Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
File:                     4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft (raw, json)
Hash identifier:          O5fWjvBWKHvrwsLzafMEbhnoQeZKdnqe3VhDqPG2RYk=
Subject key identifier:   98:F1:82:67:74:5F:8E:E4:97:96:58:07:7A:29:48:99:E4:68:3B:55
Authority key identifier: E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
Certificate issuer:       /CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Certificate serial:       01987298EB57FE78BDE8B681292275880130
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
Manifest number:          0A43
Signing time:             Mon 04 Aug 2025 01:01:20 +0000
Manifest this update:     Mon 04 Aug 2025 01:01:20 +0000
Manifest next update:     Tue 05 Aug 2025 01:01:20 +0000
Files and hashes:         1: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl (hash: qS6FF2fnnciNW49Lj2KJO0zTxwTw7nfRidqZe1y8Nvw=)
                          2: p_9inuYDdp5y0a2pR7IT5FJWxkA.roa (hash: w2ZioVdUL3h+FykybnCF+ZnIIFFr6zWJMlYabfFURBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:98:eb:57:fe:78:bd:e8:b6:81:29:22:75:88:01:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
        Validity
            Not Before: Aug  4 01:01:20 2025 GMT
            Not After : Aug  5 01:01:20 2025 GMT
        Subject: CN=98f18267745f8ee4979658077a294899e4683b55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c5:46:01:2f:4d:0d:52:25:71:2f:37:77:69:
                    01:ed:1e:90:a4:d8:85:00:2f:d1:fc:50:3a:d0:6b:
                    92:62:2b:c5:02:e0:a0:fc:d2:bd:7a:ce:ea:58:8b:
                    2a:02:e7:97:d5:5c:56:a9:58:fa:c9:4d:00:2b:de:
                    33:4c:7a:db:2d:bd:e6:b5:ae:c0:d2:24:7c:60:3b:
                    59:2a:1e:5d:c4:7a:d2:e5:4b:d9:61:67:6b:3f:9a:
                    c3:bf:3d:68:2a:e6:ea:36:c3:de:b2:bd:5f:5c:3f:
                    cc:75:fe:05:53:f6:e5:bf:3f:fc:ce:9c:f2:59:5b:
                    ed:58:d3:33:b2:fd:12:7e:87:db:2a:97:22:e5:9e:
                    68:cb:bb:4c:80:88:83:19:f5:3e:22:50:f6:1d:89:
                    4b:7b:9d:3f:92:9b:15:89:74:c3:5d:c1:c6:9a:78:
                    65:aa:7c:df:b5:73:d3:5a:7d:4f:8e:9d:be:f4:bc:
                    f0:2d:a0:25:1b:9f:3d:0e:43:c2:8a:1c:57:83:7a:
                    b2:f7:3f:49:80:fb:c2:9f:c1:ea:cf:fc:89:40:63:
                    8c:f9:7e:1c:40:03:da:e8:37:8f:7e:c8:53:4f:cd:
                    63:10:dd:49:6e:55:fb:62:0e:16:a2:10:9d:4e:59:
                    58:b2:5c:88:44:58:28:c3:16:01:85:e5:bc:a0:50:
                    0a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F1:82:67:74:5F:8E:E4:97:96:58:07:7A:29:48:99:E4:68:3B:55
            X509v3 Authority Key Identifier:
                keyid:E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:a5:bd:af:58:84:2b:37:ca:38:fa:bd:6a:aa:e5:13:d2:2b:
         f5:50:d9:7f:45:4f:40:52:a5:6f:73:35:f6:a8:6a:62:b4:00:
         85:30:5d:8a:86:7b:15:ec:91:fc:f3:4b:b9:8c:d8:54:5f:50:
         93:95:22:c9:df:2f:23:2c:03:3f:61:dc:62:c8:f2:a0:1a:76:
         e5:68:55:70:cb:fe:a5:5f:b5:fa:9b:b4:5b:ef:44:bf:8c:d4:
         ce:ef:49:36:51:87:16:af:59:82:29:d1:03:49:76:c8:db:af:
         58:3a:fd:67:d8:0b:32:43:b4:2f:84:a3:c6:11:ef:17:a6:e3:
         47:8d:86:7b:4d:46:d1:97:e5:e9:4a:34:e0:9c:28:8e:f6:fe:
         9f:84:30:30:1d:8c:8e:7e:74:eb:03:75:ba:91:f8:75:dd:b4:
         62:e6:ed:5a:4f:fa:d0:97:fd:a2:22:8b:6c:f4:22:9c:ee:72:
         18:8b:15:22:5b:1c:49:de:54:cd:0b:0b:e4:18:5a:61:03:f0:
         f3:e6:8f:af:63:a7:a4:47:d3:e7:c2:03:c1:d6:1d:f5:27:d7:
         0a:c1:0e:df:2e:77:2d:da:ba:67:82:d6:37:f1:f3:df:95:94:
         3b:85:9a:21:f7:bc:2a:48:a8:1a:d6:ef:5a:76:28:4c:81:5d:
         3d:9e:29:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:39 2025 by rpki-client