Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
File:                     4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft (raw, json)
Hash identifier:          9ZKWfXLOdvzkxMFhPRdSrFscNDteBEHIFI3HA+jkvbc=
Subject key identifier:   9C:28:F7:03:5F:CD:26:3A:12:ED:C3:6F:41:02:1E:32:0B:98:0E:0B
Authority key identifier: E2:3F:8F:5C:52:42:5D:F6:2B:44:45:43:3A:AC:FD:8C:A5:BF:2E:9D
Certificate issuer:       /CN=e23f8f5c52425df62b4445433aacfd8ca5bf2e9d
Certificate serial:       019890DA2C6698D8F7B0F34F128379509B0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
Manifest number:          02A5
Signing time:             Sat 09 Aug 2025 22:01:13 +0000
Manifest this update:     Sat 09 Aug 2025 22:01:13 +0000
Manifest next update:     Sun 10 Aug 2025 22:01:13 +0000
Files and hashes:         1: 4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl (hash: 7JdAMnMxnPOinjDJpoAAt+ItNubhf8pvwmOZ8bJj9FY=)
                          2: 6ppH0TTYhzfLzHV3xSzl4LSdV6c.roa (hash: OehC5Yx+JGVn7qI8wxptwUUS4CQUtx99kzGyWmtybhI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:90:da:2c:66:98:d8:f7:b0:f3:4f:12:83:79:50:9b:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e23f8f5c52425df62b4445433aacfd8ca5bf2e9d
        Validity
            Not Before: Aug  9 22:01:13 2025 GMT
            Not After : Aug 10 22:01:13 2025 GMT
        Subject: CN=9c28f7035fcd263a12edc36f41021e320b980e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f4:70:a8:25:80:03:db:14:1c:3a:8f:63:20:
                    18:06:54:26:1d:aa:03:0c:e9:a6:cf:88:e2:d5:50:
                    57:a2:05:3b:64:b6:9c:ca:92:ba:c8:fd:8d:f5:26:
                    9e:da:a8:56:75:b0:b2:c8:ca:c7:82:a6:bb:65:6e:
                    c9:10:e7:6a:f4:39:c8:b0:a4:87:0f:a4:cd:2e:6a:
                    e3:83:0a:33:bb:0a:a5:05:c1:ab:d2:d2:f4:d5:54:
                    b0:d9:15:57:45:f7:55:aa:e6:cf:8a:79:91:df:61:
                    62:15:9b:90:b0:5d:8d:2d:ef:68:d4:e5:4d:1a:ff:
                    cf:1c:ff:1d:0b:22:0f:47:b4:fc:5c:f6:fb:f6:2b:
                    38:2b:20:b2:2f:58:a4:b3:6a:e0:20:44:47:86:91:
                    5f:8b:b0:33:89:d2:38:6b:11:bd:22:45:59:7a:92:
                    e6:c4:7d:12:8b:74:6c:95:c8:01:ae:84:b1:18:e0:
                    85:ae:5c:9c:67:c9:b1:d2:1a:3f:e5:bb:5e:6b:50:
                    d9:47:4b:b9:b0:a7:b7:9e:17:0c:44:aa:dd:9d:5c:
                    d1:77:7c:01:39:3b:b2:16:46:d5:27:f6:40:3b:9a:
                    7a:5d:00:1a:f1:a0:a5:40:8e:3c:77:a9:14:f3:cd:
                    a8:84:c8:c4:2d:92:61:04:63:9c:05:cd:37:25:a8:
                    8e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:28:F7:03:5F:CD:26:3A:12:ED:C3:6F:41:02:1E:32:0B:98:0E:0B
            X509v3 Authority Key Identifier:
                keyid:E2:3F:8F:5C:52:42:5D:F6:2B:44:45:43:3A:AC:FD:8C:A5:BF:2E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:c1:79:fd:d5:24:35:59:44:09:5f:96:2c:eb:e2:e8:3f:38:
         7d:dc:01:5d:27:77:20:31:4d:df:05:cc:b2:17:2f:4d:b0:c1:
         f0:97:3b:67:08:35:d5:28:5a:75:2c:e5:fe:95:77:a4:64:df:
         c8:67:ef:13:04:4c:c4:ae:5a:a7:01:81:0c:43:c0:4c:13:3a:
         e3:e9:0e:1a:92:a4:7e:f3:b1:3e:e7:1b:5d:53:02:1e:80:4b:
         9b:9e:7a:c6:30:c4:08:10:09:68:0d:85:ca:90:72:b3:02:80:
         c5:23:6c:6c:9e:9a:ba:61:70:ea:bb:bb:bb:14:53:85:0c:68:
         99:0a:be:73:66:13:bb:c5:b2:85:71:7a:83:4b:70:e8:e0:71:
         4b:25:c6:1a:72:bd:90:3a:67:e3:4c:97:d6:78:37:ef:ef:48:
         34:ba:2f:10:30:25:9e:a4:b4:e0:55:cf:40:83:63:1a:80:c6:
         a3:e5:c3:f5:52:7a:d3:61:40:98:c6:cd:b4:ec:2f:ea:4d:12:
         43:92:70:bc:df:2c:8b:14:75:97:91:84:39:d0:b4:3f:86:13:
         ff:46:bf:9e:f6:6b:0b:6e:47:6a:31:50:b2:df:68:d6:08:4d:
         06:f7:26:31:65:98:04:52:10:d1:3d:e2:09:86:eb:24:e6:50:
         26:da:30:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:57:20 2025 by rpki-client