Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
File:                     4Wjja6V37UfmkocpaRmR5OfyNdo.mft (raw, json)
Hash identifier:          /wSz6hHL+aJWP+QtzXJ6WbLOqFjiVjU2KNqDfPr5pIo=
Subject key identifier:   5C:AB:AD:34:66:82:A4:B6:FA:20:AD:50:D1:46:B4:56:BB:3B:94:5A
Authority key identifier: E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA
Certificate issuer:       /CN=e168e36ba577ed47e6928729691991e4e7f235da
Certificate serial:       01988CFD8E35C9C091330550B11DC7463476
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
Manifest number:          0CBA
Signing time:             Sat 09 Aug 2025 04:01:23 +0000
Manifest this update:     Sat 09 Aug 2025 04:01:23 +0000
Manifest next update:     Sun 10 Aug 2025 04:01:23 +0000
Files and hashes:         1: 4Wjja6V37UfmkocpaRmR5OfyNdo.crl (hash: SKVxXQHoDrThGFJeJcMDTl7HrgwMQUfAhHXNu5Y8q48=)
                          2: AUxf95vk-o1Gt_wrf6UPvy-h7OA.roa (hash: wvFv9nzKIVnXA7Zw/hu/kaD5HOZlQJgT9zV6+OcXJBw=)
                          3: HKDlTUsL1fmB-oiAZcWxWBPpDcU.roa (hash: PObhBDwRkZyevOSM5huA6knnfjTYj1bgluiflgFLp/c=)
                          4: vuTwV8s3dn69U4Rqa-5cKrrJqjA.roa (hash: rpsPpW15eqZG/XbbOl1/Yv+x/+71Dg60CplH4I4uv0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 04:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8c:fd:8e:35:c9:c0:91:33:05:50:b1:1d:c7:46:34:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e168e36ba577ed47e6928729691991e4e7f235da
        Validity
            Not Before: Aug  9 04:01:23 2025 GMT
            Not After : Aug 10 04:01:23 2025 GMT
        Subject: CN=5cabad346682a4b6fa20ad50d146b456bb3b945a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ad:87:fc:52:c9:32:f2:3d:ab:58:5e:1b:29:
                    cc:61:66:f1:c4:58:81:af:42:43:b6:a2:2a:f3:7f:
                    03:db:fe:c1:50:8d:10:6e:e2:ea:45:ae:a9:60:a8:
                    2a:a0:87:cd:ee:0f:a9:53:18:c5:33:b8:bd:d1:bf:
                    4a:74:7a:2f:03:91:e6:df:b3:4d:ef:6e:4a:f0:43:
                    0f:e3:5a:2a:87:01:46:aa:3f:5c:4d:bd:5b:04:53:
                    f7:4a:f1:6f:43:41:b3:85:a7:0a:35:0d:f1:8b:57:
                    d1:26:a8:1d:9b:28:ed:ba:21:48:26:61:b2:24:f8:
                    c4:4c:62:90:12:79:80:35:72:70:b3:dc:ca:e3:c3:
                    4a:d3:2e:f7:6e:e7:25:8b:66:95:65:7b:a3:ec:32:
                    41:e3:55:da:ba:76:da:8a:01:84:51:d4:9b:bd:ae:
                    11:59:2d:cd:b3:26:fc:6e:7d:5b:5d:47:54:79:bf:
                    42:a0:6e:21:ca:78:cf:0a:d2:4a:18:ce:de:1a:d8:
                    21:d8:7f:d1:ee:b4:66:6b:56:f3:21:88:98:98:94:
                    61:43:b8:74:f9:43:a6:8c:98:02:58:d3:17:fb:ac:
                    04:70:1b:bd:59:02:80:9b:7d:2c:94:d9:c4:c8:5b:
                    73:37:c8:69:3f:1b:3a:ba:c3:a7:4b:a9:09:76:ab:
                    cc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:AB:AD:34:66:82:A4:B6:FA:20:AD:50:D1:46:B4:56:BB:3B:94:5A
            X509v3 Authority Key Identifier:
                keyid:E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:62:44:92:61:95:aa:a3:ce:9f:ee:3d:78:55:d8:77:bf:82:
         67:f0:f2:07:35:3a:a0:4d:4b:c6:61:66:1e:de:be:79:41:f7:
         a9:17:e4:35:61:a7:fa:32:33:8f:a3:b0:2f:f3:bc:62:b7:57:
         e2:9d:6f:06:8a:85:22:4f:12:a4:8c:45:28:31:6d:7f:8f:39:
         fb:58:85:e6:e7:5a:07:57:5b:32:8b:5e:3c:47:71:c2:5b:25:
         e0:6c:5c:ea:d3:ad:b6:50:df:e5:aa:c0:1f:03:49:be:32:ea:
         99:6c:64:ad:cd:23:73:51:fe:2e:27:2a:d0:d3:c0:4e:60:95:
         69:26:04:9f:d4:e2:5e:fd:1d:39:0a:f7:98:85:e6:23:18:9d:
         9c:ab:fc:34:df:ca:cd:d2:2e:70:23:0e:41:ff:e8:ae:19:19:
         a3:e0:5f:cd:a8:46:f6:65:9d:7d:ca:a4:59:c3:34:10:3d:f4:
         be:a7:58:a2:da:4d:da:6a:c7:30:cc:e8:95:d7:61:09:09:5b:
         d4:e2:fe:b6:00:2a:a8:c4:48:1b:a6:90:25:90:c0:9b:d0:3c:
         e3:85:86:4b:f3:2c:3c:e8:d0:14:12:82:78:8e:1a:7c:32:50:
         54:00:3f:02:56:2c:da:2e:45:0b:aa:4d:9f:15:fe:ee:04:aa:
         c8:14:20:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:38:20 2025 by rpki-client