Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
File:                     4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft (raw, json)
Hash identifier:          98xw7rlSUi8gNUnxRgb7UNh3zBdgpzaigXejut+2SaI=
Subject key identifier:   97:08:D7:3B:D7:A6:FE:A3:A9:F5:11:E3:F8:D6:F2:10:2B:80:7F:EB
Authority key identifier: E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44
Certificate issuer:       /CN=e1d3c9af6cf52b8a390b58f00b14a88710336944
Certificate serial:       0199375C5B29AB0437BB8396B63805D0ED59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
Manifest number:          10F6
Signing time:             Thu 11 Sep 2025 06:00:23 +0000
Manifest this update:     Thu 11 Sep 2025 06:00:23 +0000
Manifest next update:     Fri 12 Sep 2025 06:00:23 +0000
Files and hashes:         1: 4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl (hash: Ty6FYm2VD8jZMBlK+iRTOVn8K1vKD43Ubqkx/+SGkLU=)
                          2: EIPXP4SEmPbV8aQA2-5L0Ta_OhQ.roa (hash: YwImDgJjuNmka436Jqvx4IjnyNxYmhqYhI9Yd1gMUo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 05:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:37:5c:5b:29:ab:04:37:bb:83:96:b6:38:05:d0:ed:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1d3c9af6cf52b8a390b58f00b14a88710336944
        Validity
            Not Before: Sep 11 06:00:23 2025 GMT
            Not After : Sep 12 06:00:23 2025 GMT
        Subject: CN=9708d73bd7a6fea3a9f511e3f8d6f2102b807feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:19:72:c9:37:fe:c7:7d:92:f9:ce:05:3e:ce:
                    d6:7d:63:bb:4b:7d:69:39:37:5c:55:34:dd:71:fd:
                    bc:72:48:2a:67:b9:96:51:11:68:a9:b8:7e:ed:d6:
                    69:39:c3:06:ca:47:f1:72:01:d7:f6:7d:5e:e9:5f:
                    c8:27:9d:5d:4c:5d:4e:6c:24:f3:0a:1d:65:92:18:
                    67:c9:8c:94:4b:ef:5e:eb:11:d9:e3:43:15:f5:aa:
                    55:93:66:ea:a8:1b:78:9a:45:b9:ab:8e:40:7f:d0:
                    53:8e:dd:c9:3e:57:82:50:64:33:7b:a0:55:10:2b:
                    67:52:b3:60:21:89:9a:35:d3:44:e2:22:66:ed:da:
                    21:46:b7:14:de:c1:62:fc:b5:69:9c:fd:90:17:c9:
                    8e:ce:73:2d:7c:1a:dd:7c:2f:d8:6f:6e:93:7b:27:
                    18:d2:78:8f:2c:89:49:4b:cb:55:ed:cf:69:73:23:
                    cd:0a:1d:21:e0:24:49:de:2a:09:f3:1f:22:95:65:
                    7f:76:89:d1:80:a6:eb:61:33:b1:07:dd:99:8c:88:
                    92:56:0f:84:b7:73:51:68:db:fe:f1:db:e4:86:c7:
                    2f:a7:51:13:25:5f:c7:57:15:1f:cb:20:48:0a:95:
                    17:45:0c:fc:fe:d0:bb:0c:97:8d:78:50:5c:dc:7b:
                    26:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:08:D7:3B:D7:A6:FE:A3:A9:F5:11:E3:F8:D6:F2:10:2B:80:7F:EB
            X509v3 Authority Key Identifier:
                keyid:E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:b4:7c:be:4e:2c:21:76:c7:03:16:39:ba:90:62:69:66:70:
         53:62:6d:b3:25:ba:ed:3e:92:af:21:7b:1e:b4:3e:7f:8b:60:
         37:4c:c0:46:cf:5a:75:7a:81:31:42:cc:a5:c3:f9:c3:4e:71:
         df:a2:df:f5:fd:5c:3b:6f:ec:cc:98:26:30:54:98:00:02:22:
         17:30:81:0f:7f:47:f9:a4:c5:9b:90:fa:cc:ac:96:6c:e8:5b:
         b9:cc:55:80:b7:ac:e0:b6:de:27:2f:fd:67:56:d7:2d:74:b0:
         c3:d3:6c:5b:d8:e1:8c:a8:ec:2a:19:8a:ca:ef:e2:51:93:96:
         16:31:ec:d9:d5:b2:41:92:52:eb:9d:16:ce:15:3f:32:19:ce:
         1c:a5:46:65:d3:4f:20:17:7a:17:9e:90:d6:10:da:27:6e:73:
         80:2d:35:0e:43:05:9a:6d:01:ba:c7:bb:b5:26:ba:aa:9b:ea:
         3e:a2:f9:24:43:a3:4a:2d:62:6d:e6:b1:3e:dc:1d:9a:95:96:
         d7:0e:3e:a2:f3:4e:8d:40:63:b1:b8:78:f9:84:91:2b:1a:dc:
         93:0b:eb:25:7e:c1:86:30:26:37:0f:38:f5:06:17:db:41:87:
         62:2f:4e:e9:3c:e9:34:c7:bb:33:2d:4f:31:b3:12:86:7a:86:
         94:8d:a3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 12:29:17 2025 by rpki-client