Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
File:                     4_NSlr0mUtdWucSi8KzS_dp5CXw.mft (raw, json)
Hash identifier:          7KUMUiNCIQVfgyM/uxxoZpxxBB/MunyFu2L7DMI8DNk=
Subject key identifier:   49:F3:9F:55:E1:D0:31:C3:68:FA:26:DD:D1:3C:16:C7:27:D6:97:CC
Authority key identifier: E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C
Certificate issuer:       /CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c
Certificate serial:       0198892169E75142BDEFA0804F6A4C0DDDA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
Manifest number:          0514
Signing time:             Fri 08 Aug 2025 10:02:04 +0000
Manifest this update:     Fri 08 Aug 2025 10:02:04 +0000
Manifest next update:     Sat 09 Aug 2025 10:02:04 +0000
Files and hashes:         1: 4_NSlr0mUtdWucSi8KzS_dp5CXw.crl (hash: hwLIFOSwIiYCRE79ThAUX+9YhS9qcutC+iuRmrQZSgg=)
                          2: F1IHbwYI_Vw2biKY9qAxXXgkI1s.roa (hash: x6r7SsZ8T6EvaiAfOOYnrFS57CvR635mJl2CHWctk7k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 10:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:21:69:e7:51:42:bd:ef:a0:80:4f:6a:4c:0d:dd:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c
        Validity
            Not Before: Aug  8 10:02:04 2025 GMT
            Not After : Aug  9 10:02:04 2025 GMT
        Subject: CN=49f39f55e1d031c368fa26ddd13c16c727d697cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:34:64:08:ba:fa:9a:86:66:ff:81:4d:81:d6:
                    26:58:bb:53:9e:d3:10:bd:4b:da:04:0c:91:2c:ce:
                    bd:af:b4:97:0f:53:8c:4e:12:ff:16:51:8e:30:d7:
                    be:3f:fe:ca:b9:da:63:18:33:0f:0f:e9:88:5e:ba:
                    05:a6:ad:02:27:ed:60:85:c0:78:df:2f:52:25:da:
                    fd:eb:0b:e5:f5:62:36:8f:0f:a8:83:f1:8d:12:95:
                    97:54:ef:2b:83:25:ac:89:6e:1c:8a:0a:3b:d1:39:
                    63:d9:06:c7:87:df:f0:d6:d2:6e:93:94:c5:0d:d9:
                    45:d6:2a:b4:7a:be:ba:60:7b:ae:af:f2:4b:f5:2b:
                    41:56:3d:a6:30:45:ab:9f:8b:4e:c3:f9:68:53:7c:
                    68:bb:2b:2f:f0:f4:43:16:6f:07:23:aa:ce:17:d2:
                    b8:b7:10:b4:f3:ab:8a:65:9b:fd:c5:d6:9c:84:8b:
                    e1:6e:10:85:45:4f:ab:e0:db:9b:4c:d6:f2:a5:f8:
                    05:6f:c1:44:77:c8:57:85:2d:05:7b:5f:e7:4a:c1:
                    e8:a2:a1:10:66:70:9a:48:2d:99:a1:78:29:d2:3d:
                    dd:a4:5b:e5:11:a2:4d:00:bd:b9:75:38:e9:67:a5:
                    f8:ee:e3:76:81:23:3e:13:21:48:07:98:e0:11:58:
                    db:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F3:9F:55:E1:D0:31:C3:68:FA:26:DD:D1:3C:16:C7:27:D6:97:CC
            X509v3 Authority Key Identifier:
                keyid:E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:5c:c3:5f:d0:4e:1c:03:ed:cd:5f:3b:a4:27:39:6d:0d:73:
         e9:2b:a9:55:bd:97:e1:87:54:fb:dd:5b:c3:fd:e2:4a:5f:04:
         4b:c1:d5:49:23:cc:14:c6:f9:f3:f9:75:d6:fa:0b:04:af:2d:
         c6:ee:ee:19:86:4a:0e:77:22:91:d5:13:a2:f3:73:d6:b8:81:
         8c:a8:b6:73:f1:9f:7a:f3:2c:c5:7d:11:f9:cf:a3:6d:27:e0:
         cb:a0:60:66:ac:ab:48:44:2a:79:c2:55:c9:39:56:85:a2:e5:
         bb:74:f3:12:1f:7d:0f:8d:3d:6a:cc:33:4f:88:d6:e7:c6:28:
         dc:6e:e9:5a:4b:ae:9e:87:3f:6b:e4:e3:d2:78:16:12:42:d5:
         e3:3f:b3:7a:9c:7c:61:2b:14:02:ac:61:66:46:d3:7b:a7:30:
         4c:bc:24:fe:fa:d8:05:91:9d:f6:20:9c:22:d9:7e:22:ae:b4:
         f6:f9:41:3f:19:cf:74:21:eb:56:6e:22:7f:97:59:ec:83:d5:
         06:12:c1:5f:93:74:4b:48:9d:58:94:65:b1:8e:49:59:c0:99:
         d8:f9:2c:ee:6a:aa:1e:4f:64:b3:67:26:b1:a2:f4:29:05:ab:
         f7:89:41:42:66:98:5a:33:de:ed:7d:f2:7e:d0:09:34:d3:6a:
         8c:85:77:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiJIWnnUUK976CAT2pMDd2nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZjM1Mjk2YmQyNjUyZDc1NmI5YzRhMmYwYWNkMmZkZGE3
OTA5N2MwHhcNMjUwODA4MTAwMjA0WhcNMjUwODA5MTAwMjA0WjAzMTEwLwYDVQQD
Eyg0OWYzOWY1NWUxZDAzMWMzNjhmYTI2ZGRkMTNjMTZjNzI3ZDY5N2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jRkCLr6moZm/4FNgdYmWLtTntMQ
vUvaBAyRLM69r7SXD1OMThL/FlGOMNe+P/7KudpjGDMPD+mIXroFpq0CJ+1ghcB4
3y9SJdr96wvl9WI2jw+og/GNEpWXVO8rgyWsiW4cigo70Tlj2QbHh9/w1tJuk5TF
DdlF1iq0er66YHuur/JL9StBVj2mMEWrn4tOw/loU3xouysv8PRDFm8HI6rOF9K4
txC086uKZZv9xdachIvhbhCFRU+r4NubTNbypfgFb8FEd8hXhS0Fe1/nSsHooqEQ
ZnCaSC2ZoXgp0j3dpFvlEaJNAL25dTjpZ6X47uN2gSM+EyFIB5jgEVjb9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnzn1Xh0DHDaPom3dE8Fscn1pfMMB8GA1UdIwQY
MBaAFOPzUpa9JlLXVrnEovCs0v3aeQl8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNF9OU2xyMG1VdGRXdWNTaThLelNfZHA1Q1h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81NzQ5NjAtZDY4ZC00MDY5LTk1NmQt
MDU5MDhjNjNiNDVhLzEvNF9OU2xyMG1VdGRXdWNTaThLelNfZHA1Q1h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi81NzQ5NjAtZDY4ZC00MDY5LTk1NmQtMDU5MDhjNjNiNDVh
LzEvNF9OU2xyMG1VdGRXdWNTaThLelNfZHA1Q1h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgVzDX9BO
HAPtzV87pCc5bQ1z6SupVb2X4YdU+91bw/3iSl8ES8HVSSPMFMb58/l11voLBK8t
xu7uGYZKDncikdUTovNz1riBjKi2c/GfevMsxX0R+c+jbSfgy6BgZqyrSEQqecJV
yTlWhaLlu3TzEh99D409aswzT4jW58Yo3G7pWkuunoc/a+Tj0ngWEkLV4z+zepx8
YSsUAqxhZkbTe6cwTLwk/vrYBZGd9iCcItl+Iq609vlBPxnPdCHrVm4if5dZ7IPV
BhLBX5N0S0idWJRlsY5JWcCZ2Pks7mqqHk9ks2cmsaL0KQWr94lBQmaYWjPe7X3y
ftAJNNNqjIV3+g==
-----END CERTIFICATE-----
Generated at Fri Aug 8 13:05:37 2025 by rpki-client