Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
File:                     4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft (raw, json)
Hash identifier:          vnBzPlICrzkVCu7ZDb0WYpmMC0CfVrguyVWip8yKWE4=
Subject key identifier:   69:D9:98:C6:1D:7D:36:10:DC:40:DC:9A:77:54:CD:38:69:0E:8E:EE
Authority key identifier: E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
Certificate issuer:       /CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Certificate serial:       019874501D66F6B45F1783C0AD92C20DCDFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
Manifest number:          10DA
Signing time:             Mon 04 Aug 2025 09:01:04 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:04 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:04 +0000
Files and hashes:         1: 3BfIScw6HImdI4whE_vk-buQO8s.roa (hash: G0gYam1RQRQrZL9flb7DmAGTR2cR1ZnF922oRZ/xNlg=)
                          2: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl (hash: cOe+YN4EwoKZ1qQ6wWbT/95klZ/NoDHYW8kWh3SUb4I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 09:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:1d:66:f6:b4:5f:17:83:c0:ad:92:c2:0d:cd:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
        Validity
            Not Before: Aug  4 09:01:04 2025 GMT
            Not After : Aug  5 09:01:04 2025 GMT
        Subject: CN=69d998c61d7d3610dc40dc9a7754cd38690e8eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ba:b7:f1:d1:90:0a:df:72:96:63:b4:1d:19:
                    12:ab:58:8e:81:d8:4b:74:d9:bb:bb:d1:9c:e1:3a:
                    37:0c:17:c1:8e:e6:03:2e:3e:33:5e:24:b5:89:e8:
                    ac:8e:69:f7:d0:d7:b7:25:29:96:2e:78:8d:bc:41:
                    b5:cd:a2:5f:ee:12:5e:fe:d3:27:e1:bd:4a:fe:3f:
                    86:11:9f:10:28:6b:de:9e:55:3d:6e:dc:9b:e7:a8:
                    5b:18:f3:b4:cc:15:1e:d8:a4:16:2f:aa:e9:3f:ac:
                    b7:e6:78:a3:63:80:66:5f:0f:dc:19:3a:82:d1:3e:
                    a2:39:6c:20:9d:49:73:d7:ac:92:31:1a:0b:18:a2:
                    5c:9a:97:00:27:7f:d0:4f:5d:bb:16:02:1c:0a:52:
                    01:5a:3e:1c:ec:9e:f2:43:d9:ef:ed:b7:87:48:cc:
                    e2:a5:fb:29:17:af:73:79:e4:7b:bf:22:7e:a4:e5:
                    bd:48:12:47:71:7c:a8:9a:af:2c:8c:05:ee:b5:97:
                    cc:b4:83:f0:a0:0b:98:47:e6:1e:47:b9:85:0a:d1:
                    2a:57:56:7a:3a:ce:fa:cb:af:ee:67:be:81:17:c8:
                    55:56:af:c5:a8:b7:25:84:6d:ae:b3:fa:c1:38:48:
                    fc:92:07:13:6e:8a:9d:32:1d:c5:bd:f2:a9:50:38:
                    2d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D9:98:C6:1D:7D:36:10:DC:40:DC:9A:77:54:CD:38:69:0E:8E:EE
            X509v3 Authority Key Identifier:
                keyid:E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:b5:f3:8e:fe:b1:20:24:3a:69:a5:db:aa:26:77:35:1c:4e:
         16:55:81:77:c2:9b:79:c7:35:f0:d3:9b:cd:e4:b7:87:1f:f5:
         80:d8:5a:1e:30:2a:93:6e:a6:a7:14:82:85:80:89:45:23:c2:
         a1:c5:9a:3b:0c:16:bb:19:29:61:69:d4:a5:78:5c:43:1b:b8:
         2a:64:4d:26:78:cd:30:c6:a7:1a:a2:07:a9:96:55:c5:45:16:
         7c:06:84:c6:98:89:e8:1a:9b:2e:e8:ed:d2:f8:3d:1f:0f:84:
         0f:c7:ad:45:fb:32:e0:dc:23:f9:da:a7:3e:82:3d:38:b3:6b:
         1b:8b:84:75:ec:1f:c3:f9:24:56:2e:a3:89:f5:e4:6b:32:52:
         b1:61:1b:81:54:54:ef:a1:f3:88:c2:cf:2f:fa:71:a3:cb:e6:
         c0:5c:25:b4:0c:4c:f6:a8:c9:eb:ba:33:24:ca:67:34:d9:7f:
         66:a0:0d:6b:45:44:c5:6c:e4:27:0c:5d:67:55:99:6e:97:d6:
         15:6e:5f:08:61:f6:0f:c4:d9:d4:77:be:c0:6c:ac:24:c1:c7:
         65:f8:09:0a:69:ba:85:92:41:5c:10:19:ca:32:9c:50:98:8e:
         32:c9:cd:97:30:e6:22:68:af:85:72:0e:a5:49:13:a5:24:50:
         bc:b6:16:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:18:10 2025 by rpki-client