Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
File:                     4Gkduvo6jeBwsHAi3prfdDQftPI.mft (raw, json)
Hash identifier:          Vi8k31RO7luuGLsdlMBKR+Pcp26So71F3quRQw8/ows=
Subject key identifier:   8C:02:C0:9A:3B:30:23:AD:F2:6F:4B:BF:3E:1B:B2:D7:AB:4D:17:2C
Authority key identifier: E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
Certificate issuer:       /CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Certificate serial:       0199307EDF08899447E423A36DDE41E606F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
Manifest number:          0F39
Signing time:             Tue 09 Sep 2025 22:00:44 +0000
Manifest this update:     Tue 09 Sep 2025 22:00:44 +0000
Manifest next update:     Wed 10 Sep 2025 22:00:44 +0000
Files and hashes:         1: 4Gkduvo6jeBwsHAi3prfdDQftPI.crl (hash: Wx+lREJ4FZ6wWFmA5mBwxCa0jAOOaX5Cdds2EkJ7i/s=)
                          2: ZcIsus6k0U4n68vd2BlSmmX0JTQ.roa (hash: GGkzJjiRy+xG+nAGWUrXuzxUvFxqlSxJYvMRGhTfLjg=)
                          3: fO5bykwkTB3KiAZuWcyGEBGhJE8.roa (hash: 3HfGLaMktk6F2ghb5LrLG+rGBzaC5K9KjLNpttW6IrQ=)
                          4: wFM8K8dCgcjVIF6EWdiQdlQNXyY.roa (hash: lm9Zbfc6llKnFMQrYcsYug5Fz4BrAVnfVm1lHsp7Cfo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 21:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:30:7e:df:08:89:94:47:e4:23:a3:6d:de:41:e6:06:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
        Validity
            Not Before: Sep  9 22:00:44 2025 GMT
            Not After : Sep 10 22:00:44 2025 GMT
        Subject: CN=8c02c09a3b3023adf26f4bbf3e1bb2d7ab4d172c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bb:35:49:c4:c6:0c:c1:02:01:27:79:43:08:
                    49:28:be:60:68:b3:85:e5:b4:76:a9:f7:96:82:5c:
                    21:07:3b:d6:9f:0b:ce:3b:6d:73:fa:db:4a:16:70:
                    cd:86:d1:53:48:31:59:62:14:36:cd:82:36:61:05:
                    fc:ae:ad:b8:78:60:a0:24:c3:e5:46:3b:93:eb:46:
                    86:a9:62:1a:76:7e:98:05:fe:56:68:8f:db:ef:95:
                    8f:57:af:fa:99:c5:58:76:24:a4:cf:86:95:c1:3c:
                    de:3a:44:0d:0c:52:82:93:a1:a6:cf:72:2b:02:ee:
                    12:d6:98:37:83:50:38:85:1d:e9:0a:08:f9:71:fb:
                    03:7b:a5:e1:34:63:c4:e9:51:19:c2:f0:9a:47:b5:
                    ea:71:96:bc:4f:90:e3:c9:47:ea:c5:9e:a9:5d:33:
                    8e:e7:cc:9d:84:06:90:1a:08:71:f1:ac:a2:62:5c:
                    37:a5:4c:09:2c:c3:3a:c4:dd:49:a1:3d:66:74:23:
                    29:3a:fa:c1:f4:24:7c:b0:04:b2:79:49:a6:57:74:
                    0b:e4:aa:ce:3d:ca:26:c1:22:77:fc:d1:cd:89:52:
                    aa:47:f6:04:c0:c0:eb:40:ef:b9:ae:80:31:91:e1:
                    83:d8:70:a4:9f:c3:95:54:30:18:1e:d1:ea:62:69:
                    b1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:02:C0:9A:3B:30:23:AD:F2:6F:4B:BF:3E:1B:B2:D7:AB:4D:17:2C
            X509v3 Authority Key Identifier:
                keyid:E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:92:6f:c6:5b:24:39:40:8d:0c:10:f8:fd:5f:17:b3:ea:f6:
         19:fe:f1:85:56:c6:54:52:2c:37:9a:ee:23:84:3c:5d:da:0f:
         6f:5a:d5:83:0c:87:57:cf:ae:dc:3f:56:51:cb:62:8d:ac:f3:
         5f:47:ce:ef:41:9a:1c:33:72:50:fc:13:1a:18:3f:6c:02:e8:
         16:34:54:e9:93:5e:ce:40:8b:52:22:f0:24:e8:30:51:ee:04:
         d9:1c:95:17:51:d2:d8:c2:e4:d4:0f:8a:94:74:f0:2b:73:2d:
         84:eb:f0:bd:c4:4e:13:8a:03:53:19:4e:d5:47:bd:f4:e7:55:
         4b:d7:c7:77:74:55:1a:22:f0:58:9a:84:78:25:e4:c3:f9:01:
         1c:b4:10:91:50:f7:6b:58:79:11:58:f2:09:ec:6b:46:57:0c:
         fe:b8:47:a7:d5:8c:19:1f:9c:0c:7b:ad:9e:9e:49:19:af:f9:
         b3:dd:12:b2:f4:cc:e3:fc:30:3d:b0:7e:27:f0:fa:dd:cf:e6:
         11:bb:4c:4e:62:c1:09:c7:85:28:ad:43:4e:04:f4:ed:90:89:
         7a:e9:9f:16:95:de:ff:2e:9a:69:40:a8:63:89:7c:34:67:6d:
         51:39:a3:99:f7:f4:37:23:b7:d3:a4:53:31:80:cb:de:ec:9b:
         7b:25:00:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 07:15:14 2025 by rpki-client