Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
File:                     4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft (raw, json)
Hash identifier:          1H9NYDDjY8eiPvZFaQ0aXP8ru4TS/djNtyd+r4PkTuU=
Subject key identifier:   FF:45:8D:4B:A9:F4:7E:68:7B:2B:DA:F3:68:EA:66:C0:D5:DD:E7:FE
Authority key identifier: E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
Certificate issuer:       /CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Certificate serial:       019874BE55E64D70537C15FE13D44971CFA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
Manifest number:          056F
Signing time:             Mon 04 Aug 2025 11:01:27 +0000
Manifest this update:     Mon 04 Aug 2025 11:01:27 +0000
Manifest next update:     Tue 05 Aug 2025 11:01:27 +0000
Files and hashes:         1: 4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl (hash: sUuGY7ySKOIXGXul+282G5tswSCMOE4xWxXug4dRlfA=)
                          2: 7bzu_LepARRevToiBMnO6X5yiVY.roa (hash: W9mX7XIEfvmcJR2UeQu48FRHpuApL2HCMC6pqhJI5pw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:be:55:e6:4d:70:53:7c:15:fe:13:d4:49:71:cf:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
        Validity
            Not Before: Aug  4 11:01:27 2025 GMT
            Not After : Aug  5 11:01:27 2025 GMT
        Subject: CN=ff458d4ba9f47e687b2bdaf368ea66c0d5dde7fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:66:11:73:f9:c8:8c:f1:a6:d4:98:7d:d2:12:
                    24:98:79:16:7a:59:7e:39:1b:d3:ab:e4:8b:09:2e:
                    ac:e3:b4:fe:0d:18:6f:81:58:db:23:93:ee:02:7d:
                    c0:69:a1:1e:de:7b:cb:1b:06:bd:31:e8:bb:d5:bc:
                    8e:cc:ba:a1:5a:1f:fd:dd:5e:65:b7:e1:1a:5c:92:
                    e5:3c:9c:d0:9a:53:53:2b:91:50:fe:28:52:13:c9:
                    1d:24:2a:6d:d9:ca:65:e0:99:ab:f7:69:84:89:4f:
                    c8:06:e5:3b:2b:58:c9:66:ac:d9:d2:fe:bc:d2:01:
                    f9:69:65:08:f7:4e:6a:6b:b2:e2:5a:78:ac:dc:09:
                    d0:2c:4f:b5:af:e0:b1:6f:56:a7:44:1d:bc:14:60:
                    c0:fc:2c:bc:7a:b1:c2:57:8f:93:68:b8:ba:b8:a6:
                    4b:25:5d:c0:2e:68:e6:99:f6:49:a7:76:45:be:ef:
                    5b:b2:44:dd:e6:14:a5:d1:1c:fb:ff:1f:0b:cc:9e:
                    b4:d3:e7:90:d9:27:0d:ae:03:10:7d:25:60:6b:6f:
                    a8:b5:14:a8:d0:4c:71:a5:74:cf:a7:dd:7a:3a:39:
                    99:ed:a7:8a:54:fe:79:f8:7b:e2:aa:70:71:28:21:
                    62:f6:43:27:14:7c:0b:26:2b:92:38:eb:ad:eb:4c:
                    14:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:45:8D:4B:A9:F4:7E:68:7B:2B:DA:F3:68:EA:66:C0:D5:DD:E7:FE
            X509v3 Authority Key Identifier:
                keyid:E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:c1:b0:01:44:d4:3c:dd:29:11:59:27:82:ab:5e:71:da:25:
         d1:a8:7f:45:54:f6:8f:c3:ff:09:88:07:59:f3:38:be:4e:3e:
         79:89:9a:d6:28:f7:06:2a:0e:bf:01:35:22:c4:58:ff:7b:ce:
         6f:88:5a:13:5d:b2:aa:8b:c2:9d:d5:72:ab:2b:02:3a:a3:71:
         25:04:91:04:59:7e:fa:ca:e1:01:a7:3a:bc:da:da:39:6d:1f:
         02:8f:9e:2c:9b:1e:f5:c7:1d:7e:de:11:44:c6:e7:ca:9a:79:
         77:aa:e2:b5:13:e0:e9:22:df:c7:15:78:e9:88:48:7c:7c:b3:
         dc:16:23:fd:65:b5:20:47:3b:3c:65:e8:9d:34:f8:54:4e:28:
         e8:1e:f5:a0:38:07:ef:b9:0b:61:df:0c:40:63:f3:22:44:cc:
         d5:dc:02:e5:9e:6b:d6:25:3f:86:22:8d:ea:9f:18:c0:d5:94:
         dd:a7:a7:9e:3e:3f:3a:dd:4a:ea:cf:bf:fe:5e:4a:bf:31:f8:
         b6:f4:98:2a:b7:67:da:4e:ee:72:07:7f:94:74:df:12:e7:f1:
         3c:16:01:32:00:d2:8a:66:76:79:b8:b6:6b:28:4b:c6:c4:5d:
         56:36:23:76:7f:1d:a8:12:36:2c:fc:19:2a:1f:5d:57:99:8b:
         27:95:91:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:00:41 2025 by rpki-client