Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
File:                     ii4u4759dSXtdLeq4H6Srsr4STY.mft (raw, json)
Hash identifier:          fZbNdajd7H1UJyvQKjTajwaVE91HasFWeyFar10NtDA=
Subject key identifier:   30:8A:93:A9:D4:0A:87:C5:C4:83:F9:48:2A:C5:36:0C:28:9C:9D:7B
Authority key identifier: 8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36
Certificate issuer:       /CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936
Certificate serial:       019873071EA7ABCB340D9831507B1AF5193C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
Manifest number:          04A4
Signing time:             Mon 04 Aug 2025 03:01:42 +0000
Manifest this update:     Mon 04 Aug 2025 03:01:42 +0000
Manifest next update:     Tue 05 Aug 2025 03:01:42 +0000
Files and hashes:         1: QMMy8yKbXHEJwsJqLmy-L7XC5s8.roa (hash: YyXDtgRgJkHfVXUNq/vL+FBOo2ylA/9ZRjglYBypKl4=)
                          2: ii4u4759dSXtdLeq4H6Srsr4STY.crl (hash: 8fLuIVRPLY1irTkTdsuOWNXK6Ec4KTKmf2nG/aWLGBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:07:1e:a7:ab:cb:34:0d:98:31:50:7b:1a:f5:19:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936
        Validity
            Not Before: Aug  4 03:01:42 2025 GMT
            Not After : Aug  5 03:01:42 2025 GMT
        Subject: CN=308a93a9d40a87c5c483f9482ac5360c289c9d7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:49:ba:72:99:8e:55:80:b2:7e:77:86:d2:db:
                    6f:3d:7d:d2:43:22:12:2f:79:9e:3e:10:67:32:33:
                    ec:7a:05:06:c2:47:5c:7d:fc:38:fb:b9:b1:6a:9a:
                    2f:d6:45:3c:1f:cc:c8:99:0f:18:f5:67:87:fc:19:
                    8e:0e:ba:19:29:13:ec:43:fc:9e:a0:76:cc:9a:de:
                    e3:c3:89:4c:33:92:21:c2:12:85:8c:55:b4:8d:c4:
                    6b:ab:c9:67:bc:14:d7:1b:83:10:09:3c:2f:a6:48:
                    25:44:6b:65:e9:9e:40:24:0d:00:54:75:cf:a8:14:
                    e5:e8:b1:09:fb:d7:77:c7:b4:6f:92:58:5f:7a:f8:
                    a0:a0:92:f6:99:65:75:da:f9:34:96:bf:19:0a:a5:
                    09:d4:e4:89:ab:89:09:27:ba:32:e3:fb:cf:ee:d2:
                    89:7f:3a:18:ac:07:b1:08:bf:bf:90:e4:0d:f0:1e:
                    2e:84:e9:ce:79:7b:83:75:5e:35:8c:24:09:09:76:
                    7d:4d:94:ee:b4:70:56:0f:4f:aa:df:32:21:b2:e6:
                    df:64:a2:cc:39:c6:b6:43:b8:b5:e3:0e:f5:17:70:
                    42:09:d5:d2:7c:59:f2:94:80:a0:a7:42:52:36:df:
                    22:3a:15:fd:5f:a0:9f:0e:ec:7d:ec:43:9b:9c:e4:
                    94:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:8A:93:A9:D4:0A:87:C5:C4:83:F9:48:2A:C5:36:0C:28:9C:9D:7B
            X509v3 Authority Key Identifier:
                keyid:8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:ae:80:df:4d:07:87:81:57:cd:8e:75:16:dd:3d:82:69:1c:
         a0:40:5e:cf:03:08:b6:da:a8:6b:e3:a1:90:51:0b:31:fd:1c:
         d5:8e:14:08:b0:2e:5d:8a:b5:41:79:e7:8d:e2:47:74:10:63:
         66:87:10:6c:83:08:e9:1c:a0:9f:c1:fd:46:a5:be:54:d7:df:
         7f:ce:c6:f0:30:27:2a:9e:5c:7b:f7:a5:82:66:5c:9d:25:2d:
         1c:cc:6f:57:6c:91:0c:04:ef:c0:5e:2f:62:7f:e1:f4:e6:81:
         27:84:2f:3d:6f:b9:a3:c1:c7:00:74:b1:1b:ac:01:3d:b2:b1:
         48:66:ef:ff:8a:47:4f:52:b4:ed:69:ee:ae:7b:4a:28:b4:3b:
         c7:4d:b4:6d:0c:d8:33:db:96:f6:20:40:0d:76:55:d1:64:d6:
         50:6b:a6:01:3d:49:03:05:5e:ea:12:8b:8f:57:4a:e2:f9:49:
         d8:2d:9c:e1:ce:ae:2a:14:d5:f2:9f:6a:42:9b:23:40:98:d9:
         83:38:ec:fb:aa:c8:55:43:77:34:c6:61:65:eb:1c:c9:8a:81:
         63:c6:01:e4:ae:a1:92:92:b2:92:2e:c0:dd:8b:99:2e:54:73:
         a8:2f:63:3b:52:48:bb:84:e6:c8:f8:53:d8:53:a8:b5:96:23:
         b0:1e:4d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:43 2025 by rpki-client