Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
File:                     4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft (raw, json)
Hash identifier:          rQGW3mlRYM0KVZf6h0XnfHmDw+vgBAgaUdby6r5NbLw=
Subject key identifier:   8B:C9:9B:A5:36:8C:EE:38:F7:4B:34:BD:9B:38:6C:2B:11:E0:58:1C
Authority key identifier: E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44
Certificate issuer:       /CN=e1d3c9af6cf52b8a390b58f00b14a88710336944
Certificate serial:       019895251BE66686E45581EE095678897B90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
Manifest number:          10A2
Signing time:             Sun 10 Aug 2025 18:01:33 +0000
Manifest this update:     Sun 10 Aug 2025 18:01:33 +0000
Manifest next update:     Mon 11 Aug 2025 18:01:33 +0000
Files and hashes:         1: 4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl (hash: rbc54lJTQ8IV6qTAkG2yS2JUCwDmKssQ1qGBB/wD7FY=)
                          2: EIPXP4SEmPbV8aQA2-5L0Ta_OhQ.roa (hash: YwImDgJjuNmka436Jqvx4IjnyNxYmhqYhI9Yd1gMUo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 18:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:95:25:1b:e6:66:86:e4:55:81:ee:09:56:78:89:7b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1d3c9af6cf52b8a390b58f00b14a88710336944
        Validity
            Not Before: Aug 10 18:01:33 2025 GMT
            Not After : Aug 11 18:01:33 2025 GMT
        Subject: CN=8bc99ba5368cee38f74b34bd9b386c2b11e0581c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f2:43:21:39:91:f0:9b:ed:37:c5:f5:14:2d:
                    7c:bd:a0:84:7f:55:bf:a9:bd:3f:de:c4:69:46:22:
                    ec:f0:31:1f:56:37:d8:e8:aa:d9:c4:bc:6a:37:dd:
                    7e:ec:13:28:6e:2f:bd:ae:c2:ef:c3:18:dd:19:8d:
                    07:f5:10:7b:ae:2d:bf:21:24:6b:f7:52:f7:08:0a:
                    3f:69:f0:b1:92:73:f8:ee:cd:75:20:e0:88:5f:47:
                    b3:74:51:9f:68:15:0f:6d:a2:2e:63:4e:34:02:c3:
                    d2:fb:6f:03:77:ba:f2:05:81:ca:6d:d6:cc:4c:a8:
                    b5:3a:7a:03:0f:2b:dd:31:b2:a5:80:a3:81:34:f2:
                    71:65:86:b2:b4:99:02:8d:94:68:02:4c:33:a9:c9:
                    61:fc:77:81:ee:97:5f:94:9a:52:da:e8:73:a7:0f:
                    a3:ca:ba:76:25:56:ca:77:65:19:8c:c8:d5:fc:c5:
                    f1:40:c7:01:9f:28:96:24:13:ee:6c:25:0e:f2:73:
                    b0:68:f0:4a:ea:34:1f:ab:31:70:dd:ee:27:6e:23:
                    9d:b9:c7:7b:fa:9a:31:59:56:f9:ac:fc:ac:3a:04:
                    8d:64:9b:d1:c1:7e:81:41:2c:1a:a5:47:d9:ab:2d:
                    51:0e:33:3f:19:a4:2f:1b:bb:69:86:40:48:34:cc:
                    18:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C9:9B:A5:36:8C:EE:38:F7:4B:34:BD:9B:38:6C:2B:11:E0:58:1C
            X509v3 Authority Key Identifier:
                keyid:E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:6d:70:07:a8:ca:d0:91:84:90:8e:07:e5:12:18:62:fe:86:
         92:84:ab:25:2d:ef:f1:58:05:33:52:81:32:8d:3d:e2:86:97:
         d3:01:85:98:02:9d:0e:1b:bf:6f:fa:eb:ea:aa:c2:fd:60:a6:
         71:7d:77:bb:da:d6:21:58:e5:ca:d3:91:66:82:1c:bb:d1:02:
         57:8b:aa:9f:49:ba:92:54:81:2c:54:fb:b1:01:1e:c4:95:a1:
         fa:17:7c:4d:d6:05:5d:8f:e9:e9:d4:45:11:a1:45:a0:6d:34:
         ef:6a:a3:63:93:9e:a6:21:f4:57:75:ac:e6:61:7a:f3:00:0d:
         1d:4b:b1:89:9d:08:93:07:8c:22:ee:92:4c:b6:b7:71:64:f9:
         c2:ed:46:f9:a2:04:b3:58:3d:fa:18:b7:f1:00:9b:6a:b1:98:
         cd:e9:b9:f4:90:63:df:ae:56:eb:da:09:a3:58:89:d7:69:66:
         4c:31:5d:ef:d3:8c:4f:83:eb:1c:43:0d:89:ed:82:bd:1f:7a:
         f4:fc:27:b2:d6:18:e4:65:9e:f1:37:2b:9b:82:7c:b2:df:8b:
         44:04:b4:f1:be:00:10:8e:89:3e:be:91:d0:14:68:54:07:0a:
         28:75:90:18:58:9e:d2:15:5c:b6:fd:55:d2:73:ef:a5:70:a0:
         89:e5:5e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:08:29 2025 by rpki-client