Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft
File:                     4tc__D83xP7EvTWtHFlc0Fa67P0.mft (raw, json)
Hash identifier:          qemMYG/8ez/w88husKdqJiazi+/UsjSNFpx4BQRxy8M=
Subject key identifier:   3E:6B:E3:81:79:47:C3:39:BA:46:D6:E8:6D:91:F7:F4:5A:0D:33:73
Authority key identifier: E2:D7:3F:FC:3F:37:C4:FE:C4:BD:35:AD:1C:59:5C:D0:56:BA:EC:FD
Certificate issuer:       /CN=e2d73ffc3f37c4fec4bd35ad1c595cd056baecfd
Certificate serial:       019A552DFF6A7C82B6C415EC4FA60EE7D5E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft
Manifest number:          0869
Signing time:             Wed 05 Nov 2025 18:01:09 +0000
Manifest this update:     Wed 05 Nov 2025 18:01:09 +0000
Manifest next update:     Thu 06 Nov 2025 18:01:09 +0000
Files and hashes:         1: 15xabzkapAsSjIKERak6-4m1So0.roa (hash: FylhIFKLzVcHOQsVvyYerlKh6o6ajQeSyBB7cVFNmPU=)
                          2: 4tc__D83xP7EvTWtHFlc0Fa67P0.crl (hash: 526LJMD5UNHFBhnD5VZ6jk3E3OvMnB7NcMcJOGdVt28=)
                          3: 833FmQyz-5vw3V1ZpD3pqMArHGw.roa (hash: eyX1KEkROJtBb4g504oMdjM6lbQ+P16xnRGxTkb5zHU=)
                          4: SSLLWRxY0V4J6I9l65vEUaKwK4Q.roa (hash: llqnu+z/IAMUkrZ/zCpWswAVAWND5pihVLoy0VRdDyQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:55:2d:ff:6a:7c:82:b6:c4:15:ec:4f:a6:0e:e7:d5:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d73ffc3f37c4fec4bd35ad1c595cd056baecfd
        Validity
            Not Before: Nov  5 18:01:09 2025 GMT
            Not After : Nov  6 18:01:09 2025 GMT
        Subject: CN=3e6be3817947c339ba46d6e86d91f7f45a0d3373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:12:34:c4:c3:b4:4c:97:68:6e:fc:99:d0:c1:
                    58:7f:dd:36:5e:62:50:bc:7e:93:29:b4:20:d3:1c:
                    46:8a:7b:34:4b:38:13:3d:91:23:2e:b5:ab:b8:59:
                    09:a2:08:28:cd:94:2b:d8:af:65:87:4f:ec:d6:30:
                    36:b4:2c:d6:65:af:db:e6:63:d9:89:c5:60:55:5d:
                    20:25:f8:13:6d:3d:13:72:48:d1:40:ca:9e:e4:53:
                    fb:8f:3c:b1:04:6c:bf:39:c1:f5:f6:cc:6c:fb:f6:
                    6d:8f:35:6d:30:fc:9a:81:22:88:44:35:32:97:ab:
                    5d:d3:47:6b:b1:b1:a6:79:a6:58:c2:54:12:e3:22:
                    2e:c6:3a:d9:5e:11:cd:c7:da:3a:09:02:98:5e:61:
                    2b:d5:c4:7d:cd:a2:a4:2f:91:41:4f:60:f5:db:fa:
                    77:b2:00:76:45:17:9c:20:af:53:9a:36:cf:1e:be:
                    09:95:8d:c5:e1:bc:d5:b9:da:42:f1:b3:46:de:6e:
                    31:f8:0d:76:0d:12:17:23:b4:dc:4c:73:44:80:78:
                    d9:64:cf:aa:c0:6e:e7:16:45:f3:d4:c6:ce:b3:de:
                    78:78:6a:0f:9f:25:66:d7:86:54:77:ad:ef:eb:55:
                    a1:f2:13:8e:4b:6d:14:c9:a3:92:ad:c6:7f:1a:9a:
                    5c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6B:E3:81:79:47:C3:39:BA:46:D6:E8:6D:91:F7:F4:5A:0D:33:73
            X509v3 Authority Key Identifier:
                keyid:E2:D7:3F:FC:3F:37:C4:FE:C4:BD:35:AD:1C:59:5C:D0:56:BA:EC:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:29:bd:35:5c:b4:b2:07:9b:36:1f:29:c7:d2:ce:f9:3f:44:
         6a:8d:8a:88:32:17:61:df:fd:a9:47:ca:40:9f:16:2a:90:2a:
         ab:17:64:8b:32:25:cf:77:4f:18:1a:dd:a1:f2:43:9f:dd:11:
         27:27:f1:7c:00:41:55:94:bf:8a:03:06:5e:bf:ac:3e:44:94:
         cc:2a:9c:72:a6:b7:13:1c:9f:a4:cb:4a:77:b4:f1:40:29:5d:
         94:6f:5b:88:24:37:d0:28:6d:c9:04:60:9f:5d:e5:a1:c5:7d:
         1b:7b:d7:a6:28:47:57:36:e2:f3:a3:38:f7:57:d8:fe:50:78:
         ad:86:3d:6d:d4:8c:7f:f9:2a:a5:60:97:43:9c:16:f6:76:33:
         15:82:a6:20:fd:eb:89:64:23:96:c7:47:7f:b6:8e:bd:37:d5:
         8b:e2:22:89:dd:c9:18:70:a4:4d:33:8a:8d:eb:7a:2a:5d:47:
         f9:83:27:8e:d6:9f:8a:46:7a:f1:ac:47:7c:d4:b3:54:0c:f9:
         c6:46:0f:cf:76:b3:a2:9a:74:41:b5:ce:a8:03:a5:6c:b2:67:
         30:14:65:31:de:ca:c9:15:5b:a3:32:5a:1c:a0:cb:16:cd:cf:
         a8:0e:43:81:b6:a4:3b:7a:e5:75:9e:79:0c:a0:4c:a9:82:9e:
         c5:f4:33:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:01:04 2025 by rpki-client