Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
File:                     4tGVYU7uSi27UfWyHmnRbE4UQa8.mft (raw, json)
Hash identifier:          wflw6pFdtxrrhlvj6T7xYsJe53fE05WM1QmXWQY7SN8=
Subject key identifier:   58:7F:AF:62:1B:44:B4:31:8F:D9:2C:BA:2F:EE:56:01:EC:74:06:4A
Authority key identifier: E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF
Certificate issuer:       /CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af
Certificate serial:       019896A4F8821F843AAF8EE2FA52A34FB42A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
Manifest number:          010E
Signing time:             Mon 11 Aug 2025 01:00:50 +0000
Manifest this update:     Mon 11 Aug 2025 01:00:50 +0000
Manifest next update:     Tue 12 Aug 2025 01:00:50 +0000
Files and hashes:         1: 4tGVYU7uSi27UfWyHmnRbE4UQa8.crl (hash: Erb1ySJDAGnAax3k1Wv9U3cLK2cVzT4h4nuzxIa2pkA=)
                          2: I6b16o_Ase2s-4OxbTzP2XU7AO8.roa (hash: 6HiWXRxkCGNhrpcrbbFpGCz17IhI/bbEhWJf+70NeCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 01:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:a4:f8:82:1f:84:3a:af:8e:e2:fa:52:a3:4f:b4:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af
        Validity
            Not Before: Aug 11 01:00:50 2025 GMT
            Not After : Aug 12 01:00:50 2025 GMT
        Subject: CN=587faf621b44b4318fd92cba2fee5601ec74064a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:22:fa:95:db:9b:c9:f1:19:eb:68:5a:e0:dd:
                    66:64:c6:a3:43:57:43:2d:4d:92:7f:51:7a:28:37:
                    bf:a1:07:3d:c4:4d:c2:6b:be:11:60:95:f6:3a:0c:
                    1f:25:ef:2f:6a:60:36:dd:ba:e7:b2:a4:57:88:49:
                    d4:7e:b0:a4:a5:3b:75:fb:80:34:d5:6c:23:77:be:
                    05:f1:4c:53:11:78:6a:c7:cb:93:4a:c6:1a:2a:1b:
                    ac:fa:1a:7a:28:0e:22:d3:69:62:69:b7:df:c2:67:
                    0a:56:8a:3e:ff:b6:a4:68:89:5f:0f:35:1f:4f:09:
                    8f:a7:b0:30:81:53:39:e9:dd:4d:a0:13:9a:77:e2:
                    8b:e9:64:5a:27:d1:4b:4c:6d:e1:39:05:83:4e:96:
                    6b:a4:0b:13:2f:7f:3d:f7:ae:51:ab:3f:9f:1e:e8:
                    d5:a4:b7:55:a4:4a:1c:f1:9f:03:7d:2f:c7:22:0e:
                    b0:29:c7:c1:41:e6:5b:61:dd:53:32:27:34:92:53:
                    83:93:bf:f0:0a:7e:5f:01:76:ad:f1:35:32:a8:ec:
                    dc:9d:4a:98:9c:58:f0:55:94:9d:10:41:85:cb:5f:
                    ff:04:cd:2f:50:9a:f1:82:34:87:be:12:d2:46:ed:
                    8f:4f:18:81:29:89:54:36:f2:3a:f8:a1:bb:f8:f1:
                    b7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7F:AF:62:1B:44:B4:31:8F:D9:2C:BA:2F:EE:56:01:EC:74:06:4A
            X509v3 Authority Key Identifier:
                keyid:E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:d3:c4:fb:bf:86:89:c6:10:3c:96:cf:6d:e5:d6:ee:60:c3:
         79:09:07:b3:87:ef:6c:ce:72:7b:e4:8f:08:21:4c:bc:9c:23:
         f2:5e:e4:f0:63:14:8e:2b:25:f7:57:5f:97:a4:13:2e:aa:a1:
         3a:98:19:69:8a:d7:df:22:01:72:62:9c:92:ee:aa:b4:ba:21:
         d8:a2:0e:b8:71:4e:17:6b:f7:fc:20:f1:8f:94:8d:78:6f:60:
         69:56:83:ff:c0:ac:6e:8a:bb:75:ec:d8:db:05:e4:86:1d:7a:
         e7:7e:5d:4a:26:11:14:59:4a:71:4f:c4:6b:e9:a3:48:5e:04:
         50:0e:c3:ec:b8:36:80:58:74:cb:e1:30:44:30:65:d5:4e:63:
         f4:62:96:23:0c:89:b7:d2:03:56:f6:60:73:6c:4a:65:e5:20:
         69:14:8e:6a:51:2e:2c:97:55:47:e3:9c:d3:24:b3:41:b9:ba:
         4e:c6:72:a0:e9:ee:3c:74:6b:c1:e8:34:ee:bc:53:ad:96:4d:
         73:76:4c:be:e3:86:c0:f0:ff:87:59:fe:4a:20:bb:58:d2:b8:
         64:eb:81:04:81:52:f0:bf:8a:42:33:cb:9f:34:b4:88:ad:21:
         bc:bd:fc:54:d1:3e:fd:af:3f:15:c9:93:37:b5:46:8e:ab:33:
         7c:c3:53:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:08:43 2025 by rpki-client