Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.mft
File:                     4mNuAvFVT3DZcaZWhJwBvf8TjOg.mft (raw, json)
Hash identifier:          vlWYnFGG1ho3u9c2eS/fHc8+nClMD0TjIEc/K1JrMkU=
Subject key identifier:   BE:17:BB:46:8E:C0:8C:96:DA:AF:F6:1A:0F:DF:37:EB:27:08:59:EA
Authority key identifier: E2:63:6E:02:F1:55:4F:70:D9:71:A6:56:84:9C:01:BD:FF:13:8C:E8
Certificate issuer:       /CN=e2636e02f1554f70d971a656849c01bdff138ce8
Certificate serial:       019874504A88D7B756A6ECBC88907055FE61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4mNuAvFVT3DZcaZWhJwBvf8TjOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.mft
Manifest number:          0804
Signing time:             Mon 04 Aug 2025 09:01:15 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:15 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:15 +0000
Files and hashes:         1: 4mNuAvFVT3DZcaZWhJwBvf8TjOg.crl (hash: Gh8BfL3CcAMusL1+TlMUakwqeNoN0k9OrN4bDVEo/6Q=)
                          2: 7dRcXbElWutmb-vx1yNlkmHljSE.roa (hash: WZ+TCSmEO4aTN64/UdH9rIveS1dVo6wGMMxf2jnWiPU=)
                          3: 8ledFww48tlGlLdCdc6wJh5gkIA.roa (hash: Tmx1stFU3W6NXlv6YnpijkUZCwIIoq5vNpNXxvyHtoo=)
                          4: cvEKFsSTsStMmItt_2492mBbnFo.roa (hash: /gDWOgEA4TF8vJ8vkcEBambiiNBw5mr+XGx4Ku2Xa3g=)
                          5: kNp_3YkCixoFt65dB3MqrcA0XPo.roa (hash: yKQUvFhZ+Z1swcvVEnDhUbffbwLlIa/3aCYRRPNo5TY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4mNuAvFVT3DZcaZWhJwBvf8TjOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 09:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:4a:88:d7:b7:56:a6:ec:bc:88:90:70:55:fe:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2636e02f1554f70d971a656849c01bdff138ce8
        Validity
            Not Before: Aug  4 09:01:15 2025 GMT
            Not After : Aug  5 09:01:15 2025 GMT
        Subject: CN=be17bb468ec08c96daaff61a0fdf37eb270859ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8f:17:31:ca:4d:07:a6:c2:68:61:44:86:c6:
                    d7:fe:c5:d2:87:6e:05:51:de:22:7b:34:66:d9:96:
                    1a:55:ff:f7:80:57:1a:cc:1e:f9:7e:38:ee:fd:9e:
                    4a:63:3d:c3:e0:d5:f1:31:04:59:67:a7:2c:4e:d9:
                    fa:e3:af:60:2f:59:38:4b:67:83:72:f7:b2:fd:23:
                    5f:24:c3:13:ff:66:0f:b8:99:fd:cc:be:0e:af:72:
                    85:54:19:68:a9:b1:59:a7:b4:7d:3c:0b:1f:96:dc:
                    62:bc:21:47:cb:24:69:1d:fa:fe:b0:ac:3d:d1:d4:
                    76:c5:29:2b:9d:18:ba:96:85:fb:87:91:d7:45:66:
                    63:48:cb:b2:ef:7d:25:21:5a:5d:ab:68:f8:37:c8:
                    6b:d3:7a:39:40:58:1a:b3:d4:ba:1d:34:79:dc:6c:
                    01:1a:d9:45:7b:f8:e4:65:5c:52:13:f7:d7:f3:3b:
                    cc:b0:dc:00:e7:75:53:ce:5d:81:d7:d1:f3:ba:51:
                    ad:67:d1:f8:5f:bf:56:cc:d1:e9:8a:e6:fb:9b:e2:
                    7b:0f:5d:32:38:e6:c2:72:84:ed:a2:21:93:b4:e4:
                    cb:7e:5c:66:08:6c:78:1f:89:6d:fd:54:88:80:7e:
                    29:3a:c5:03:30:7d:b1:e7:a5:c8:fa:c8:3a:0e:28:
                    bd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:17:BB:46:8E:C0:8C:96:DA:AF:F6:1A:0F:DF:37:EB:27:08:59:EA
            X509v3 Authority Key Identifier:
                keyid:E2:63:6E:02:F1:55:4F:70:D9:71:A6:56:84:9C:01:BD:FF:13:8C:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mNuAvFVT3DZcaZWhJwBvf8TjOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:b5:5b:7c:87:00:73:2f:ae:f6:7f:0e:dc:93:b2:92:e1:98:
         1d:20:41:50:5b:be:87:a1:4c:fd:dd:ae:3f:e9:3e:11:28:df:
         1f:c0:f4:65:7f:07:7f:f5:91:94:9b:57:48:d5:19:b0:e6:3b:
         7f:7d:aa:e4:c1:0b:40:5f:b3:88:39:19:71:1b:ce:0e:af:b5:
         7f:39:be:40:c8:a5:7c:9a:6d:1c:5c:7c:ab:e5:cc:3d:7d:e2:
         95:75:16:97:b9:4f:31:73:e8:49:80:52:6a:41:11:c0:da:49:
         07:b4:3d:ff:23:05:03:90:82:0e:99:70:bc:7b:51:6b:aa:da:
         b5:98:93:4f:ed:38:50:a2:59:75:57:e7:13:f1:c2:94:51:34:
         15:ba:59:d1:cc:9f:16:d7:ad:53:76:81:68:57:d2:a6:8c:5c:
         ad:fc:df:43:d0:7e:d3:9e:f5:b9:93:49:70:91:65:86:85:0c:
         7b:67:36:60:22:f4:db:f1:8e:25:52:e3:86:9d:d8:d7:62:db:
         e9:e6:e8:b4:52:89:11:fb:57:ed:50:46:90:53:2c:95:cb:06:
         fd:f9:90:15:82:12:e0:f1:3e:0a:a9:53:0a:5a:74:e9:a1:35:
         4c:21:57:21:da:4c:6c:a8:ed:f0:76:32:18:41:e3:ed:b0:d2:
         fb:18:15:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:15:49 2025 by rpki-client