Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
File:                     4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft (raw, json)
Hash identifier:          YEyCLvwz5XQ1uEO1ADdKQu+FutvYJ0MgGNKhc80x2uk=
Subject key identifier:   2E:67:B4:47:93:AE:47:5F:D7:C5:0B:72:3F:AA:72:AB:30:B4:B1:51
Authority key identifier: E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2
Certificate issuer:       /CN=e18c718b45a77675909d7fd1afec6daabafe88b2
Certificate serial:       019922FA42383B2FABA303DA4BF987835A27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
Manifest number:          07F4
Signing time:             Sun 07 Sep 2025 07:00:50 +0000
Manifest this update:     Sun 07 Sep 2025 07:00:50 +0000
Manifest next update:     Mon 08 Sep 2025 07:00:50 +0000
Files and hashes:         1: 4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl (hash: OehGo58oQGnYoaU+RWaKN19YEwa79FfmtljOc98M+pE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:42:38:3b:2f:ab:a3:03:da:4b:f9:87:83:5a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e18c718b45a77675909d7fd1afec6daabafe88b2
        Validity
            Not Before: Sep  7 07:00:50 2025 GMT
            Not After : Sep  8 07:00:50 2025 GMT
        Subject: CN=2e67b44793ae475fd7c50b723faa72ab30b4b151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:65:04:65:a2:14:3d:ae:66:10:06:3d:2a:26:
                    f4:73:68:75:ac:52:3d:75:34:42:55:9e:13:43:62:
                    e6:d8:42:a0:50:4d:d6:fb:b4:d3:88:ad:d1:b2:ca:
                    cb:76:72:21:e1:59:57:cf:51:e4:19:ce:5b:cb:af:
                    e2:13:ce:3b:84:de:a0:f2:25:7c:35:25:15:c8:e3:
                    8b:fe:b8:af:53:93:8c:5f:8c:7c:a1:7a:fe:5f:7a:
                    37:e8:12:ac:48:6e:07:43:a8:fa:77:2e:97:1e:32:
                    2b:a6:11:13:bd:57:b3:43:28:2c:da:c8:f2:a4:a3:
                    0b:28:4f:b9:4c:8d:3d:74:84:89:46:ba:21:70:17:
                    cd:af:19:01:a3:29:2b:71:35:eb:30:b1:f1:0f:42:
                    67:0e:83:90:88:c3:f3:06:2f:78:b4:20:b1:53:9a:
                    0e:a1:32:cb:fb:78:b9:76:d5:17:e0:0d:8a:38:4b:
                    5c:17:4d:0f:0c:1c:73:c2:47:fc:65:aa:dc:14:6b:
                    ee:fb:e9:01:6f:63:ff:0a:e1:6a:26:dd:c5:47:86:
                    a9:6a:70:ee:54:b6:9c:c1:ee:f3:b4:48:4c:08:ee:
                    64:c4:71:da:71:e5:6e:58:ce:a4:fa:3f:48:58:b0:
                    df:59:28:7b:8b:7f:32:9a:8b:7c:19:6b:4f:99:eb:
                    1e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:67:B4:47:93:AE:47:5F:D7:C5:0B:72:3F:AA:72:AB:30:B4:B1:51
            X509v3 Authority Key Identifier:
                keyid:E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:ff:22:44:f9:2c:b5:a4:39:07:24:02:22:83:96:e0:08:d5:
         31:ca:6e:69:8c:fc:9c:bd:e0:e1:5d:22:79:a7:6f:15:f7:64:
         81:0c:c7:ae:fc:dc:7c:5d:b9:40:c3:6d:6c:ff:a5:e8:06:ed:
         52:3b:9d:28:86:22:26:0d:66:d5:a5:fb:4b:08:78:ed:bb:fb:
         52:6a:37:27:4d:5c:8b:20:29:18:6d:c3:b8:b0:af:f8:64:12:
         8d:09:e4:a4:2a:8f:3e:fc:9d:0e:2e:70:cd:07:ae:70:f6:34:
         fd:4c:23:ef:ff:ca:26:8f:2c:79:a3:db:01:8b:28:5d:fe:c5:
         8e:72:15:c3:f2:b6:15:23:01:80:5e:5e:d5:98:d1:ee:84:fc:
         ad:da:4b:90:86:b6:d0:27:8f:4d:83:f9:13:0d:69:4c:8e:55:
         42:11:34:2f:24:70:1d:db:31:9e:4f:0a:d0:4f:d8:5d:d6:41:
         de:08:c3:b8:67:a8:75:07:b0:17:94:15:7b:b2:bd:75:64:39:
         3b:17:62:85:5b:bf:14:61:54:96:1f:3e:00:71:2a:ff:6f:c3:
         b9:55:7a:f9:a2:b4:93:4c:f4:bf:8a:b1:ec:7f:61:77:5c:74:
         ec:dc:63:9f:58:aa:9c:5f:a2:7f:64:70:3d:89:cb:7a:38:59:
         56:ec:0c:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+kI4Oy+rowPaS/mHg1onMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxOGM3MThiNDVhNzc2NzU5MDlkN2ZkMWFmZWM2ZGFhYmFm
ZTg4YjIwHhcNMjUwOTA3MDcwMDUwWhcNMjUwOTA4MDcwMDUwWjAzMTEwLwYDVQQD
EygyZTY3YjQ0NzkzYWU0NzVmZDdjNTBiNzIzZmFhNzJhYjMwYjRiMTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGUEZaIUPa5mEAY9Kib0c2h1rFI9
dTRCVZ4TQ2Lm2EKgUE3W+7TTiK3RssrLdnIh4VlXz1HkGc5by6/iE847hN6g8iV8
NSUVyOOL/rivU5OMX4x8oXr+X3o36BKsSG4HQ6j6dy6XHjIrphETvVezQygs2sjy
pKMLKE+5TI09dISJRrohcBfNrxkBoykrcTXrMLHxD0JnDoOQiMPzBi94tCCxU5oO
oTLL+3i5dtUX4A2KOEtcF00PDBxzwkf8ZarcFGvu++kBb2P/CuFqJt3FR4apanDu
VLacwe7ztEhMCO5kxHHaceVuWM6k+j9IWLDfWSh7i38ymot8GWtPmeseRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5ntEeTrkdf18ULcj+qcqswtLFRMB8GA1UdIwQY
MBaAFOGMcYtFp3Z1kJ1/0a/sbaq6/oiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFl4eGkwV25kbldRblhfUnIteHRxcnItaUxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC80NjdiYTctNWM5My00ZGVkLTk5Nzgt
MDRmMDQ0YmI5OGMyLzEvNFl4eGkwV25kbldRblhfUnIteHRxcnItaUxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC80NjdiYTctNWM5My00ZGVkLTk5NzgtMDRmMDQ0YmI5OGMy
LzEvNFl4eGkwV25kbldRblhfUnIteHRxcnItaUxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfv8iRPks
taQ5ByQCIoOW4AjVMcpuaYz8nL3g4V0ieadvFfdkgQzHrvzcfF25QMNtbP+l6Abt
UjudKIYiJg1m1aX7Swh47bv7Umo3J01ciyApGG3DuLCv+GQSjQnkpCqPPvydDi5w
zQeucPY0/Uwj7//KJo8seaPbAYsoXf7FjnIVw/K2FSMBgF5e1ZjR7oT8rdpLkIa2
0CePTYP5Ew1pTI5VQhE0LyRwHdsxnk8K0E/YXdZB3gjDuGeodQewF5QVe7K9dWQ5
OxdihVu/FGFUlh8+AHEq/2/DuVV6+aK0k0z0v4qx7H9hd1x07Nxjn1iqnF+if2Rw
PYnLejhZVuwMtg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:28 2025 by rpki-client