Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.mft
File:                     4ram_1lpoV0l3cO73da-uU9Ipfk.mft (raw, json)
Hash identifier:          wfXwXWGyTiE7fEdxdMf8SKQPgaiYMJ2kON6Fr7BlYKA=
Subject key identifier:   5D:E3:9C:F7:F9:99:1B:F2:01:C6:28:50:FC:00:DB:1F:61:73:7F:7F
Authority key identifier: E2:B6:A6:FF:59:69:A1:5D:25:DD:C3:BB:DD:D6:BE:B9:4F:48:A5:F9
Certificate issuer:       /CN=e2b6a6ff5969a15d25ddc3bbddd6beb94f48a5f9
Certificate serial:       019892FF3699316E300102BCDD8C3D110AD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4ram_1lpoV0l3cO73da-uU9Ipfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.mft
Manifest number:          1626
Signing time:             Sun 10 Aug 2025 08:00:55 +0000
Manifest this update:     Sun 10 Aug 2025 08:00:55 +0000
Manifest next update:     Mon 11 Aug 2025 08:00:55 +0000
Files and hashes:         1: 4ram_1lpoV0l3cO73da-uU9Ipfk.crl (hash: mHA+ZI68ZvLBsPmtVOQBgzRpiGQKJQT9EwGAzNFdxUM=)
                          2: Jw977rRbSBm1vkOFCP_ZwqthNts.roa (hash: pZc4mT999KgIePYxSGeV1dkG1LyeuUgVh98eZi0P55s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4ram_1lpoV0l3cO73da-uU9Ipfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:ff:36:99:31:6e:30:01:02:bc:dd:8c:3d:11:0a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2b6a6ff5969a15d25ddc3bbddd6beb94f48a5f9
        Validity
            Not Before: Aug 10 08:00:55 2025 GMT
            Not After : Aug 11 08:00:55 2025 GMT
        Subject: CN=5de39cf7f9991bf201c62850fc00db1f61737f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:93:dd:91:44:87:bb:18:e7:4e:cd:b0:84:b7:
                    29:be:43:25:8d:ee:31:f4:7a:42:54:cc:e9:8a:80:
                    86:e3:cf:f6:c2:16:19:5e:2e:65:9b:25:3e:d8:c9:
                    8b:a8:c3:59:32:95:3a:79:37:11:2e:24:6f:6b:3d:
                    05:ba:46:4e:c2:aa:8e:d5:82:9a:8c:0f:77:85:00:
                    20:0b:c2:54:c1:ce:44:fc:fd:84:4b:9a:18:7e:30:
                    9d:2a:e4:a2:21:89:28:ba:5d:ec:65:a1:e3:da:de:
                    16:d0:c8:47:d3:d2:c0:a7:79:ff:f8:4d:54:b9:27:
                    c2:a7:22:00:67:c5:59:7c:27:15:18:f0:05:77:64:
                    59:03:97:a0:12:4a:20:36:de:a7:d6:d1:c5:73:11:
                    e2:6a:4e:be:cc:ec:7e:f3:7d:a1:b2:15:bd:e4:9a:
                    24:45:c3:af:1d:de:28:d2:a6:b8:b0:26:0f:cb:bb:
                    3d:8f:db:cd:e1:e7:f4:d4:c4:32:1b:d0:a3:fb:d7:
                    a2:ab:41:69:de:bb:64:dd:73:2e:42:0f:de:1f:7f:
                    9f:c6:40:2c:39:04:98:cc:c5:05:0d:c6:37:92:27:
                    db:e0:d4:0a:22:0e:39:b2:23:5c:08:30:8e:a5:bd:
                    cd:4a:cd:2b:34:c4:99:95:37:05:4e:4e:11:80:9b:
                    83:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E3:9C:F7:F9:99:1B:F2:01:C6:28:50:FC:00:DB:1F:61:73:7F:7F
            X509v3 Authority Key Identifier:
                keyid:E2:B6:A6:FF:59:69:A1:5D:25:DD:C3:BB:DD:D6:BE:B9:4F:48:A5:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ram_1lpoV0l3cO73da-uU9Ipfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:99:12:01:f1:db:6c:1a:42:24:c3:32:a6:12:94:e0:c0:3e:
         66:9a:4c:47:65:e1:1a:86:8c:d0:c2:d5:cd:68:d3:f0:61:88:
         2e:0b:84:82:1d:0b:ee:12:db:b7:9b:55:97:ab:74:c5:0e:40:
         f2:bc:2d:fa:75:65:20:b1:68:61:0d:65:b9:33:e8:d5:16:b9:
         64:40:c4:0c:6d:3e:80:f7:28:e1:fe:3c:ec:e3:f3:9a:93:e7:
         b7:c1:52:c2:86:64:df:d9:ba:e6:4a:f9:60:71:b4:bb:5c:43:
         fd:49:61:97:00:43:03:bc:07:18:06:ce:33:ed:3a:c9:9c:15:
         50:6a:99:1c:3a:9c:65:1f:96:61:54:b9:7f:99:e7:10:b4:8e:
         f5:27:da:60:08:29:6b:30:4d:88:3d:8a:b0:3c:fd:45:dd:e7:
         73:24:db:67:4b:d5:ec:6f:3c:82:60:19:62:2f:c7:16:6c:41:
         58:41:2f:f8:d7:4f:95:56:04:9f:56:1a:a4:2d:b9:d9:36:f6:
         ce:f6:4b:92:68:17:fb:53:b8:77:12:61:a3:a1:5b:aa:f6:fe:
         9c:cb:8d:2a:37:e3:bf:b3:59:1c:79:79:13:59:ae:20:1b:0a:
         e4:54:75:05:c8:b8:e6:0d:fd:a8:a7:e7:f6:49:35:49:e5:9c:
         a4:2a:15:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:31 2025 by rpki-client