Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
File:                     4HUznawWU11FeuiGK1NbzlHhIg8.mft (raw, json)
Hash identifier:          R0zRXTQ9RjqjCPNysem5kCHSdLjEXRy0/S4S9uO2gK0=
Subject key identifier:   5D:72:CC:EF:53:0B:37:2B:49:8E:F9:DE:81:3F:38:8D:AF:8E:6F:5F
Authority key identifier: E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F
Certificate issuer:       /CN=e075339dac16535d457ae8862b535bce51e1220f
Certificate serial:       0198A04D4EABA079D758A4BF97ACB130E10E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
Manifest number:          0474
Signing time:             Tue 12 Aug 2025 22:01:17 +0000
Manifest this update:     Tue 12 Aug 2025 22:01:17 +0000
Manifest next update:     Wed 13 Aug 2025 22:01:17 +0000
Files and hashes:         1: 4HUznawWU11FeuiGK1NbzlHhIg8.crl (hash: TKIzK2lUmxrqkvGI+v6m5+qUvTPK+uyTuJADJbUKges=)
                          2: thETdmyhsrSxA59VxLlSHQ0J73Q.roa (hash: KY6/Rka8NKx7O/9lJJyGOxFVIRAxMy7b72Qvukxyq9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:4d:4e:ab:a0:79:d7:58:a4:bf:97:ac:b1:30:e1:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e075339dac16535d457ae8862b535bce51e1220f
        Validity
            Not Before: Aug 12 22:01:17 2025 GMT
            Not After : Aug 13 22:01:17 2025 GMT
        Subject: CN=5d72ccef530b372b498ef9de813f388daf8e6f5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d4:2d:8f:40:9c:8f:89:6f:2d:79:d0:40:54:
                    cf:37:41:b2:44:9d:dd:a9:38:4c:49:3e:9f:98:94:
                    b1:95:19:4c:f4:d1:5f:5a:57:18:a0:07:3d:6c:37:
                    4c:8f:a5:b7:fe:09:af:ea:ba:8f:8c:53:18:8a:4a:
                    e0:2a:a2:e0:47:0d:5b:6e:e9:4b:5d:4b:d9:32:54:
                    70:5f:6b:79:56:41:e9:76:e3:09:ea:f7:f1:58:bf:
                    f0:9b:f5:34:f9:f6:42:db:9d:25:49:96:4b:c8:b4:
                    96:c1:39:2d:da:6b:e4:35:6b:04:48:f9:96:db:cd:
                    8d:3a:1d:ef:f9:b5:b5:4e:a7:dc:7c:80:88:60:39:
                    56:5d:3a:1b:4a:7a:26:17:b0:73:3b:e5:79:a2:e4:
                    88:03:32:28:ae:9c:39:b4:a8:11:45:65:c4:ea:c4:
                    72:8e:ce:0a:b3:1e:c8:aa:a3:a9:6a:b2:17:16:25:
                    41:78:9d:de:3b:76:24:08:16:37:47:92:e8:eb:17:
                    27:70:ac:6b:0b:30:77:7d:19:00:8e:44:e1:a7:70:
                    82:13:50:c8:67:10:4b:ec:da:8a:7c:8d:31:de:b0:
                    5d:81:78:f1:c5:92:17:45:eb:38:fd:7d:6c:d3:1a:
                    b7:1a:fe:dc:8e:a2:cd:5e:93:3e:83:c2:0a:03:4d:
                    fd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:72:CC:EF:53:0B:37:2B:49:8E:F9:DE:81:3F:38:8D:AF:8E:6F:5F
            X509v3 Authority Key Identifier:
                keyid:E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:fd:04:7b:df:29:0d:2e:c2:1e:93:3f:ab:1d:7f:ad:3d:c0:
         29:21:2f:cb:e2:c1:78:d4:dd:63:0b:4d:27:eb:30:3c:8b:97:
         e7:5e:b9:15:68:3d:98:b6:87:a9:a5:90:b0:bc:77:e7:e1:af:
         4f:41:74:e5:33:b7:23:75:53:fa:4c:2e:e2:b9:f5:34:5c:a2:
         09:4c:3f:a7:9d:34:17:6d:8b:18:d0:30:78:b1:5b:4d:27:fd:
         e2:28:07:6e:c4:39:b2:80:76:de:8e:e1:32:92:a3:b3:31:7f:
         61:1d:3f:66:9c:28:f0:3b:79:9f:33:16:86:b8:ac:d2:04:f4:
         28:56:05:71:55:02:72:c5:8b:60:db:45:d4:e4:df:6b:9b:8f:
         f2:3c:f2:6a:cf:da:7b:0f:46:19:af:3e:d8:3a:45:73:61:f8:
         6f:b9:16:ce:d7:35:c9:34:11:be:de:a2:81:36:08:81:5b:58:
         ae:c6:83:db:ed:bb:39:24:cc:68:06:f4:23:e4:ec:cd:13:40:
         74:98:ba:2c:36:a4:bd:02:e1:a9:21:39:9c:85:2f:51:cf:b2:
         91:e6:69:d4:74:d7:df:08:82:8a:47:6a:68:8d:07:89:2f:03:
         62:5e:db:48:c3:b0:8d:9e:2b:18:d1:8d:69:e9:8c:ae:1a:ad:
         e7:17:97:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:30:08 2025 by rpki-client