Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
File:                     4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft (raw, json)
Hash identifier:          l/GViaZqd5YwSJKe3C4nUGWEPsOnwwl/G/mJNuTQf/E=
Subject key identifier:   8D:12:F5:F9:C5:9C:D3:0E:7F:D8:E9:DA:6C:F7:02:3D:76:80:B8:E5
Authority key identifier: E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
Certificate issuer:       /CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Certificate serial:       019895C968CE80543E494540D742F85EA22E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
Manifest number:          162A
Signing time:             Sun 10 Aug 2025 21:01:01 +0000
Manifest this update:     Sun 10 Aug 2025 21:01:01 +0000
Manifest next update:     Mon 11 Aug 2025 21:01:01 +0000
Files and hashes:         1: 4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl (hash: TwpKq9JJ7O5IWQ83lNOFm9msaFnHIGfj7EyyY+IXR8s=)
                          2: MiDFo4hvMWm2LnOXchY-qMjiF4I.roa (hash: 9GhdLgk27HafhbXSH87ygI5j9h8CqnJUJSkfSDeoTo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:95:c9:68:ce:80:54:3e:49:45:40:d7:42:f8:5e:a2:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e215be4532e9588c40531a7f331eabfbf4770a5e
        Validity
            Not Before: Aug 10 21:01:01 2025 GMT
            Not After : Aug 11 21:01:01 2025 GMT
        Subject: CN=8d12f5f9c59cd30e7fd8e9da6cf7023d7680b8e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a9:50:b8:4d:d9:be:3e:0d:05:5d:b5:c9:bf:
                    46:c3:cb:91:73:c7:c0:77:f3:15:0e:61:c5:8f:d1:
                    b6:90:54:87:97:2c:68:a1:d2:cd:31:2d:54:26:c3:
                    fb:3d:cd:b7:ba:2b:f4:63:60:fb:bb:da:4e:1f:27:
                    7a:e7:7f:4d:5a:67:b6:47:df:17:85:8e:8b:f5:de:
                    6a:6d:dd:f5:82:8a:15:a8:29:d2:8b:2a:f8:a6:ed:
                    59:c5:0d:e6:e0:d1:36:13:b2:cc:d7:43:c5:f0:64:
                    a5:d8:00:6e:25:0a:5c:74:e7:b9:66:4b:71:ca:c0:
                    75:54:ab:fb:57:ec:5a:2e:d5:8d:49:2e:c1:2d:62:
                    c8:82:1d:d8:f8:ed:ca:04:ce:43:de:ae:79:f8:f9:
                    4a:c7:05:e9:41:53:1d:2b:54:14:e5:d6:6d:3d:1e:
                    b5:3a:ed:aa:6b:09:20:ee:b6:11:53:ff:ae:46:0f:
                    d3:c0:cc:29:c8:73:8d:25:a2:45:54:d4:d5:4d:b8:
                    43:53:68:d1:45:bb:bb:07:be:07:18:dc:4f:f8:9c:
                    ee:0d:1a:04:ff:a9:22:de:a3:b8:a4:66:7d:58:fc:
                    51:c3:2b:ab:0e:d4:23:ad:5e:13:af:bf:43:b3:7d:
                    04:a0:84:9b:cb:c7:78:ea:12:b7:49:7c:c6:04:29:
                    80:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:12:F5:F9:C5:9C:D3:0E:7F:D8:E9:DA:6C:F7:02:3D:76:80:B8:E5
            X509v3 Authority Key Identifier:
                keyid:E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:4b:b0:cf:14:a9:f7:9c:40:cb:c1:be:1f:f5:bf:9e:5b:94:
         91:7e:60:8b:b7:bd:8f:80:a6:b3:eb:56:69:63:be:d3:f8:c2:
         28:7d:ed:42:1a:f7:30:07:4f:28:b9:25:d8:7a:d9:82:d7:da:
         01:bd:e6:d3:70:d1:23:47:70:54:eb:f5:c5:a5:32:1d:16:cc:
         46:cd:6a:1a:0e:21:3a:19:46:ea:a7:0e:14:f9:ad:e1:70:38:
         1b:71:90:64:26:37:90:f7:a3:4d:3e:fe:9d:57:88:ac:37:db:
         0d:d9:d8:20:5d:21:b5:ec:1b:28:6b:f6:b2:3d:2d:de:7e:ab:
         be:13:27:ec:82:82:a6:95:f0:03:eb:60:02:d9:93:f4:25:1e:
         9c:4f:18:fe:b2:dc:0c:ca:50:92:96:54:ce:03:c7:33:32:8e:
         16:ee:a6:fa:6a:19:a9:dc:6c:82:31:bf:ff:ae:55:86:6d:e1:
         40:47:09:07:af:09:bf:53:fc:d5:66:66:11:1f:f6:b6:db:d1:
         ea:b4:14:49:d2:2d:cc:f2:2a:07:64:68:d0:66:e4:21:29:6a:
         1d:15:a3:47:a8:34:09:3b:8d:01:5a:1f:99:68:67:bd:9b:31:
         30:bc:9e:50:a2:09:0c:fc:16:28:73:b3:82:0a:0c:ed:c7:9c:
         06:b7:d3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:50:46 2025 by rpki-client