Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft
File:                     4XsQ_WB62ScAbGLONWkeuqjwGLU.mft (raw, json)
Hash identifier:          deh0pbTewFIM514Q7NuahLURWuOMwvrXxyxlFcKudDE=
Subject key identifier:   7E:2A:FD:49:0A:08:6E:1D:BD:4C:4C:25:C0:75:64:41:C5:5F:F9:39
Authority key identifier: E1:7B:10:FD:60:7A:D9:27:00:6C:62:CE:35:69:1E:BA:A8:F0:18:B5
Certificate issuer:       /CN=e17b10fd607ad927006c62ce35691ebaa8f018b5
Certificate serial:       0198906C2A0DF8ECEBCFC12B0599072DF6F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4XsQ_WB62ScAbGLONWkeuqjwGLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft
Manifest number:          162A
Signing time:             Sat 09 Aug 2025 20:01:04 +0000
Manifest this update:     Sat 09 Aug 2025 20:01:04 +0000
Manifest next update:     Sun 10 Aug 2025 20:01:04 +0000
Files and hashes:         1: 4XsQ_WB62ScAbGLONWkeuqjwGLU.crl (hash: eiwhjIG5WN1hfgLCsdPJipg6YNCrpZCwkzMhnDq4ECY=)
                          2: AG6ksP0tzcHHRqcuNe-hk9nPNdc.roa (hash: 4Pxy9edWR16JJVWSm9ebgWIqidAnxsMd1sHHOAlque0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4XsQ_WB62ScAbGLONWkeuqjwGLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:90:6c:2a:0d:f8:ec:eb:cf:c1:2b:05:99:07:2d:f6:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e17b10fd607ad927006c62ce35691ebaa8f018b5
        Validity
            Not Before: Aug  9 20:01:04 2025 GMT
            Not After : Aug 10 20:01:04 2025 GMT
        Subject: CN=7e2afd490a086e1dbd4c4c25c0756441c55ff939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:40:cd:93:15:ff:5d:ff:d3:dc:09:73:a1:a6:
                    ca:ba:d2:32:25:0e:87:83:00:d5:be:58:9a:f5:5d:
                    57:29:01:68:c2:10:f3:a8:7c:86:51:19:62:43:3b:
                    29:b0:22:38:fe:41:dc:d8:f2:11:a5:44:bc:40:bf:
                    f7:50:3f:82:16:3a:5d:e0:05:3b:8b:56:fe:98:9a:
                    e5:b2:4f:65:c1:31:48:91:95:c5:0e:b6:93:0c:a8:
                    9d:9f:42:1e:ef:3f:75:75:00:f1:4a:89:8c:22:c7:
                    f2:b3:36:9a:9a:6a:ee:af:dd:42:c7:b7:31:55:4b:
                    25:d7:58:4f:b4:d8:eb:13:75:64:83:ca:97:60:14:
                    f2:0a:dc:75:a0:11:40:da:d9:db:cd:c8:b5:aa:9b:
                    b0:cf:af:92:d9:21:4a:e0:69:5a:f6:1a:f9:8b:47:
                    f2:7f:d6:dc:c8:7a:c5:01:a2:6d:ad:61:bb:6b:9f:
                    44:60:91:5f:0a:bc:6c:2f:9d:90:14:d7:06:1c:8f:
                    4d:e2:67:b1:97:9f:46:77:4b:51:7e:fd:94:df:f4:
                    71:00:3e:41:70:d6:0f:1d:38:1a:be:78:7a:75:18:
                    39:e9:3d:ba:20:8f:49:c8:c1:db:9e:6e:25:30:a5:
                    4f:de:fe:94:c8:da:66:f5:5a:c6:31:7b:b7:0e:e8:
                    3b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2A:FD:49:0A:08:6E:1D:BD:4C:4C:25:C0:75:64:41:C5:5F:F9:39
            X509v3 Authority Key Identifier:
                keyid:E1:7B:10:FD:60:7A:D9:27:00:6C:62:CE:35:69:1E:BA:A8:F0:18:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XsQ_WB62ScAbGLONWkeuqjwGLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:1c:fd:5d:54:6f:b4:5b:c0:3f:3a:94:4a:20:20:80:9e:73:
         f3:25:0b:ab:53:45:02:89:f1:04:b9:52:bd:bd:3e:66:05:af:
         f9:1b:b3:74:4d:00:4c:a0:f9:70:bb:43:d9:31:ed:31:0d:0a:
         2f:12:2f:68:7c:63:e8:1a:61:7a:8f:36:65:69:37:73:8f:2f:
         30:d5:1a:36:24:f4:a0:18:01:db:25:c2:0a:4e:c4:fa:d2:50:
         23:bf:17:3d:03:4a:2f:9e:5f:63:d4:13:bc:02:4b:8f:dc:01:
         14:3f:85:be:fb:a0:a0:81:92:00:b8:21:14:c1:0c:07:71:3a:
         9e:61:35:77:01:82:86:c4:cc:53:6f:ab:11:05:87:49:e4:af:
         19:f0:6b:ae:20:26:69:31:b0:31:9e:26:c9:c4:e9:71:6b:5f:
         87:9c:84:27:2c:0f:18:ad:23:63:2c:23:16:af:c5:2e:d5:c3:
         66:36:82:84:88:27:4a:0b:00:85:e0:b0:c9:57:6a:69:a2:14:
         0c:93:90:36:58:fb:ec:44:49:5f:e4:29:1d:37:ce:de:26:f6:
         93:52:1f:03:fc:3a:99:c2:05:ef:74:54:16:47:86:0f:88:42:
         96:80:52:3d:4e:79:1d:db:66:a3:8d:47:f7:5f:92:3e:46:27:
         c5:ba:72:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:45:16 2025 by rpki-client