Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
File:                     cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft (raw, json)
Hash identifier:          4G/5AW6wZxyE5BV9x0UaUeOdQYLX5fhn2tgSD9cCINg=
Subject key identifier:   40:88:1B:11:4B:84:FC:93:95:72:24:E9:88:81:2E:E4:63:CA:BA:63
Authority key identifier: 70:C1:23:09:EE:98:D4:42:EC:8A:76:50:12:7E:B0:E6:21:89:4D:F1
Certificate issuer:       /CN=70c12309ee98d442ec8a7650127eb0e621894df1
Certificate serial:       01988F222A0C8FFE412D998D553C4B7F2FE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
Manifest number:          1625
Signing time:             Sat 09 Aug 2025 14:00:37 +0000
Manifest this update:     Sat 09 Aug 2025 14:00:37 +0000
Manifest next update:     Sun 10 Aug 2025 14:00:37 +0000
Files and hashes:         1: 8Lh_EZUjo4d8T-WMsVc5_oid1Mo.roa (hash: cbyV06wf44D7SymSNRd5DeNmzcspVDJoD1qFeH8lxNU=)
                          2: cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl (hash: rbUgaUmnEU57HkTeKhL2NUBimeQvwD6Meram6fCrcYk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:22:2a:0c:8f:fe:41:2d:99:8d:55:3c:4b:7f:2f:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70c12309ee98d442ec8a7650127eb0e621894df1
        Validity
            Not Before: Aug  9 14:00:37 2025 GMT
            Not After : Aug 10 14:00:37 2025 GMT
        Subject: CN=40881b114b84fc93957224e988812ee463caba63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:22:7c:ee:44:d4:a7:bd:8b:dd:d4:c7:d0:30:
                    34:1e:93:0b:f8:11:b1:a2:ba:6c:be:74:bf:6a:eb:
                    f3:16:08:81:fa:96:36:af:84:b7:40:40:0f:a5:52:
                    0c:7e:96:bd:0d:fc:ec:a5:ac:51:d5:07:48:93:fd:
                    1d:60:1b:b9:3f:ef:25:df:be:e5:d8:99:9c:2e:ce:
                    cd:6e:d6:1e:86:72:29:e1:7c:62:13:a4:ef:00:fe:
                    28:60:b2:cb:1b:09:ea:98:e3:0d:62:f7:94:3f:56:
                    7e:3a:c0:0d:8e:13:c8:9b:c7:33:63:c7:5b:f8:8b:
                    d4:1a:e0:82:43:f3:b1:dd:69:10:8a:ec:47:a5:d8:
                    c0:c9:44:b5:8b:4d:ac:39:cb:83:86:48:5f:dc:1e:
                    f3:e1:80:fe:ac:08:fc:d3:9b:3c:94:ec:c8:d7:d3:
                    00:98:31:b1:05:c7:b3:3c:30:d3:29:21:86:0c:1c:
                    43:27:64:50:14:f9:bc:64:17:b0:eb:57:b5:80:5c:
                    ad:84:09:6d:27:0d:3d:6c:22:d0:3e:9d:44:0f:95:
                    93:88:1d:ef:3d:5d:31:dc:cc:30:16:ba:a2:e9:63:
                    7a:dc:38:c4:c5:3b:84:3d:b7:6f:5c:ad:4a:3a:33:
                    09:bc:98:b5:58:f2:ec:16:d2:ea:6e:3c:7e:f4:e1:
                    04:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:88:1B:11:4B:84:FC:93:95:72:24:E9:88:81:2E:E4:63:CA:BA:63
            X509v3 Authority Key Identifier:
                keyid:70:C1:23:09:EE:98:D4:42:EC:8A:76:50:12:7E:B0:E6:21:89:4D:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:15:1a:b0:ba:85:5c:1d:25:a5:8a:70:3e:4f:8d:e6:d1:2b:
         98:78:b4:a8:85:23:2b:0e:11:e9:50:07:e1:df:e0:38:14:bc:
         02:55:26:26:98:97:00:82:3f:24:71:e4:2e:1b:15:dc:f9:14:
         9f:3d:28:32:3b:4a:75:1b:fc:0f:72:84:1d:be:52:89:2c:b4:
         40:e3:aa:82:1e:a3:ad:c4:e2:39:ca:d8:d2:31:98:a0:01:9c:
         a7:00:0a:a9:56:0f:bb:d2:2a:a5:46:9a:a8:52:34:ef:9e:14:
         8a:2e:e4:0c:7f:f2:a7:41:08:a2:71:14:63:98:32:8b:6f:9e:
         ca:ec:8b:c6:fe:87:3e:65:4c:4c:24:f8:30:76:63:01:d2:d2:
         6f:82:c0:6e:5e:71:86:db:97:41:22:58:a9:fe:5f:9e:bb:72:
         c2:a3:30:fd:c2:cd:b5:13:29:a1:74:6b:ce:12:d0:48:ef:3d:
         2d:79:3d:c9:f9:4a:ea:d1:25:00:3f:4b:94:68:32:bb:e5:8e:
         2e:21:53:8b:f3:8b:da:db:52:ff:c1:f4:08:0c:66:cb:b8:cc:
         4a:85:5b:b7:b0:5b:6e:70:eb:c9:0b:78:60:7b:32:d6:87:f2:
         d2:f0:84:40:23:51:7e:16:3b:b0:64:ed:44:96:2a:e6:22:b1:
         2f:22:29:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:47:17 2025 by rpki-client