Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
File:                     SF4-4cMlgXX0_22bVZ2lTIPsC08.mft (raw, json)
Hash identifier:          LGKYgNjdQg8qISqWttHxnXd5eHpXc3/GLyTkBFYzKdQ=
Subject key identifier:   A1:8C:B2:FD:38:33:19:4D:46:12:1B:2F:88:91:E8:03:74:C2:60:DF
Authority key identifier: 48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F
Certificate issuer:       /CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f
Certificate serial:       01987A88B2F6173E184562BC7C31F2770CD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
Manifest number:          161B
Signing time:             Tue 05 Aug 2025 14:00:35 +0000
Manifest this update:     Tue 05 Aug 2025 14:00:35 +0000
Manifest next update:     Wed 06 Aug 2025 14:00:35 +0000
Files and hashes:         1: SF4-4cMlgXX0_22bVZ2lTIPsC08.crl (hash: brzyrRz4j+oYNrDPeL51CzZvTulfEGZ4viKMvKk9QMM=)
                          2: ZopMcF1edsiLC5IB_2wqcv1pm7I.roa (hash: 9APA6+f5SQgw2656vPCnPyRgFDtV/KHCNYnrSKLYasE=)
                          3: fB9-x9nzQMLGXiKWPiofGOiCCDo.roa (hash: /Yz5duUUoV4QyYXJiuuC625duaCe5B8wdcwUeuj9HvE=)
                          4: l38wLN6Gw_epossfbuxRMwnX5sY.roa (hash: EA/nu4qnZGykrdQkMaUMT/48WUqEkVXJbnvFzsWJo70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:88:b2:f6:17:3e:18:45:62:bc:7c:31:f2:77:0c:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f
        Validity
            Not Before: Aug  5 14:00:35 2025 GMT
            Not After : Aug  6 14:00:35 2025 GMT
        Subject: CN=a18cb2fd3833194d46121b2f8891e80374c260df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c9:85:14:9f:3e:d3:0e:fd:67:a6:60:42:dd:
                    6b:1a:0d:68:4d:f1:18:f3:80:ff:1f:61:1d:db:99:
                    3a:c6:a2:ca:be:68:87:a7:ed:ad:fc:12:60:df:e8:
                    66:2e:c9:16:a6:66:32:59:9c:e6:79:65:58:25:82:
                    ec:74:8a:98:bc:80:77:28:de:6d:04:4d:27:cb:38:
                    46:ce:8e:12:9f:1c:59:5e:7f:cd:f9:a1:58:5f:fd:
                    45:5e:4c:82:dd:39:31:53:6f:8f:ee:4c:18:b3:04:
                    cc:fa:e9:c5:89:74:14:99:47:80:05:c1:24:d5:af:
                    f2:1e:13:17:1e:29:53:0f:6b:25:cb:77:98:ee:29:
                    a5:14:4a:e6:4a:3b:76:9f:5d:1f:8e:5d:89:71:38:
                    6b:da:24:ea:10:30:5e:ea:65:a3:0c:85:88:56:1a:
                    b6:dd:f3:1e:9b:63:ed:c3:e9:d5:3b:2c:33:44:65:
                    a9:03:bc:8c:09:79:c2:4f:76:e1:b1:87:5e:e1:04:
                    df:d6:6a:68:b9:44:7d:a1:06:9e:2e:95:57:53:64:
                    54:b7:39:53:92:8b:ab:4d:67:fc:42:19:eb:56:be:
                    32:1a:01:7e:e1:b3:88:0d:7a:1c:7e:35:a0:48:52:
                    19:48:e2:f5:24:b8:88:1a:76:a5:4f:f7:6d:85:6f:
                    eb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8C:B2:FD:38:33:19:4D:46:12:1B:2F:88:91:E8:03:74:C2:60:DF
            X509v3 Authority Key Identifier:
                keyid:48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:4e:52:0f:18:be:cc:a4:64:2d:e7:a4:a0:cb:d6:9f:f3:83:
         fc:1a:da:b0:50:05:2f:81:61:1c:85:7c:be:55:0d:3f:fe:03:
         ff:7a:9a:87:6e:dc:6a:fa:9f:74:b8:45:0a:c3:4a:8d:5c:e3:
         83:95:5e:4d:4e:87:ee:e3:80:1b:03:29:6c:91:82:8e:b0:e6:
         f9:a2:98:fa:a2:f4:47:13:af:3f:a3:d6:65:17:ff:f6:73:ae:
         10:59:f5:b6:ad:56:c1:9c:ea:c3:b4:43:45:ca:f0:b1:81:c9:
         88:71:a2:e5:98:0c:6a:57:cf:13:e0:bd:8a:b2:db:2f:d4:c4:
         47:31:5d:8e:42:ec:29:a6:44:52:ac:7b:64:00:d4:40:51:69:
         69:b6:af:eb:98:11:84:61:b7:0d:93:12:bd:ea:08:22:79:e0:
         cd:c8:e9:b4:4e:ea:62:3b:76:8e:9d:f6:04:af:61:52:4a:46:
         50:2f:f4:00:ef:cc:1b:c8:67:17:00:ed:86:04:ce:a5:e7:0d:
         13:74:91:46:19:ee:43:5e:97:72:bc:51:d9:b5:77:37:58:59:
         be:e9:8c:81:b4:ed:15:5a:ac:1d:89:a0:58:b7:31:7f:93:36:
         ca:df:0f:32:d4:0a:cf:3f:12:64:0f:c6:59:e6:6d:4a:d9:ac:
         42:e2:8f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:42:00 2025 by rpki-client