Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft
File:                     4b3MskUKGgU8icwhPkrpuGR4LeM.mft (raw, json)
Hash identifier:          O7iXI8/ocwt0VHALkr/YKV/36ciz0ukvPXLWMIA2uSk=
Subject key identifier:   65:0D:86:D1:57:9E:5B:EA:90:32:AF:AF:90:20:07:B3:6C:CF:AD:38
Authority key identifier: E1:BD:CC:B2:45:0A:1A:05:3C:89:CC:21:3E:4A:E9:B8:64:78:2D:E3
Certificate issuer:       /CN=e1bdccb2450a1a053c89cc213e4ae9b864782de3
Certificate serial:       01987FAF7FFE5980F996EBAC1BC56A3D735E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4b3MskUKGgU8icwhPkrpuGR4LeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft
Manifest number:          0F05
Signing time:             Wed 06 Aug 2025 14:01:04 +0000
Manifest this update:     Wed 06 Aug 2025 14:01:04 +0000
Manifest next update:     Thu 07 Aug 2025 14:01:04 +0000
Files and hashes:         1: 4b3MskUKGgU8icwhPkrpuGR4LeM.crl (hash: NK9H07OfkgDd1qI+wio9l4yM9j5HcsP0grMYMkzzaMM=)
                          2: 7uR_yiVUsKXN9cQ9UEqMaOjd_ow.roa (hash: OVRCNzp/6ULY8TXLR8C+JnnDlpd68DlkSuJjHaG4io0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4b3MskUKGgU8icwhPkrpuGR4LeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 14:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:af:7f:fe:59:80:f9:96:eb:ac:1b:c5:6a:3d:73:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1bdccb2450a1a053c89cc213e4ae9b864782de3
        Validity
            Not Before: Aug  6 14:01:04 2025 GMT
            Not After : Aug  7 14:01:04 2025 GMT
        Subject: CN=650d86d1579e5bea9032afaf902007b36ccfad38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:31:78:e2:d1:4c:c7:95:0d:10:a6:13:b5:30:
                    f4:27:54:91:f1:fa:51:79:fc:4b:45:03:9a:99:79:
                    4f:8f:15:fd:6f:8d:ab:20:ea:ab:4e:af:7f:47:6f:
                    ed:8b:8f:e7:78:d8:a7:50:2f:cc:35:32:de:a3:73:
                    98:25:69:0e:9d:2a:19:c4:de:83:44:c6:ca:76:9a:
                    5c:f7:7a:ff:69:d8:0c:9c:f4:c8:9f:45:c7:51:be:
                    79:7f:1b:b3:1c:40:d1:6b:9e:eb:4d:72:be:04:e6:
                    2a:77:b5:10:be:5a:c7:48:5c:f9:c1:00:d0:49:06:
                    52:8c:ef:bd:7d:22:1d:94:e7:60:f9:bf:0b:a2:c0:
                    ef:3e:0d:3c:85:ef:f2:de:03:76:8c:50:0c:2f:9b:
                    c4:9f:54:8b:62:40:a1:14:42:64:b9:17:0c:a2:11:
                    dd:5a:50:8b:18:19:6e:a9:4f:79:bc:15:95:6c:42:
                    f4:94:45:71:87:fe:f3:de:e8:cd:c5:48:eb:5f:f4:
                    4e:96:43:9c:a8:d8:9e:73:69:7a:a5:bf:8b:68:92:
                    00:e1:c1:4a:fe:77:52:dc:43:1c:17:b4:3d:a0:54:
                    64:97:38:04:a7:8e:b8:a4:bf:7d:29:b6:7f:c6:1c:
                    f0:6b:62:92:f2:a2:8e:4c:a8:f6:8a:e8:b0:30:9e:
                    fe:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0D:86:D1:57:9E:5B:EA:90:32:AF:AF:90:20:07:B3:6C:CF:AD:38
            X509v3 Authority Key Identifier:
                keyid:E1:BD:CC:B2:45:0A:1A:05:3C:89:CC:21:3E:4A:E9:B8:64:78:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b3MskUKGgU8icwhPkrpuGR4LeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:a3:25:d0:64:2e:29:45:73:93:f4:a4:c7:fc:a4:f6:2f:18:
         ca:2a:fa:ad:c3:b0:2d:12:79:75:97:a9:9f:0d:10:5f:cf:a9:
         f2:14:76:e8:08:af:8c:cb:86:56:aa:b5:2a:e6:0f:49:a8:93:
         85:8b:ec:a4:5a:5b:63:73:67:46:24:43:08:19:6b:b8:2e:c0:
         00:80:e1:31:c2:6d:e5:1f:87:a6:3f:3a:70:d5:5d:68:c9:b2:
         4a:41:a0:a8:8e:e3:20:8e:3a:1b:2f:fb:93:a1:32:2b:8a:b0:
         06:85:b5:f3:c3:77:68:6d:db:b2:4f:95:aa:be:09:21:85:f4:
         c9:e9:02:21:4b:e5:10:ac:01:93:72:d4:11:de:0f:0b:2f:ac:
         68:e1:27:a7:69:ad:67:dd:2a:72:51:18:26:2f:f8:42:d7:2f:
         b0:19:9e:19:34:8c:2b:22:6e:17:8a:20:a9:67:eb:ec:77:0a:
         69:f8:ac:a8:a8:ce:81:7c:89:a5:72:b7:0a:6d:38:e7:97:80:
         8c:61:ab:ea:d1:d5:09:30:df:8b:c5:d4:1c:34:db:3a:43:c5:
         51:1a:9f:bd:1f:a7:02:3a:98:b0:99:9c:e3:28:73:22:83:b7:
         b6:e1:84:78:b9:bd:17:b4:a7:c5:11:93:e6:d1:be:84:e2:63:
         17:5b:78:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:26:49 2025 by rpki-client