Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft
File:                     4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft (raw, json)
Hash identifier:          Bg8K5PQodD7lDY9belOkNcARdSW7qF8aVKVv5XHMhfI=
Subject key identifier:   FC:C6:DF:A0:B3:70:56:17:BC:A4:6D:83:BF:B7:C5:35:9C:6D:7B:BA
Authority key identifier: E1:1A:A9:28:50:EB:FE:64:8A:D3:D8:9A:DD:8E:73:6E:C3:67:5A:11
Certificate issuer:       /CN=e11aa92850ebfe648ad3d89add8e736ec3675a11
Certificate serial:       01988DD87D9837732CA7BCE10F47E53DD9DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft
Manifest number:          0C4A
Signing time:             Sat 09 Aug 2025 08:00:32 +0000
Manifest this update:     Sat 09 Aug 2025 08:00:32 +0000
Manifest next update:     Sun 10 Aug 2025 08:00:32 +0000
Files and hashes:         1: 4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl (hash: QxAHIwuQ2cG8/WzPz9KHwZjAEAe+xmn8cTA0RW5if1w=)
                          2: CCavKhP7AEj7Vk_SGWe1jvcCRyg.roa (hash: ErCh+iOQog12EmBkEQOKm5CnYVqmDx85/Bq5syDjRtk=)
                          3: _UE4NiO0pfWfFFAbb7iwrwRdv6s.roa (hash: Nt6mUmB/b8Tz/UtmdUFBFCY+JhXJPjG/PVld3xk2bu0=)
                          4: hNzhsJdSXiT8XXk4l8WcnUMry00.roa (hash: y9TrG3MRhc+YaHxz1FlPh4FWDR2QP4R98mul7cPcOWM=)
                          5: sJD4QxX177UEmI36HO3Czbd6lZo.roa (hash: eB1LP6A5y8Zxb2lEo5Jx2JKKRWjFRnxR3igeTvfMlBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8d:d8:7d:98:37:73:2c:a7:bc:e1:0f:47:e5:3d:d9:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e11aa92850ebfe648ad3d89add8e736ec3675a11
        Validity
            Not Before: Aug  9 08:00:32 2025 GMT
            Not After : Aug 10 08:00:32 2025 GMT
        Subject: CN=fcc6dfa0b3705617bca46d83bfb7c5359c6d7bba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:40:27:04:98:e5:8c:13:d6:e4:9b:73:c4:6d:
                    1f:b2:77:68:ee:c7:d4:08:6d:df:0c:74:8d:8b:fd:
                    7f:ef:ff:fa:91:52:1c:33:73:be:8c:76:f9:27:58:
                    53:8a:24:04:9e:2d:a3:84:0f:e9:24:2a:58:d8:f2:
                    01:79:6d:45:4b:4b:10:71:77:d1:66:0c:e1:65:33:
                    59:bc:8d:f2:72:2e:2b:e1:84:af:13:b2:57:94:16:
                    39:62:98:22:64:8c:37:c3:f7:85:5e:6a:d1:5c:4d:
                    c8:d3:89:d8:d6:20:13:7f:80:06:b5:cd:bf:5b:b8:
                    11:3c:13:01:62:b3:68:14:23:6a:d4:c4:65:33:cb:
                    5a:e0:c5:6e:6f:e2:05:84:d0:70:be:98:8c:e4:30:
                    5f:6f:45:8c:aa:b0:84:14:75:1b:40:53:ca:8a:77:
                    b1:61:15:a7:50:e5:7a:92:0c:c4:83:51:7f:a2:4b:
                    ab:e3:54:18:59:aa:a7:65:1b:91:9e:fc:79:96:22:
                    da:99:9d:93:e8:55:ab:dd:09:be:fd:62:f0:07:e5:
                    ac:75:1b:e2:b3:60:83:4b:73:42:11:3c:86:5f:96:
                    cf:c2:8c:c6:c5:91:81:d2:e3:63:73:2e:25:22:d5:
                    60:c1:f1:2c:8e:10:82:77:39:ed:87:dd:a9:f1:9d:
                    9d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C6:DF:A0:B3:70:56:17:BC:A4:6D:83:BF:B7:C5:35:9C:6D:7B:BA
            X509v3 Authority Key Identifier:
                keyid:E1:1A:A9:28:50:EB:FE:64:8A:D3:D8:9A:DD:8E:73:6E:C3:67:5A:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:be:d6:2e:53:af:14:c7:ba:f9:56:ff:fa:e9:1b:17:60:c7:
         5b:7d:50:59:c0:c0:a5:1b:5f:3f:be:d9:f2:6e:b2:7b:ab:c5:
         de:52:dc:19:4e:22:38:ed:f8:ae:fc:b4:c1:4c:40:7f:9a:10:
         5b:6b:b5:11:23:ed:11:ec:9a:57:a1:3e:af:c7:fc:c1:43:4f:
         2e:8c:ea:c9:85:00:63:0f:d2:87:7e:f7:e1:5d:03:3e:1a:99:
         bb:b0:45:aa:80:ee:7a:34:cc:19:bc:73:98:28:5c:da:d9:ce:
         dd:05:29:17:55:dc:d3:7a:fc:0e:e4:52:f5:2c:0c:60:23:7f:
         99:7b:05:cb:a8:54:14:0b:f3:d5:75:6f:50:d9:0c:f8:af:27:
         38:8f:fd:62:4f:64:59:85:2f:af:1b:ab:4b:3f:6b:be:d8:19:
         c9:96:77:37:49:9a:43:3e:18:cd:ff:c2:54:c4:31:94:73:ac:
         38:90:46:b5:62:25:d9:f7:46:0b:a1:29:7c:49:c1:f7:d0:d8:
         a7:47:89:4e:d1:4b:90:ac:27:2c:61:45:11:ec:3d:55:4b:e3:
         a9:2a:98:36:2c:02:ec:43:84:14:92:a5:6a:bd:3b:05:f0:f4:
         a1:74:bf:35:96:3b:71:91:9e:38:6d:aa:83:3d:78:d2:d8:fd:
         42:00:92:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:49:30 2025 by rpki-client