Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
File:                     4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft (raw, json)
Hash identifier:          GDnoJbznDNkQWgmH5GRcIl8jrx5n2SmYkmTrsQiZmy8=
Subject key identifier:   9F:30:CB:42:94:9D:24:80:6D:30:59:B5:A2:84:1D:71:30:59:1E:9E
Authority key identifier: E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5
Certificate issuer:       /CN=e2c137106c1a46aea07c24b11729fd7d216a24f5
Certificate serial:       01988168226637FA097553CDFC408B19276C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
Manifest number:          0C66
Signing time:             Wed 06 Aug 2025 22:02:22 +0000
Manifest this update:     Wed 06 Aug 2025 22:02:22 +0000
Manifest next update:     Thu 07 Aug 2025 22:02:22 +0000
Files and hashes:         1: 4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl (hash: 9kll7WJkiFk9GUQqPK6nLh059U0QR9awhf7cVel+WQ8=)
                          2: f9bSypnQ1K1dn8AOmITCAE2WfeM.roa (hash: laJDW9FEQ26/eBw7OzSphhRdw2m3zDOPQril8cOuxC0=)
                          3: qF1Sjwc0E4igMvbiTG0GFEV_V8w.roa (hash: C2rdzoCh63UKjy4imOMfxu3Z/XTp23zoXQCrUfaLgrk=)
                          4: wr0uj1SbyF4a3afbyHifWHkLV18.roa (hash: whbGKVVedV+YGL/Rez8V9NgGyEYM+j686HKrZpVv8SA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:68:22:66:37:fa:09:75:53:cd:fc:40:8b:19:27:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c137106c1a46aea07c24b11729fd7d216a24f5
        Validity
            Not Before: Aug  6 22:02:22 2025 GMT
            Not After : Aug  7 22:02:22 2025 GMT
        Subject: CN=9f30cb42949d24806d3059b5a2841d7130591e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:44:c7:95:80:02:97:4a:40:fd:ce:37:f8:87:
                    84:e2:97:e1:4a:1f:2e:fb:2a:1f:dc:35:0b:65:aa:
                    9b:05:f6:d0:5a:b6:62:44:b2:77:a0:25:94:c1:cf:
                    8f:17:c8:43:bb:e9:06:97:f4:57:5a:da:b0:61:1a:
                    3d:97:20:f3:c1:97:a7:f9:5b:d7:f0:03:92:a5:0c:
                    f0:1a:ed:09:5e:17:3f:85:00:b8:cb:92:9c:98:c3:
                    87:e1:9a:59:f2:43:4c:06:46:5b:23:14:bc:3d:33:
                    bd:29:47:16:d1:72:85:da:36:42:74:05:ba:69:02:
                    16:1b:75:36:8e:55:47:64:5d:ee:14:9f:a9:b1:99:
                    72:57:46:cc:f5:9b:0d:ca:1c:da:75:58:47:83:82:
                    32:3b:5d:56:88:e4:34:62:36:25:11:c1:24:db:a9:
                    25:ca:4f:d1:4f:22:c8:0b:48:01:72:e4:11:45:f1:
                    cb:37:e8:2f:2c:78:87:fc:02:96:67:12:2d:2d:43:
                    f6:c0:9e:3f:43:18:c9:04:c7:5e:de:24:0f:6f:d9:
                    5a:11:37:e0:5a:1e:b5:ed:67:80:9f:14:62:a5:e8:
                    fa:25:b4:67:f6:02:9b:33:2c:4c:26:aa:b4:4c:3b:
                    76:6e:57:7f:b3:a7:2d:a3:a3:8a:05:bc:e6:8c:83:
                    6b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:30:CB:42:94:9D:24:80:6D:30:59:B5:A2:84:1D:71:30:59:1E:9E
            X509v3 Authority Key Identifier:
                keyid:E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:81:bb:3e:cb:d4:37:09:a8:b8:d7:53:a5:f1:a8:72:8d:ee:
         ea:85:6e:83:cd:97:f8:04:75:59:b6:c5:6d:1b:8c:18:3a:e1:
         84:ae:21:31:f9:78:6b:f6:40:a9:2a:d5:48:02:33:c6:a2:11:
         e1:d9:2d:8c:b2:c2:ba:56:b1:05:ea:6d:b3:f6:75:e2:0c:32:
         39:bf:96:a7:87:1e:41:8a:3b:af:1a:b3:0c:1d:5b:d2:bc:44:
         3f:60:35:6e:c3:3c:19:c7:ab:12:2e:00:45:bc:66:d7:0e:78:
         74:fd:1a:9d:9d:78:2c:83:a7:50:de:f3:d6:6d:80:90:0d:46:
         cf:a7:10:a6:a6:a2:e3:bd:bd:2d:b9:36:94:39:b5:c9:f8:ba:
         74:1d:8a:3a:29:dd:3e:e3:9f:02:4d:4c:42:ea:02:40:3b:b0:
         dd:41:ec:0a:48:1e:0e:5e:25:81:73:3b:a5:fb:0c:89:3f:74:
         ef:61:4a:ca:59:bb:7a:db:cf:a8:d9:32:5c:49:aa:8b:c8:40:
         6a:52:0e:90:7d:2a:69:de:f5:97:82:56:ff:4a:46:65:8b:4d:
         a4:db:13:75:c7:fa:f4:a0:9e:07:be:5f:c9:aa:2b:53:78:eb:
         18:41:10:9b:25:69:69:28:cd:23:ed:96:d4:0f:e0:79:82:bd:
         3f:b2:2b:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBaCJmN/oJdVPN/ECLGSdsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzEzNzEwNmMxYTQ2YWVhMDdjMjRiMTE3MjlmZDdkMjE2
YTI0ZjUwHhcNMjUwODA2MjIwMjIyWhcNMjUwODA3MjIwMjIyWjAzMTEwLwYDVQQD
Eyg5ZjMwY2I0Mjk0OWQyNDgwNmQzMDU5YjVhMjg0MWQ3MTMwNTkxZTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkETHlYACl0pA/c43+IeE4pfhSh8u
+yof3DULZaqbBfbQWrZiRLJ3oCWUwc+PF8hDu+kGl/RXWtqwYRo9lyDzwZen+VvX
8AOSpQzwGu0JXhc/hQC4y5KcmMOH4ZpZ8kNMBkZbIxS8PTO9KUcW0XKF2jZCdAW6
aQIWG3U2jlVHZF3uFJ+psZlyV0bM9ZsNyhzadVhHg4IyO11WiOQ0YjYlEcEk26kl
yk/RTyLIC0gBcuQRRfHLN+gvLHiH/AKWZxItLUP2wJ4/QxjJBMde3iQPb9laETfg
Wh617WeAnxRipej6JbRn9gKbMyxMJqq0TDt2bld/s6cto6OKBbzmjINrHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8wy0KUnSSAbTBZtaKEHXEwWR6eMB8GA1UdIwQY
MBaAFOLBNxBsGkauoHwksRcp/X0haiT1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNFM0VHd2FScTZnZkNTeEZ5bjlmU0ZxSlBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yNDM1Y2MtNTUzMy00ZjcwLWJiODIt
OWNhZjI1YTQ5OWQ3LzEvNHNFM0VHd2FScTZnZkNTeEZ5bjlmU0ZxSlBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8yNDM1Y2MtNTUzMy00ZjcwLWJiODItOWNhZjI1YTQ5OWQ3
LzEvNHNFM0VHd2FScTZnZkNTeEZ5bjlmU0ZxSlBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4G7PsvU
NwmouNdTpfGoco3u6oVug82X+AR1WbbFbRuMGDrhhK4hMfl4a/ZAqSrVSAIzxqIR
4dktjLLCulaxBepts/Z14gwyOb+Wp4ceQYo7rxqzDB1b0rxEP2A1bsM8GcerEi4A
Rbxm1w54dP0anZ14LIOnUN7z1m2AkA1Gz6cQpqai4729Lbk2lDm1yfi6dB2KOind
PuOfAk1MQuoCQDuw3UHsCkgeDl4lgXM7pfsMiT9072FKylm7etvPqNkyXEmqi8hA
alIOkH0qad71l4JW/0pGZYtNpNsTdcf69KCeB75fyaorU3jrGEEQmyVpaSjNI+2W
1A/geYK9P7Irvw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:23:11 2025 by rpki-client