Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft
File:                     4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft (raw, json)
Hash identifier:          Jt0EhOHaiJ7JjHuW9z4zUIi6GvZfnHxpBD+7iVnYPNs=
Subject key identifier:   DE:55:AC:2F:2E:23:00:B9:17:61:F4:7C:9D:0F:16:9E:1A:70:39:53
Authority key identifier: E1:1A:A9:28:50:EB:FE:64:8A:D3:D8:9A:DD:8E:73:6E:C3:67:5A:11
Certificate issuer:       /CN=e11aa92850ebfe648ad3d89add8e736ec3675a11
Certificate serial:       019931FF182F32713DBBE73FA18FCF002304
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft
Manifest number:          0C9F
Signing time:             Wed 10 Sep 2025 05:00:25 +0000
Manifest this update:     Wed 10 Sep 2025 05:00:25 +0000
Manifest next update:     Thu 11 Sep 2025 05:00:25 +0000
Files and hashes:         1: 4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl (hash: Xh99fK6tNcKB8S86AqRCw2riDMmWR6reU5rQfbHKPDc=)
                          2: CCavKhP7AEj7Vk_SGWe1jvcCRyg.roa (hash: ErCh+iOQog12EmBkEQOKm5CnYVqmDx85/Bq5syDjRtk=)
                          3: _UE4NiO0pfWfFFAbb7iwrwRdv6s.roa (hash: Nt6mUmB/b8Tz/UtmdUFBFCY+JhXJPjG/PVld3xk2bu0=)
                          4: hNzhsJdSXiT8XXk4l8WcnUMry00.roa (hash: y9TrG3MRhc+YaHxz1FlPh4FWDR2QP4R98mul7cPcOWM=)
                          5: sJD4QxX177UEmI36HO3Czbd6lZo.roa (hash: eB1LP6A5y8Zxb2lEo5Jx2JKKRWjFRnxR3igeTvfMlBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 02:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:31:ff:18:2f:32:71:3d:bb:e7:3f:a1:8f:cf:00:23:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e11aa92850ebfe648ad3d89add8e736ec3675a11
        Validity
            Not Before: Sep 10 05:00:25 2025 GMT
            Not After : Sep 11 05:00:25 2025 GMT
        Subject: CN=de55ac2f2e2300b91761f47c9d0f169e1a703953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a8:ef:b0:79:d8:2c:d1:ca:d9:5e:7e:b8:35:
                    3c:1f:a0:24:0e:3a:ff:d8:26:ce:e7:4b:8d:15:b2:
                    37:be:a1:b1:2b:18:60:77:d2:47:a3:f6:86:5b:4f:
                    49:cb:09:55:02:52:c7:60:15:cb:1a:be:69:13:14:
                    51:6e:68:e0:b2:c8:bd:9a:44:e2:58:b0:03:1b:47:
                    ab:2c:b9:71:4e:39:f5:ef:52:d0:85:21:7d:79:b7:
                    be:e3:0c:85:07:f1:64:e3:62:1b:7a:a8:2c:92:5a:
                    d5:4d:b3:61:9c:ff:56:42:f5:07:1a:9d:39:20:79:
                    18:1e:54:e9:c1:40:e2:0c:6c:57:0f:fd:49:22:05:
                    58:7e:6c:7e:d4:10:b3:16:49:60:1e:65:99:67:0b:
                    57:65:3f:26:be:f9:1b:cf:bf:6d:a8:77:d1:7c:ba:
                    c5:35:df:4a:0c:50:cc:07:da:4a:8e:57:fe:80:79:
                    98:3d:3a:c5:77:20:bb:f3:84:0e:15:0f:74:45:fc:
                    a2:7f:3f:98:8a:d5:33:d0:a1:34:08:b9:75:7b:c6:
                    30:06:28:28:c2:d6:1d:0d:8e:47:a2:c4:bc:05:f0:
                    84:1b:85:2a:f0:fd:30:cb:a3:9f:31:21:69:07:bc:
                    30:60:c5:5e:cc:8f:97:f5:56:de:57:91:c2:18:83:
                    76:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:55:AC:2F:2E:23:00:B9:17:61:F4:7C:9D:0F:16:9E:1A:70:39:53
            X509v3 Authority Key Identifier:
                keyid:E1:1A:A9:28:50:EB:FE:64:8A:D3:D8:9A:DD:8E:73:6E:C3:67:5A:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:01:d2:39:91:92:0d:a6:1d:53:b4:6b:92:5d:8b:54:d8:fe:
         ad:0b:02:5d:98:ff:f8:c8:d8:88:1d:3d:5a:c9:f0:ed:91:a9:
         0b:da:b8:43:16:d3:07:b5:e0:24:e6:2e:16:8f:70:25:bc:6d:
         75:a9:cd:57:7f:86:93:fc:c6:a8:7c:34:0d:2e:da:63:32:a8:
         f0:4b:5b:16:9c:4b:60:8a:a3:56:37:66:87:22:a0:ec:f2:4f:
         87:d4:d0:60:22:7e:ae:fb:51:2d:0c:17:41:3a:2b:ad:a6:45:
         cd:70:c9:ed:7a:2c:89:d8:43:70:5d:ca:53:85:01:9e:13:ac:
         cd:84:64:2b:27:ce:34:99:6d:80:ba:2d:a1:79:3f:0e:83:b5:
         6e:4c:f3:99:32:bd:89:93:c0:91:5e:fa:dd:12:32:98:5e:98:
         c1:35:3f:be:9e:fb:f5:c9:ef:20:0f:f9:5c:db:7e:d9:bc:9e:
         c7:52:5b:a2:52:45:24:52:d6:98:32:fe:07:46:53:69:ca:3e:
         ac:8e:f6:cb:ee:51:5e:e5:17:0a:7b:9f:e1:e6:b0:ea:02:41:
         72:a5:f1:55:69:7b:3e:1e:60:90:5f:ec:57:bb:77:ce:cf:02:
         56:d5:2b:ce:35:a8:3a:92:e7:9e:5c:7b:e5:30:94:1b:ee:ef:
         86:3e:b8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 07:30:06 2025 by rpki-client