Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft
File:                     4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft (raw, json)
Hash identifier:          6Ko7VkW+5EVbx+Q1XMfj5ke2tQHZafyLYagnqXxLFV4=
Subject key identifier:   8D:C2:3B:3B:74:73:62:FA:28:8B:41:1A:73:3E:94:7E:FD:8D:AF:99
Authority key identifier: E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8
Certificate issuer:       /CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
Certificate serial:       01987B9D191DFB6FDA185E91BDB91688A574
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft
Manifest number:          14EE
Signing time:             Tue 05 Aug 2025 19:02:29 +0000
Manifest this update:     Tue 05 Aug 2025 19:02:29 +0000
Manifest next update:     Wed 06 Aug 2025 19:02:29 +0000
Files and hashes:         1: 22dU6SeEOk5lA-ybXbkk_F-RHPI.roa (hash: opc+OMEhIAAy9MN7L41tT+6qaGIbCCKGC8RYJFu35pA=)
                          2: 4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl (hash: F/UIAhvTb8DggUMeW7cZpXCuf0nCmq9Qzy2u0hnOkHY=)
                          3: 4qLU7z4WKhDamvGgGu3FYecZcUk.roa (hash: 9qwkIu/qIJXyrkkz5BO3j8+teV1VtOtIs2m6qOT2uI4=)
                          4: 7RaGRpteAPU-JEOa6gyOeUUaz1M.roa (hash: OqBBLrE7nX8ZR8+lsbAyGBi0x2gZcydxjiv43PsnDSA=)
                          5: aFtgicTtP5TQ2xvmPhZkgfQfMmE.roa (hash: XOi5YDN2Wfonsac/Qx8Uho2A7mZbabtT5+5wbH9JkHA=)
                          6: iHNmmkHnkrPi1F2vS2DFfQgsEUE.roa (hash: 3V9ILLN3TdUu9XJlmFd4WmoL+cfzk6qYW28NQJnYdZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:9d:19:1d:fb:6f:da:18:5e:91:bd:b9:16:88:a5:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
        Validity
            Not Before: Aug  5 19:02:29 2025 GMT
            Not After : Aug  6 19:02:29 2025 GMT
        Subject: CN=8dc23b3b747362fa288b411a733e947efd8daf99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:05:5c:34:8c:30:c6:90:27:3d:32:e4:27:48:
                    5b:85:35:8c:8a:e5:a9:f2:95:59:f6:8e:d0:73:07:
                    21:13:ca:98:31:50:2c:db:48:6e:b8:8e:e6:69:31:
                    2e:80:8d:30:1d:b0:7e:6a:c1:f8:41:ae:79:97:27:
                    f8:e9:b6:87:19:27:b4:92:7e:43:a2:76:9e:25:ab:
                    73:0d:a1:11:53:23:ff:8f:ea:2c:d2:be:08:07:10:
                    be:27:92:2c:97:6d:78:1f:44:6e:3a:55:5b:72:4c:
                    a6:5c:ea:a1:34:15:2b:ef:88:9c:14:60:ff:6e:6b:
                    69:49:4e:a0:81:0e:44:e5:6a:b3:cc:5d:a7:cc:5c:
                    64:9a:2f:71:e3:f4:04:88:f3:61:ff:3c:0f:a6:6d:
                    3b:15:30:ae:b3:9b:44:8f:18:4a:b9:3b:b2:0e:12:
                    69:ea:27:30:17:26:6d:f7:0e:98:0c:b4:e2:bc:1a:
                    85:64:7b:04:af:93:fa:3e:77:e2:6c:d3:46:59:59:
                    43:8a:2d:9b:fb:3f:ca:68:ae:52:4d:1d:d1:71:cc:
                    10:0b:c7:20:9f:a3:af:8c:05:cb:77:76:f1:3c:6b:
                    58:ba:27:18:0d:dd:68:e3:62:86:64:a7:8d:ff:d0:
                    53:4e:eb:f5:dd:5f:7e:72:af:f6:03:cb:0e:70:40:
                    3f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C2:3B:3B:74:73:62:FA:28:8B:41:1A:73:3E:94:7E:FD:8D:AF:99
            X509v3 Authority Key Identifier:
                keyid:E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:d1:52:93:da:97:2f:32:9f:8a:f4:bc:e6:88:18:17:3a:7d:
         c8:74:55:d3:57:d1:50:ab:0e:c2:b2:0a:fb:72:e1:40:f8:5f:
         60:48:ca:6f:b7:86:82:c0:20:3d:3c:43:02:fd:8a:0c:96:f6:
         cf:5b:f7:32:15:49:8f:0d:03:a2:b7:5b:a0:6f:b4:7c:33:ff:
         f3:da:9f:f4:1b:b9:44:7e:bb:a6:49:51:5f:19:f8:1c:e0:b2:
         91:af:cd:0f:22:29:aa:f8:41:26:da:1f:a5:ee:35:16:7b:65:
         c4:aa:48:4e:8a:92:a5:a4:b3:ab:f1:a5:2e:84:e2:97:0f:40:
         3b:0b:4f:d9:0a:19:df:58:7e:d9:68:9b:12:fc:1a:b1:28:0b:
         32:48:44:c1:d3:d6:a9:e8:c2:01:e1:f2:20:7c:d1:67:ce:de:
         93:a3:c8:8e:72:c7:60:7d:db:21:ee:71:b2:b5:67:e9:c7:31:
         fe:57:66:ee:99:f4:f7:32:7e:53:57:89:f9:1e:7c:ea:67:7c:
         77:81:2c:06:0c:5a:07:51:1c:53:cd:16:03:65:7c:a8:4a:8e:
         d4:12:b2:dc:47:db:cf:8a:d5:51:8d:d9:32:66:32:52:9f:41:
         e0:ae:98:78:d0:f8:2e:d6:c6:b4:4f:0f:88:17:89:99:ea:f1:
         04:af:63:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:34:40 2025 by rpki-client