Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
File:                     4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft (raw, json)
Hash identifier:          T5UqMsqBiDPgT22XjWgw6fsSm4gzo3cHJhYFFvQkc8w=
Subject key identifier:   AE:D1:93:04:5C:32:05:20:B3:1E:EE:4A:51:2D:1C:7D:A7:AB:D1:8A
Authority key identifier: E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
Certificate issuer:       /CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Certificate serial:       01989ECC718CB5AF23C32C3545624433CFB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
Manifest number:          1265
Signing time:             Tue 12 Aug 2025 15:00:55 +0000
Manifest this update:     Tue 12 Aug 2025 15:00:55 +0000
Manifest next update:     Wed 13 Aug 2025 15:00:55 +0000
Files and hashes:         1: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl (hash: OXt/5Ul6wtin1CwZtx0j0qWsaDjihsMbSQJt6rEnuAM=)
                          2: mOT0OYFh_GTToGk2uZIA05IaKkw.roa (hash: GG4lCtM4E3X4xtxRGjZF0g1O2sssvUKDA/6mYRaIOI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 13:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9e:cc:71:8c:b5:af:23:c3:2c:35:45:62:44:33:cf:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
        Validity
            Not Before: Aug 12 15:00:55 2025 GMT
            Not After : Aug 13 15:00:55 2025 GMT
        Subject: CN=aed193045c320520b31eee4a512d1c7da7abd18a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:8d:ed:99:d4:cc:88:1d:1a:7c:56:f8:3f:40:
                    5b:19:c6:78:d6:d3:a3:d5:b8:19:aa:f7:a0:23:1e:
                    ce:ae:69:cf:ed:63:68:b2:b3:ef:37:50:74:b9:7f:
                    84:c1:cb:bf:98:01:17:43:11:b5:f8:76:96:7b:4a:
                    43:1f:b7:4e:e5:ff:3e:31:99:c3:19:14:dd:96:5f:
                    d4:18:1e:d3:7d:64:ea:3b:cc:8d:41:d0:74:fd:70:
                    32:6d:38:ad:ed:85:3b:f8:de:33:47:3f:28:23:46:
                    c4:e8:58:b1:eb:63:1f:ca:6d:16:4e:dc:18:a7:d0:
                    2d:cf:10:76:13:b8:fb:e7:7a:32:a9:49:9c:01:36:
                    03:c2:fe:36:af:66:b6:ea:af:dc:af:cc:80:90:31:
                    a1:2b:10:53:ca:f2:1e:85:f1:24:c1:a6:e1:4c:25:
                    8b:95:8d:49:e4:55:e7:07:73:84:ad:7e:41:37:32:
                    bf:92:9c:d0:a4:c0:55:8d:2c:7a:c8:14:26:8f:6a:
                    47:2f:b4:00:ac:4c:07:a5:7f:37:40:e4:34:7c:b5:
                    c3:21:50:de:97:b4:66:e2:51:b1:60:4f:04:5c:6a:
                    1a:6d:c9:9c:d4:17:be:6a:86:a0:f7:3b:de:2c:86:
                    37:8d:df:63:77:a2:cb:f4:4c:21:cc:fc:8e:6c:d0:
                    68:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D1:93:04:5C:32:05:20:B3:1E:EE:4A:51:2D:1C:7D:A7:AB:D1:8A
            X509v3 Authority Key Identifier:
                keyid:E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:cd:7b:c3:54:4c:e7:51:35:19:5b:55:16:21:79:91:c0:b1:
         98:48:3f:78:9d:87:68:0c:f3:5d:b5:38:9a:9c:2a:76:e3:40:
         b7:d5:a1:1c:c2:70:26:6f:76:4a:6b:e4:b6:b5:a8:ff:e8:da:
         20:96:28:48:aa:db:33:87:fc:66:e4:c3:a6:12:92:84:e1:22:
         59:61:0e:6f:69:e3:18:13:f0:94:66:74:e9:78:e1:2e:3e:75:
         5f:dc:08:d4:73:26:e3:81:56:5b:eb:10:4a:55:79:ed:79:18:
         50:eb:77:62:4a:a2:70:5e:d5:14:be:c2:26:56:62:87:c3:c7:
         b9:d8:77:1f:c4:40:1b:dc:23:25:3f:67:29:f7:65:d1:ce:16:
         77:33:ca:c9:b9:04:32:0f:9b:29:f9:35:a0:e9:03:a5:8b:52:
         4e:f8:87:59:d2:bd:c1:87:a7:eb:30:6d:ca:ab:5b:13:f8:93:
         80:14:73:71:82:50:08:41:da:e3:97:23:a5:ef:05:bd:c1:c2:
         32:21:f2:10:8b:e3:23:79:eb:51:53:79:97:ac:40:a1:f6:7b:
         8c:33:71:18:e9:50:df:e0:92:8d:fa:78:fd:7d:bc:f1:ff:0f:
         0f:85:ce:02:57:c9:6a:f9:66:5e:c9:be:dd:cd:53:ba:b4:41:
         6c:dd:e6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:14:36 2025 by rpki-client