Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
File:                     4pIlILZ7Gr98QDr6IjVTQyYnIog.mft (raw, json)
Hash identifier:          iO9vZJZsa4tc0Hxv7CfeE93779wL6WWhTLBKzOAMf6Q=
Subject key identifier:   4D:17:EB:58:3B:D3:0E:84:3A:19:FB:59:0B:DE:18:70:D2:AD:FE:12
Authority key identifier: E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88
Certificate issuer:       /CN=e2922520b67b1abf7c403afa2235534326272288
Certificate serial:       019896DC1D721082EE1D0FC6912B9661467F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
Manifest number:          1444
Signing time:             Mon 11 Aug 2025 02:01:04 +0000
Manifest this update:     Mon 11 Aug 2025 02:01:04 +0000
Manifest next update:     Tue 12 Aug 2025 02:01:04 +0000
Files and hashes:         1: 4pIlILZ7Gr98QDr6IjVTQyYnIog.crl (hash: umRhDUlRb6l/Xv3amDyQZXUOlssXe2PNr5ZrotD7CCU=)
                          2: sraNB3Tq9hs6fPR3orHTINDfXdM.roa (hash: 5fJUa4xuxE1H1Nc9qB8vUJm4+A17xrBmdzBKBxK5rEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:dc:1d:72:10:82:ee:1d:0f:c6:91:2b:96:61:46:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2922520b67b1abf7c403afa2235534326272288
        Validity
            Not Before: Aug 11 02:01:04 2025 GMT
            Not After : Aug 12 02:01:04 2025 GMT
        Subject: CN=4d17eb583bd30e843a19fb590bde1870d2adfe12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d5:77:da:fe:4d:e9:92:e6:d9:59:00:19:e4:
                    88:02:3b:6a:49:82:20:fa:27:3f:71:f1:54:e7:c8:
                    30:b4:78:b2:ec:ee:1a:4e:b6:54:17:18:5d:72:e0:
                    40:c1:ef:b4:dc:8c:16:08:46:d6:fb:cf:9b:82:61:
                    14:5e:e2:48:f1:ce:0d:f8:0d:8a:ce:72:1d:f3:8a:
                    0a:a0:57:cf:61:b0:8e:29:ff:4d:39:55:77:3e:9f:
                    0d:96:d0:13:f9:43:2d:2d:3f:98:03:58:3a:62:9a:
                    7d:9d:c8:2a:df:21:7f:52:f0:f1:b5:49:db:fc:7c:
                    aa:71:19:00:d0:92:50:a8:4a:3a:22:21:a2:90:05:
                    87:94:2e:a9:53:ed:9e:ae:20:85:53:c0:7f:8e:bb:
                    6a:c5:59:89:e0:49:35:de:ef:c6:ef:e7:99:ea:3a:
                    bb:fe:4e:6b:63:f6:be:d8:89:13:db:fe:d6:59:a9:
                    e0:eb:c0:46:d1:2e:21:17:0d:96:89:53:b2:e8:42:
                    87:4d:33:57:f6:3b:74:2a:84:d9:b9:9c:db:8e:19:
                    91:18:ba:41:50:6e:cb:34:67:99:69:e9:bf:bb:73:
                    15:2f:72:8c:2a:87:17:c3:8d:f7:11:a4:46:d7:27:
                    1c:55:4e:18:60:f8:64:67:2d:a2:ce:ed:d2:3b:e3:
                    ab:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:17:EB:58:3B:D3:0E:84:3A:19:FB:59:0B:DE:18:70:D2:AD:FE:12
            X509v3 Authority Key Identifier:
                keyid:E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:1e:7f:b6:2d:c9:61:25:42:ff:d1:34:78:9a:12:68:f9:68:
         c5:2c:17:1e:47:48:9d:cb:13:ea:76:56:5b:01:68:d1:92:da:
         c8:4c:b5:81:6e:ac:69:fb:1b:f0:3d:94:28:54:a0:08:19:e0:
         23:33:94:40:ec:79:5c:68:e5:5b:af:6e:6c:f0:ea:b7:47:be:
         6e:65:91:56:63:32:6b:24:f1:14:b2:ad:5d:96:24:5e:e8:17:
         4f:ca:c3:1c:85:1b:df:93:aa:64:5a:7f:c5:07:5e:7a:84:d4:
         62:22:17:d9:f2:f5:81:32:5a:65:b9:cb:d0:35:77:b5:ef:de:
         ff:49:c8:f6:a6:06:da:05:3e:97:9d:1b:42:73:e2:5e:54:df:
         5e:13:da:48:f4:f7:cc:fb:5f:46:2c:02:9b:be:47:7f:b1:cb:
         a4:96:6a:f7:32:2b:82:4f:24:e5:ab:9b:04:31:6b:93:fa:99:
         aa:7a:d1:55:0d:40:ac:f2:94:50:d6:aa:58:92:a4:f0:42:39:
         a3:e8:aa:d2:4b:16:a0:1b:c4:8d:24:00:34:f1:7c:91:0b:aa:
         20:e5:36:2b:62:fe:fd:55:df:63:d7:7b:45:15:3a:66:40:43:
         bc:a5:b8:40:70:7b:76:73:4f:85:ce:5c:22:70:10:48:92:00:
         a7:ce:4e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:08:17 2025 by rpki-client