Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
File:                     4crcikIcHyLx4pBMz9u87F2-GxE.mft (raw, json)
Hash identifier:          9Dw2hZP0kRg+7B8DJ6Uu/atYJvDxP1M84rybHn/lfTA=
Subject key identifier:   3E:D0:30:5F:FC:14:E1:76:F9:51:4A:98:1B:73:65:37:5D:CB:1A:6A
Authority key identifier: E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11
Certificate issuer:       /CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
Certificate serial:       0198971364A60C21642FB723867416494224
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
Manifest number:          1630
Signing time:             Mon 11 Aug 2025 03:01:27 +0000
Manifest this update:     Mon 11 Aug 2025 03:01:27 +0000
Manifest next update:     Tue 12 Aug 2025 03:01:27 +0000
Files and hashes:         1: 4crcikIcHyLx4pBMz9u87F2-GxE.crl (hash: 8cpBwyMP9R7DezM9B+SftR/OPZphmvkjGyf8bfPovUA=)
                          2: PjnPc92Q2V1HGAF2zMcKnf8EY3s.roa (hash: oJHQplo1wgSYzbHd7U3NabjFZf8l2Xl3wzFPd6jcOa8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:97:13:64:a6:0c:21:64:2f:b7:23:86:74:16:49:42:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
        Validity
            Not Before: Aug 11 03:01:27 2025 GMT
            Not After : Aug 12 03:01:27 2025 GMT
        Subject: CN=3ed0305ffc14e176f9514a981b7365375dcb1a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b1:5e:5b:68:77:73:dd:7e:2b:e5:70:25:e4:
                    04:3c:dc:50:88:24:fa:c9:b3:71:82:7d:16:6b:f7:
                    51:e5:c2:0d:45:a5:6b:56:93:0c:3f:32:a0:74:97:
                    ae:cf:0a:88:44:be:2f:a4:21:5a:0c:a7:c2:b1:57:
                    bf:6d:90:62:bf:36:b4:d6:45:1c:a7:8a:e8:da:fa:
                    b0:23:3d:ef:44:f9:6c:99:03:31:26:28:b8:d7:30:
                    7a:d8:4c:20:68:36:dd:83:16:64:82:13:ee:01:13:
                    f6:7e:e6:17:57:c4:03:7e:d5:6d:51:9f:9f:a0:19:
                    99:b5:59:3c:71:46:33:92:3b:a9:8b:a1:3d:e8:f9:
                    9c:51:45:4b:f8:18:88:16:83:52:c4:76:46:9b:db:
                    f6:de:f6:2c:63:5d:7b:c2:ff:48:2b:5f:24:5d:de:
                    bf:c4:70:5a:92:d0:5d:ac:58:5e:6a:59:75:0d:40:
                    f9:5a:bf:8e:54:99:50:d0:df:0a:3e:52:81:aa:a8:
                    32:37:fa:02:57:fb:47:1e:84:d3:39:29:20:48:15:
                    79:24:5f:4f:62:d4:29:1d:db:ba:7c:34:22:be:c5:
                    cc:ed:d8:61:14:79:ca:b9:af:f2:c6:77:60:95:a0:
                    28:b0:1e:80:f8:c3:83:ef:7d:37:e6:d5:85:69:f5:
                    c8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D0:30:5F:FC:14:E1:76:F9:51:4A:98:1B:73:65:37:5D:CB:1A:6A
            X509v3 Authority Key Identifier:
                keyid:E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:e1:ad:7f:d9:39:3e:1a:6c:d9:f4:14:f6:89:1f:b0:5e:88:
         9c:94:5f:fd:47:f9:28:39:dd:74:12:55:77:b0:f4:21:c0:9b:
         f7:45:57:2b:87:c5:3f:30:a8:ab:50:a0:bd:34:d4:aa:73:66:
         dd:28:79:b9:be:0d:2b:dd:c0:81:04:67:34:b5:b7:c7:f4:61:
         54:1c:f6:62:3c:f0:ee:fa:bb:5f:b5:be:47:28:63:b5:49:f7:
         6a:6d:dd:5c:ac:7f:44:bd:a4:01:f0:07:5e:fe:2a:ab:f6:52:
         e3:d9:05:79:80:05:a8:79:7a:6e:3e:e8:3e:aa:06:6e:06:31:
         cc:c0:8c:d8:62:a0:78:58:0d:74:39:b5:c7:01:5f:31:5f:73:
         f0:fd:da:73:1f:50:7e:d8:5e:65:6f:81:3d:78:d3:d5:95:11:
         62:8e:b2:93:f7:9b:00:a0:de:bb:5b:a5:6c:d9:16:df:df:79:
         cd:97:0d:c7:9c:59:62:14:3e:73:7b:fb:c4:60:89:4d:ff:be:
         7e:73:aa:9c:8c:12:dc:b2:67:fb:25:83:0a:c8:8f:d9:20:d6:
         08:8e:03:10:5c:67:60:75:5e:63:4b:c3:7c:ab:9b:89:34:41:
         c4:e4:fa:51:0a:be:e4:d3:84:20:9f:4d:f2:f9:59:ab:3f:64:
         0e:2c:6d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:31:09 2025 by rpki-client