Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
File:                     t4skH3ysfR5SHigxR-xhdjxCKqc.mft (raw, json)
Hash identifier:          c0w7gWEIF7ufQr2mi/bT7SRAMMd84POhOQ2MSAYhZmc=
Subject key identifier:   F9:84:62:15:51:B4:05:F6:6A:DA:7A:B6:C9:63:02:B3:13:E4:38:45
Authority key identifier: B7:8B:24:1F:7C:AC:7D:1E:52:1E:28:31:47:EC:61:76:3C:42:2A:A7
Certificate issuer:       /CN=b78b241f7cac7d1e521e283147ec61763c422aa7
Certificate serial:       019896A51209E0C939AB7CED44C6BFD15F14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
Manifest number:          06C4
Signing time:             Mon 11 Aug 2025 01:00:57 +0000
Manifest this update:     Mon 11 Aug 2025 01:00:57 +0000
Manifest next update:     Tue 12 Aug 2025 01:00:57 +0000
Files and hashes:         1: JeMCMYiH53cU_3LMDeSKcS3Thhs.roa (hash: q+KDU3te7tpkPWYDo6SVWUaxsvwlZ34vk9tdHz3W+pc=)
                          2: t4skH3ysfR5SHigxR-xhdjxCKqc.crl (hash: MMGZ/i4bPDWObIsPEp6ft+G5fO9bSZjri5hc3yv90Lc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 01:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:a5:12:09:e0:c9:39:ab:7c:ed:44:c6:bf:d1:5f:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b78b241f7cac7d1e521e283147ec61763c422aa7
        Validity
            Not Before: Aug 11 01:00:57 2025 GMT
            Not After : Aug 12 01:00:57 2025 GMT
        Subject: CN=f984621551b405f66ada7ab6c96302b313e43845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:86:23:e6:f1:ab:c9:ba:ba:dd:c4:3d:b0:04:
                    fe:89:56:a4:33:a1:11:36:b6:ae:c7:1c:4a:85:c5:
                    dd:c0:f4:1d:a3:11:48:5e:27:f8:66:16:e3:3e:fb:
                    9b:bb:53:d7:da:7d:91:ec:4f:19:0e:78:8d:6a:c3:
                    2d:ad:6f:c9:e8:3d:d2:b4:ff:e1:94:be:f8:88:f4:
                    74:73:b6:7b:2e:97:98:9d:a0:2e:fa:d5:21:69:ed:
                    83:4e:b5:0f:df:2a:cd:97:70:0b:03:7b:a5:df:ec:
                    8f:b6:64:0a:31:91:0c:da:73:f0:ea:4b:da:28:e9:
                    e7:89:ba:b3:e6:ef:7f:07:5f:f7:70:63:3a:aa:b5:
                    2b:43:df:d1:5e:4a:1e:1f:b4:33:92:ac:50:9b:dc:
                    e2:14:4e:74:7e:bd:5f:af:c9:2a:7e:5e:62:24:de:
                    ef:cc:0b:ab:e9:ef:df:b8:1a:f7:06:ba:9d:b0:56:
                    1d:99:57:c0:62:ce:c9:33:a3:7b:db:11:31:85:9d:
                    13:f9:47:61:01:eb:8f:15:ef:a5:95:e2:47:aa:42:
                    27:dc:c7:95:47:3e:df:c0:52:8d:32:a0:69:b9:bd:
                    a3:28:ac:db:fa:f2:24:77:4f:f6:fe:2f:90:8b:ca:
                    12:29:74:76:5e:53:c9:4f:74:83:1d:5e:ba:0c:d8:
                    0e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:84:62:15:51:B4:05:F6:6A:DA:7A:B6:C9:63:02:B3:13:E4:38:45
            X509v3 Authority Key Identifier:
                keyid:B7:8B:24:1F:7C:AC:7D:1E:52:1E:28:31:47:EC:61:76:3C:42:2A:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:f1:e2:05:e2:6d:79:ae:e5:57:ed:75:a6:ef:4b:e0:f6:3f:
         6a:6e:06:b9:56:98:de:e5:7c:de:da:4b:92:11:5b:56:a1:ea:
         08:f8:8b:a3:e1:df:48:81:99:fa:cd:8f:5f:9e:51:1c:3c:9b:
         9b:e6:d6:a0:7d:e5:7d:37:b8:f1:08:d5:6c:1b:ed:6c:c8:eb:
         cc:2f:5f:b8:25:ea:6d:f8:33:59:8f:cb:af:58:bd:d5:af:7e:
         a7:64:4b:1a:dc:cc:2f:71:b9:5d:b9:58:4d:e4:d0:f6:90:0b:
         ec:c9:fa:b4:60:0b:95:4d:5f:84:ac:1d:50:21:b5:ec:8e:c7:
         ab:b9:91:f6:3f:36:42:76:47:f3:f9:61:38:19:d0:21:67:99:
         23:42:6c:52:b5:5c:d0:fd:45:23:52:d6:87:e0:a4:a9:7b:d4:
         89:11:cc:50:3d:b9:69:ab:e4:eb:60:58:66:b9:71:10:f7:03:
         ca:51:af:77:d7:de:1e:fa:ac:42:51:b9:03:be:d9:d5:f6:d3:
         4b:9a:b4:c6:87:64:97:f3:f4:1b:35:51:82:58:ee:aa:1d:de:
         4e:cf:40:f0:a7:db:b3:a9:91:bd:d4:50:69:04:85:98:d6:1a:
         90:c8:14:34:d3:d8:c2:cf:05:41:e7:3d:5e:6c:35:94:9a:03:
         0c:d4:65:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:22 2025 by rpki-client