Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.mft
File:                     4VhJEBJK93bjDlrPBV1rrhdhpTY.mft (raw, json)
Hash identifier:          iKEzTAxWnip/uMy6ZI53t2NybMNuzBbYadnNFarkk5c=
Subject key identifier:   E3:58:78:76:7C:EB:5E:20:61:33:CA:5F:E7:4D:8F:B4:80:E3:36:79
Authority key identifier: E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36
Certificate issuer:       /CN=e1584910124af776e30e5acf055d6bae1761a536
Certificate serial:       01992367C8D55D33964824BE18A47ECA218F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.mft
Manifest number:          0B61
Signing time:             Sun 07 Sep 2025 09:00:28 +0000
Manifest this update:     Sun 07 Sep 2025 09:00:28 +0000
Manifest next update:     Mon 08 Sep 2025 09:00:28 +0000
Files and hashes:         1: 4VhJEBJK93bjDlrPBV1rrhdhpTY.crl (hash: t4/wbJ1d3fXWtPxl0nkKXLkKSQG2/WeoE3j8giZjI2o=)
                          2: IQROvr2vBd7jckj4JxxLTVqcojM.roa (hash: ly/jdFkHJ3s46OFRx+V8sZxwJQeghZczRi1B0/DdTGw=)
                          3: eSKsGHyxbWYwro-1UQoDIzgXZL0.roa (hash: Z+2EIYf0yK8lCQZu34hQ6FGPR1zzM9h/hZgRWuizAuo=)
                          4: hSJJJLX1bbRMPmoNrrWn8zYZMto.roa (hash: aa1oDb6YRIE01C1w01q2mp/wGqazzcsUr+aqCOejQMg=)
                          5: ihECHfgu5dDrZdiN8oiW46lzoxI.roa (hash: bQ96mW5B18QRjKhxCTD1amxvGa7WSvg+fA8xs+WbPnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:67:c8:d5:5d:33:96:48:24:be:18:a4:7e:ca:21:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1584910124af776e30e5acf055d6bae1761a536
        Validity
            Not Before: Sep  7 09:00:28 2025 GMT
            Not After : Sep  8 09:00:28 2025 GMT
        Subject: CN=e35878767ceb5e206133ca5fe74d8fb480e33679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:42:61:db:2e:4a:58:37:30:f4:6e:f9:07:35:
                    69:6c:4b:1c:7d:12:d1:a1:90:05:53:f7:2b:34:8a:
                    96:1b:af:eb:b5:25:94:54:59:40:8c:9a:18:37:0b:
                    a2:ae:7d:2e:8a:9e:72:76:f6:87:37:cb:dc:c5:19:
                    6b:91:07:29:5f:aa:e7:de:59:d9:37:6b:ff:1f:c1:
                    fe:9f:9c:b7:bd:20:70:96:c3:31:90:e5:90:0a:b2:
                    21:0c:2c:73:47:f4:4d:fd:cd:d4:5a:c4:18:b9:4c:
                    35:71:9e:68:62:b9:b5:02:b5:51:ad:7e:d0:ad:ba:
                    02:96:3c:d1:3b:3f:b4:2a:5e:89:07:fd:06:52:5f:
                    70:39:a9:42:3d:5f:6f:82:45:21:ed:a8:71:16:33:
                    42:be:dc:89:db:d1:16:c1:c0:f2:a9:2d:18:13:4e:
                    2b:43:90:fa:4b:ca:f9:04:8a:76:90:a2:c7:88:d7:
                    5c:06:85:03:1a:e8:35:60:d7:68:ef:82:d9:5b:8c:
                    10:42:a0:17:06:e4:00:58:21:55:73:91:f1:8b:6e:
                    ab:de:0d:5e:2c:1b:41:94:68:cd:e4:a9:2f:69:4e:
                    88:99:92:62:6e:1f:77:85:15:8b:d6:b7:0b:ea:75:
                    d4:84:73:cd:ab:be:89:2a:be:40:04:ac:05:c5:6f:
                    d8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:58:78:76:7C:EB:5E:20:61:33:CA:5F:E7:4D:8F:B4:80:E3:36:79
            X509v3 Authority Key Identifier:
                keyid:E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:82:16:f2:1b:8c:4f:03:53:7f:ca:5d:7a:d7:10:25:3e:4d:
         a1:2f:e2:7d:77:5e:fd:94:8c:8d:fe:b4:29:92:74:e3:63:b8:
         88:cd:9c:6c:e4:fe:8d:35:fd:6f:a9:47:02:b2:16:3e:51:5b:
         a6:12:25:6e:82:18:c9:85:1d:77:99:a8:58:4f:5b:1a:35:7d:
         56:64:c3:09:2d:95:24:a8:d4:27:0d:50:8b:a9:37:5b:ac:73:
         77:6c:10:d1:a5:5c:17:94:7c:24:e8:c6:e4:f5:99:f4:37:82:
         56:3b:8a:d0:61:d2:ce:cd:75:26:7e:01:ed:e9:e7:e3:33:f8:
         b4:61:06:3d:79:08:59:16:a2:cb:48:5c:01:68:56:2f:19:b7:
         65:ec:25:87:ba:8d:96:b1:e0:df:23:dc:1a:05:c7:84:ac:ab:
         54:cf:42:e2:a2:c8:7d:e7:92:5a:c1:5b:a4:b7:de:5e:64:0d:
         90:2c:1f:93:7c:ec:d0:a3:c1:b1:e5:7f:ec:d9:dc:82:e7:f2:
         ab:6a:ce:41:d0:39:d8:44:42:b9:da:87:d4:54:33:d6:e8:17:
         33:05:4d:48:da:1e:86:b7:50:6c:fe:78:da:fd:b2:97:b7:31:
         6a:23:2e:0d:7f:26:fd:96:ff:75:df:f6:c2:1d:4e:2a:26:a2:
         f7:3d:3b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:35:53 2025 by rpki-client