Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
File:                     4qhjHttIETIyWh0Yb73gH6FXeRA.mft (raw, json)
Hash identifier:          tW5RUf3wAvcPajxJuoPmhXyLI8/d7Mb+w+p9cejDl3M=
Subject key identifier:   48:E9:E8:3D:EB:27:43:F8:D0:9F:90:9B:CC:59:E5:81:7D:B9:E1:47
Authority key identifier: E2:A8:63:1E:DB:48:11:32:32:5A:1D:18:6F:BD:E0:1F:A1:57:79:10
Certificate issuer:       /CN=e2a8631edb481132325a1d186fbde01fa1577910
Certificate serial:       01987DF7ACF4299C7447C21C99CADD069C29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
Manifest number:          059F
Signing time:             Wed 06 Aug 2025 06:00:40 +0000
Manifest this update:     Wed 06 Aug 2025 06:00:40 +0000
Manifest next update:     Thu 07 Aug 2025 06:00:40 +0000
Files and hashes:         1: 4qhjHttIETIyWh0Yb73gH6FXeRA.crl (hash: bjcFCrbir0jprpjsdVApBvgFCZSfrtdNkwi9sfvksjk=)
                          2: h3E6-zfi_xyDMKZ-mjqCgktKu5o.roa (hash: jFGY2eFUS/f/RiSzQYMsT/EoV/0tdGrsjyAMY/vYpEg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 06:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:f7:ac:f4:29:9c:74:47:c2:1c:99:ca:dd:06:9c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2a8631edb481132325a1d186fbde01fa1577910
        Validity
            Not Before: Aug  6 06:00:40 2025 GMT
            Not After : Aug  7 06:00:40 2025 GMT
        Subject: CN=48e9e83deb2743f8d09f909bcc59e5817db9e147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f8:10:52:bb:86:72:da:da:3b:c4:5f:83:a0:
                    8f:c6:0c:11:cd:fd:8e:f4:a0:74:14:8d:4f:49:a9:
                    0a:9d:13:dd:ce:19:c4:42:fe:49:4a:7e:c0:fc:15:
                    f1:ad:b9:ca:c1:c3:44:9b:4e:e6:46:0b:70:39:9d:
                    b4:8b:bd:ea:1b:c1:2d:dc:d1:18:fb:38:96:80:7d:
                    7e:f7:d9:79:9a:89:a6:6d:f0:7f:dd:ce:84:8a:f4:
                    61:8a:11:92:4d:ba:b9:a9:c0:ee:59:99:f7:59:2a:
                    0a:9c:08:88:af:3f:18:e8:b1:78:c0:74:86:63:1e:
                    a5:b2:45:3b:62:97:6f:09:37:79:28:e1:6f:f6:09:
                    9b:34:54:90:3c:d2:0d:01:98:89:25:5e:bc:67:33:
                    72:0e:1d:52:b7:a1:1c:a3:5e:07:cc:6e:4d:d3:67:
                    43:08:b9:8d:a3:69:dc:79:13:b9:29:1e:8e:55:f8:
                    86:93:64:94:85:90:ae:6b:ba:c8:b8:21:26:4e:e9:
                    ef:5a:1b:ea:a2:cc:e3:6b:da:a2:57:4e:0f:38:18:
                    40:06:70:4c:46:2b:ed:4e:bc:56:a5:25:99:ca:fd:
                    6d:8c:92:13:e6:f6:f6:a4:ea:6f:1c:9e:cf:50:6e:
                    88:23:f5:8f:53:9c:f3:ae:0b:34:09:bf:63:99:2c:
                    39:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E9:E8:3D:EB:27:43:F8:D0:9F:90:9B:CC:59:E5:81:7D:B9:E1:47
            X509v3 Authority Key Identifier:
                keyid:E2:A8:63:1E:DB:48:11:32:32:5A:1D:18:6F:BD:E0:1F:A1:57:79:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:b1:eb:e9:51:d6:97:44:35:98:88:cf:93:75:52:9a:b3:b5:
         6a:32:07:d5:39:2f:93:81:11:36:f6:5d:c8:82:a3:d9:86:c3:
         3f:a8:ff:ac:8e:9a:35:19:ea:2a:3c:7d:b0:c7:f8:f9:72:88:
         2a:79:85:25:eb:b1:1a:33:d6:38:8d:10:81:a2:9b:ea:0b:75:
         03:72:c6:ec:5e:8f:3c:22:7f:5b:49:49:f9:1c:ea:d4:08:d3:
         fc:5e:34:c7:57:5b:83:ea:af:96:28:67:26:ef:23:eb:e4:f1:
         69:6b:27:3e:75:e5:75:94:a3:11:1f:f6:22:fb:11:a6:c2:b8:
         76:30:f2:ad:3b:1d:4e:e1:33:47:bb:45:02:d1:40:1f:14:bc:
         f1:bf:72:ff:41:45:42:98:e0:4c:83:b2:64:57:e9:6d:16:8a:
         55:82:90:1b:8c:d6:b5:98:d1:e3:fe:61:61:d5:2c:66:70:80:
         7c:02:af:9a:6d:9c:4e:0b:43:c3:12:0d:06:8d:92:1a:3e:76:
         34:6f:89:ba:b4:81:1a:23:fe:3a:e4:b5:3b:ce:c7:3a:a6:87:
         8f:19:c2:f1:66:69:f7:3f:c9:c1:f1:8c:ca:20:d2:ea:db:12:
         a5:f4:e1:66:70:fc:75:0b:00:60:60:d8:1c:87:bf:96:d4:92:
         96:43:d0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:23:43 2025 by rpki-client