:3f:27:69:94:84:d1:
                    dc:8f:e7:72:27:c2:e4:d9:2f:2a:84:9b:49:58:a6:
                    7e:0a:67:69:56:30:52:54:d8:33:d0:ff:c7:8b:03:
                    d9:27:c3:56:a6:b0:52:94:1a:79:30:49:19:a9:d7:
                    eb:68:72:ee:c3:79:27:5a:25:1a:6b:b7:3b:75:6e:
                    3d:be:59:c5:3e:b7:42:cd:f6:d1:50:87:fd:d5:65:
                    d1:06:b1:4a:49:74:0e:21:af:d9:21:1c:1d:a3:66:
                    ab:c0:22:6e:43:7c:2b:e6:65:72:19:0e:db:1a:ae:
                    c4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:58:4A:D1:90:93:54:DE:3C:FF:98:A8:C9:A0:4F:87:A6:F3:F0:40
            X509v3 Authority Key Identifier:
                keyid:17:88:25:28:6B:EE:C9:12:D1:98:8D:08:D2:E2:77:F5:18:F3:E4:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:ea:48:67:ff:f1:37:8f:81:91:2e:b4:a2:03:84:4d:fa:34:
         46:4d:90:ac:23:79:4a:9d:9d:70:22:cc:c8:b2:bc:26:72:e1:
         2a:97:0c:ae:15:71:4a:ec:8c:8a:50:5b:d2:9e:25:6f:8f:08:
         4d:8d:4f:b2:f9:c0:15:1a:d3:9f:b6:32:ee:41:10:4b:90:37:
         9e:25:0d:b4:ac:47:35:5e:19:ab:81:9c:76:57:01:f1:a2:b3:
         68:15:cc:b7:bc:70:0f:d4:7a:4e:71:00:47:2e:cb:29:04:3c:
         0d:a0:23:59:2d:e0:aa:8e:5e:73:81:57:ed:b6:a8:ef:88:d0:
         55:13:c1:e4:7d:73:9d:1a:c4:05:18:00:71:2e:6d:ed:9b:9c:
         ce:0f:2c:65:07:80:ef:f8:f7:4b:ae:7a:0c:09:6e:bd:ee:c2:
         c5:a4:c0:63:90:ee:73:39:5e:3d:36:03:ab:6a:80:57:e4:33:
         18:35:29:2a:fd:34:52:c5:1b:2c:ff:e6:d9:2f:31:c9:b7:42:
         1d:86:a1:c2:ff:5e:cc:94:ab:be:e2:f2:6a:45:f6:29:23:bb:
         c9:64:d9:36:24:ad:4b:49:4e:b1:ce:7f:e6:9e:1b:43:e0:70:
         8f:61:2d:b1:f9:9e:59:62:0a:a2:b6:d6:90:30:52:42:a1:8c:
         00:f7:5c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:53:03 2025 by rpki-client