Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft
File:                     4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft (raw, json)
Hash identifier:          CIa6uX9bWa2wgxusRgz9QeSEmwwNnZVT9Urib57yeyc=
Subject key identifier:   E0:52:62:F4:20:8C:8D:84:FD:14:CA:4B:F7:F1:64:D5:5C:5F:43:4A
Authority key identifier: E2:3A:74:63:0A:84:24:CC:D5:F5:BB:0F:60:22:08:94:52:7D:73:2C
Certificate issuer:       /CN=e23a74630a8424ccd5f5bb0f60220894527d732c
Certificate serial:       019894119610B394CB645EA76DAEF4012B9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft
Manifest number:          10BF
Signing time:             Sun 10 Aug 2025 13:00:37 +0000
Manifest this update:     Sun 10 Aug 2025 13:00:37 +0000
Manifest next update:     Mon 11 Aug 2025 13:00:37 +0000
Files and hashes:         1: 4jp0YwqEJMzV9bsPYCIIlFJ9cyw.crl (hash: 7icdV3jnbqgWOClLnbH4qRJVvzHm5o6BxP6Yqz+ga8k=)
                          2: MQ8RZspaKkEig8cCCF7-zec3ZHI.roa (hash: TWPrc2azmEsVYvz4zvYsbEnxkist2uhLkvy3lSkFipY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 13:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:94:11:96:10:b3:94:cb:64:5e:a7:6d:ae:f4:01:2b:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e23a74630a8424ccd5f5bb0f60220894527d732c
        Validity
            Not Before: Aug 10 13:00:37 2025 GMT
            Not After : Aug 11 13:00:37 2025 GMT
        Subject: CN=e05262f4208c8d84fd14ca4bf7f164d55c5f434a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cf:31:95:f7:c9:b2:34:a7:4c:81:25:ee:0f:
                    01:1b:d2:ee:b4:08:81:5e:bc:d3:a3:fb:1f:6a:61:
                    04:3f:c0:8c:e7:7c:38:60:1f:df:51:69:6c:39:b8:
                    d1:1a:c2:82:5b:ee:b7:e5:dc:cf:b7:d1:4f:6a:e6:
                    ad:bd:de:a3:a6:53:5e:ed:19:fb:ba:58:8e:48:d8:
                    bf:66:f2:c6:20:f4:ac:c7:95:7e:c5:f0:96:5c:20:
                    cc:c0:2f:ca:59:1f:fb:01:86:22:47:97:8a:73:1a:
                    21:03:d7:94:7c:a3:7d:63:02:d0:5e:eb:f4:dd:62:
                    13:6c:21:1d:80:e5:77:e6:a9:af:72:9e:ac:a2:b3:
                    9f:fd:7f:83:5d:10:9d:1f:71:25:68:60:c9:94:c3:
                    bc:74:6e:be:89:73:7a:7e:f5:ea:f4:17:42:85:af:
                    a2:bd:32:db:7b:08:d0:01:6f:d4:57:1f:a5:93:09:
                    a9:92:3a:56:c7:bd:4d:df:c8:7e:03:58:6f:15:91:
                    80:78:31:f0:bb:54:ee:45:59:9f:12:d3:d5:94:34:
                    9c:15:40:ae:84:45:56:57:ad:63:c1:84:e9:95:9a:
                    9d:77:c9:f4:65:4e:e5:98:2d:78:b3:6c:27:39:39:
                    92:c9:fe:c1:56:7b:71:c7:2c:73:07:ac:04:1a:7a:
                    18:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:52:62:F4:20:8C:8D:84:FD:14:CA:4B:F7:F1:64:D5:5C:5F:43:4A
            X509v3 Authority Key Identifier:
                keyid:E2:3A:74:63:0A:84:24:CC:D5:F5:BB:0F:60:22:08:94:52:7D:73:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:1a:55:22:b7:4c:05:68:68:3e:ac:27:6e:ea:d9:fa:98:27:
         e9:9b:33:5e:f8:ac:47:4c:54:82:5c:6a:2d:58:76:52:92:77:
         a3:5f:9c:b9:a4:5d:36:3d:32:66:38:69:dd:d7:c5:d8:9a:0c:
         cc:fd:f2:85:32:ab:37:f7:87:7f:1e:16:09:88:bb:99:77:0d:
         9b:bb:d1:fe:92:b9:43:84:91:fa:c1:4a:12:47:ca:df:0b:d7:
         95:0b:1c:4e:84:32:f6:74:de:be:00:60:ec:2b:b8:42:6a:e0:
         a9:19:b7:88:62:6a:46:44:11:cf:de:da:44:42:f7:80:c7:28:
         4a:ff:a7:fa:a1:2f:2e:69:37:e4:a3:02:c8:12:59:b0:5a:33:
         2c:9f:1c:36:22:ee:32:6c:e8:72:01:5d:3b:1a:05:ca:0e:19:
         97:00:78:eb:73:7a:68:94:4c:80:4f:6a:8d:35:b8:2e:87:8e:
         25:97:c3:46:bb:3e:85:a8:42:8f:4c:30:82:1e:50:e6:6e:51:
         12:b4:07:50:5a:24:a5:a0:41:de:cf:45:c1:cd:72:6e:6b:15:
         a4:ff:bc:0e:8f:b1:e1:7b:a0:76:71:f9:fa:d4:0c:70:ad:6b:
         63:ae:e8:78:16:b4:3e:a8:a3:00:11:f6:13:25:cd:bc:db:63:
         5a:ab:c6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:02:32 2025 by rpki-client