Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
File:                     4iC8RpRTmhUCbsVarRmhK8IUwV8.mft (raw, json)
Hash identifier:          d4cWx/c4gPH4Te9Ru15Z7kXvUobMljuuq9amg1RMU64=
Subject key identifier:   A7:A4:65:F2:AD:B0:71:C5:54:6A:9B:3F:9F:FA:72:F2:5A:1F:85:55
Authority key identifier: E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F
Certificate issuer:       /CN=e220bc4694539a15026ec55aad19a12bc214c15f
Certificate serial:       019880F8FC814FA1FCA41542253B8AFB5D05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
Manifest number:          020E
Signing time:             Wed 06 Aug 2025 20:00:57 +0000
Manifest this update:     Wed 06 Aug 2025 20:00:57 +0000
Manifest next update:     Thu 07 Aug 2025 20:00:57 +0000
Files and hashes:         1: 4iC8RpRTmhUCbsVarRmhK8IUwV8.crl (hash: 7PAeg6PyuP28EnSLXfWxOIY3guvdVr5DYMsxX/SEi1g=)
                          2: TMvhro726OTEJJjht0Q0a4l2Qas.roa (hash: b1YiQQq/VY4mWfbYJYUD6kOtMlV+ZtaVCwcnWoNMuUw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:f8:fc:81:4f:a1:fc:a4:15:42:25:3b:8a:fb:5d:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e220bc4694539a15026ec55aad19a12bc214c15f
        Validity
            Not Before: Aug  6 20:00:57 2025 GMT
            Not After : Aug  7 20:00:57 2025 GMT
        Subject: CN=a7a465f2adb071c5546a9b3f9ffa72f25a1f8555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ef:7a:b5:18:36:d4:61:49:95:34:37:55:91:
                    ed:ad:25:32:59:48:fe:9c:fd:a1:c5:da:dc:19:f8:
                    9d:14:8c:87:2a:48:13:69:3a:25:d1:81:ff:44:86:
                    b7:a5:82:20:38:b2:2b:7f:a5:ce:30:b4:89:1d:53:
                    a2:de:07:d7:ae:59:0f:48:c7:34:f4:ff:11:d4:bd:
                    2b:23:f2:c5:38:5d:4b:3e:23:20:7b:d5:91:1e:47:
                    93:ac:49:09:07:f7:26:d6:09:fa:cf:1e:48:4a:1d:
                    dd:09:e1:c8:72:b9:9a:6f:1f:21:29:fc:ce:03:33:
                    22:50:95:39:ae:e8:94:a9:31:f0:f1:4a:66:3c:3a:
                    ca:d5:ac:c9:66:69:7a:65:3c:31:7b:ed:19:89:f8:
                    ab:e9:23:b0:44:07:5f:c8:4a:09:f5:41:e8:a6:c9:
                    7c:6f:c3:42:65:ca:b1:7a:e5:32:a8:8b:0f:cd:d5:
                    20:fc:1e:41:44:75:b6:64:4c:5f:1a:2f:a2:7e:36:
                    0f:a8:3d:80:ea:d4:94:e1:ac:e9:c4:cd:7f:20:9c:
                    a8:36:2c:50:32:62:b3:8a:43:2d:be:2e:46:cd:35:
                    f9:be:f7:d6:0d:f5:16:03:5e:b1:ce:10:aa:41:46:
                    89:6f:8c:a5:71:cf:0e:11:7f:e6:fc:bb:b7:35:27:
                    d1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A4:65:F2:AD:B0:71:C5:54:6A:9B:3F:9F:FA:72:F2:5A:1F:85:55
            X509v3 Authority Key Identifier:
                keyid:E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:e2:e6:b7:87:22:64:56:ce:f4:0a:81:b8:14:3f:82:28:fd:
         f7:42:a3:73:47:90:aa:60:c3:4f:c1:23:a5:19:90:1e:83:de:
         a3:74:7e:8a:89:6e:2b:e3:81:68:63:c4:89:7a:e6:3f:ee:b0:
         58:d8:78:22:8d:83:9b:e4:9f:67:53:f9:90:5e:3c:1d:8c:40:
         1d:34:d2:7d:82:aa:98:6b:53:60:51:20:a0:a6:60:c5:fe:44:
         38:c3:93:bc:18:be:f9:9f:11:61:5d:9e:de:ea:a2:b0:ed:9e:
         c6:b6:d3:1a:30:f1:58:f5:03:0a:86:e2:61:21:b8:35:5e:a8:
         f0:b9:ea:6d:f9:5f:5b:6b:aa:f4:94:cb:d9:c6:43:ee:36:1c:
         8d:84:06:4a:32:62:49:18:66:e8:16:eb:54:cc:ed:cc:60:02:
         02:90:0b:0b:29:06:23:1d:68:d2:d6:39:65:0d:57:e9:22:09:
         77:3d:72:fe:dc:d4:d4:52:32:5e:45:ff:a9:82:0b:5a:96:15:
         4b:2d:36:a1:36:53:43:49:ad:96:41:0d:31:ea:72:79:d5:65:
         fe:9f:27:15:cf:51:6f:f8:c0:69:64:a7:45:69:34:36:ff:21:
         9c:13:ae:16:0d:59:9c:bb:57:1c:fd:6f:4b:4b:9c:12:52:fe:
         b1:b5:06:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:59:54 2025 by rpki-client