Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
File:                     4uevc8B6V4KvJINOvdt0qciXxP8.mft (raw, json)
Hash identifier:          OgT/Du7FpJ9zFc2Q+yRM3skNR2zOFbN4T86yUTjlgKU=
Subject key identifier:   1D:C7:B2:DE:C8:88:4D:A7:B6:5D:42:8A:D7:96:53:60:42:54:9A:42
Authority key identifier: E2:E7:AF:73:C0:7A:57:82:AF:24:83:4E:BD:DB:74:A9:C8:97:C4:FF
Certificate issuer:       /CN=e2e7af73c07a5782af24834ebddb74a9c897c4ff
Certificate serial:       019A4DAA993C84204D4F0D4B1A51B3F1CD3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
Manifest number:          0367
Signing time:             Tue 04 Nov 2025 07:00:17 +0000
Manifest this update:     Tue 04 Nov 2025 07:00:17 +0000
Manifest next update:     Wed 05 Nov 2025 07:00:17 +0000
Files and hashes:         1: 4uevc8B6V4KvJINOvdt0qciXxP8.crl (hash: qN2sT8vJ9Fh2grtVA78nV00XpbRrBeZK7q6O+LSjusE=)
                          2: k33f_PMIoHn5FXjWs9o_hAagQPU.roa (hash: CQN6YPAgrfc6UnCswx4tiN7JfnanWIcuyP1dM7rzekg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:aa:99:3c:84:20:4d:4f:0d:4b:1a:51:b3:f1:cd:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e7af73c07a5782af24834ebddb74a9c897c4ff
        Validity
            Not Before: Nov  4 07:00:17 2025 GMT
            Not After : Nov  5 07:00:17 2025 GMT
        Subject: CN=1dc7b2dec8884da7b65d428ad796536042549a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:99:9f:f8:be:b1:b2:31:2b:1e:52:54:47:1e:
                    b6:66:0a:4b:8e:aa:be:ed:0f:7f:24:85:cb:29:34:
                    fe:a1:be:7f:4d:27:ce:00:6f:f6:33:56:de:bc:d5:
                    17:59:7c:e0:26:a4:2f:28:cf:60:74:c5:b4:88:cb:
                    8a:72:37:3d:d9:7f:51:6f:5c:0f:51:da:3a:9c:d8:
                    29:08:be:08:c5:fd:d0:99:54:33:f4:b2:65:0a:cd:
                    d9:33:93:f4:ec:d5:a2:91:18:2a:19:ca:ce:85:e4:
                    59:0f:3a:9f:ec:e4:77:7e:ff:b4:d8:83:3e:31:f7:
                    e6:8f:12:1f:b4:ff:15:e3:8f:42:81:bc:a2:98:5c:
                    b9:d1:41:0e:05:64:39:27:9a:41:0e:81:b5:de:f4:
                    b8:8c:d7:0f:2b:d0:04:02:aa:d3:89:d1:bb:82:71:
                    c3:28:5a:6e:44:c2:80:ae:d9:9a:ae:80:24:4b:62:
                    11:43:09:f8:90:25:a3:39:e8:57:dc:62:c9:e5:76:
                    0c:e9:61:51:17:96:4f:4e:6d:38:97:50:73:fc:40:
                    7f:8e:7a:ac:2b:cb:8f:d0:cd:37:8c:dd:3e:3c:53:
                    33:ef:3e:f7:75:de:77:0c:94:9f:40:9c:1e:17:22:
                    ce:c0:d2:77:b5:c5:37:a0:61:84:d7:6d:3d:94:33:
                    6d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C7:B2:DE:C8:88:4D:A7:B6:5D:42:8A:D7:96:53:60:42:54:9A:42
            X509v3 Authority Key Identifier:
                keyid:E2:E7:AF:73:C0:7A:57:82:AF:24:83:4E:BD:DB:74:A9:C8:97:C4:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:29:5f:dd:71:0f:a3:f2:6a:ef:33:62:9e:3c:53:fa:8e:24:
         70:e4:e1:3e:fb:12:10:8b:17:9e:29:ee:49:80:89:65:a4:51:
         8e:83:65:8e:38:b5:9a:86:ea:a4:92:fb:bc:24:a6:e7:16:d3:
         43:71:b4:71:ae:7f:0b:33:a6:b1:13:cb:5b:45:9d:4d:c3:3e:
         ff:4b:f3:29:fe:6e:fe:8c:8c:e8:60:d4:a8:11:b1:d8:c1:2d:
         d3:08:3d:53:de:5f:97:7e:49:51:e1:fb:de:bf:91:a0:b0:94:
         2b:4a:29:16:e1:b5:eb:c4:18:3c:da:e0:71:39:22:d4:e6:60:
         bf:90:61:01:3c:41:b2:36:85:dc:d2:57:aa:29:31:0e:07:ca:
         8c:92:46:cd:8c:b2:80:b8:39:d0:25:da:d3:08:53:90:01:f9:
         b8:21:d3:43:18:7f:fe:c8:80:52:30:8a:ea:e8:5d:a1:12:b7:
         b4:4f:79:ba:15:ad:08:9f:55:3e:58:ef:95:63:5a:ce:68:8f:
         11:92:d9:7a:6d:db:e1:63:ce:82:c0:9f:9f:27:36:23:1e:d0:
         0d:03:39:f0:64:a6:85:3a:94:43:20:3e:42:ea:d1:9b:24:16:
         28:90:61:92:1f:e4:e3:d4:51:e3:44:f8:8b:14:57:45:81:55:
         5a:8d:d9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:21 2025 by rpki-client