Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
File:                     4trBUISDJfD3JYcGT4q6N8X_N5A.mft (raw, json)
Hash identifier:          OMZFHCj/0ifjHHKUeIu9fhNmWJSh0lkHoEozcQEyT/Q=
Subject key identifier:   6E:F2:F7:62:EF:9E:81:5F:93:98:C9:6F:65:94:43:F0:48:9C:B6:37
Authority key identifier: E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90
Certificate issuer:       /CN=e2dac150848325f0f72587064f8aba37c5ff3790
Certificate serial:       01988B7D39FFB16F83A66687FA11E465671A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
Manifest number:          120A
Signing time:             Fri 08 Aug 2025 21:01:36 +0000
Manifest this update:     Fri 08 Aug 2025 21:01:36 +0000
Manifest next update:     Sat 09 Aug 2025 21:01:36 +0000
Files and hashes:         1: 1tSvH4RNSu7UD2qtT1EWm04Zry4.roa (hash: q0ebmJQY13NuleI4G7DugHjqGoG1SUVW7Ik+sEsmL8w=)
                          2: 4trBUISDJfD3JYcGT4q6N8X_N5A.crl (hash: LgiALxGHUNTJKmkR80MNQw8W5sCn+tvFZqgPNKRKnz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:7d:39:ff:b1:6f:83:a6:66:87:fa:11:e4:65:67:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2dac150848325f0f72587064f8aba37c5ff3790
        Validity
            Not Before: Aug  8 21:01:36 2025 GMT
            Not After : Aug  9 21:01:36 2025 GMT
        Subject: CN=6ef2f762ef9e815f9398c96f659443f0489cb637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:39:23:5e:1e:ac:fa:18:28:de:ab:30:72:e3:
                    24:24:82:97:8c:48:c8:75:8f:a8:6a:3d:63:7b:92:
                    66:9f:5a:60:71:8b:08:af:ad:d1:77:d7:f0:53:9c:
                    dd:11:e6:62:c5:dc:24:7f:38:d0:7a:e7:b8:af:ca:
                    68:61:6e:07:3e:13:06:5e:92:e4:13:35:09:17:38:
                    8b:80:09:40:09:a9:a9:f4:5a:61:ea:98:b3:94:f3:
                    0d:fd:0f:8c:27:71:6b:15:2d:ed:a1:42:52:60:6f:
                    59:62:04:85:64:e3:6e:0c:34:23:bc:0d:98:1c:7f:
                    4d:80:4f:be:ab:e6:d4:c7:b6:43:5c:ce:c3:9d:7e:
                    da:8b:7b:5c:a3:60:36:f1:1a:82:b9:bd:86:6b:76:
                    d0:f9:ec:88:77:04:7c:90:72:c6:48:92:7b:22:50:
                    74:82:57:7b:d5:9a:29:aa:4a:08:32:48:c1:80:6e:
                    29:cf:3d:e6:5a:85:05:d0:8f:f0:86:9b:a9:e8:bc:
                    e4:1c:b7:72:3e:79:8b:c2:42:86:0b:8f:1f:b0:7f:
                    fc:98:fa:94:9f:58:40:25:7c:eb:cd:d0:f9:88:7f:
                    d1:8f:81:f7:b8:d1:93:7b:4b:4a:3d:cf:29:b3:99:
                    5b:93:5b:1e:a4:cd:8f:a3:fb:25:ca:27:c4:f7:67:
                    f3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F2:F7:62:EF:9E:81:5F:93:98:C9:6F:65:94:43:F0:48:9C:B6:37
            X509v3 Authority Key Identifier:
                keyid:E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:4c:63:ac:aa:91:da:b7:a0:e5:06:81:7a:f6:ca:6f:dd:94:
         b9:cf:bb:fe:89:5a:52:0c:18:d1:e9:17:34:a7:17:3a:a4:ab:
         38:01:a1:1c:37:2b:27:73:ad:e1:72:14:d3:d9:b1:16:60:a8:
         96:bb:16:7a:05:d3:50:1c:34:c7:57:8c:9c:ab:77:0f:5d:ea:
         bb:91:56:5c:7c:01:29:8a:9c:93:26:57:dc:e8:3f:9d:6b:89:
         2e:a6:31:7c:4b:8d:05:53:0b:ec:a2:da:1a:10:42:13:1d:83:
         82:2d:af:6b:8b:3e:91:72:07:a8:93:d9:01:8f:ea:42:5e:e8:
         30:0f:98:8f:6f:4f:75:de:e6:6d:30:34:d9:2e:5d:e7:e6:90:
         24:c4:44:20:6e:4f:bb:c7:6f:86:b2:32:cd:f6:d5:15:ce:fc:
         78:a5:1d:a0:cc:43:2a:42:b4:01:2c:f5:86:f8:76:39:1d:9d:
         f9:c3:41:0b:d7:b5:4c:7a:68:b6:51:ee:89:e3:f0:24:6b:f2:
         0e:2c:88:76:0f:11:78:8d:e3:99:58:15:45:f8:a4:32:37:52:
         75:93:a9:fa:08:47:b1:17:3a:63:31:21:b9:dc:cd:c6:d6:37:
         1b:77:4e:0b:56:96:f7:ec:25:2c:f1:98:08:7b:e8:09:da:89:
         43:95:94:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:51:01 2025 by rpki-client