Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
File:                     4kycUM9OLawF4fBDKCJOIKRgXXc.mft (raw, json)
Hash identifier:          0ZLzca0kAsdRD6YLbFXWk5VAufYT6uW7IWwlYBzdyMQ=
Subject key identifier:   18:C7:59:68:CA:DA:C9:CD:4F:D9:AA:04:01:16:34:6D:3C:68:01:E9
Authority key identifier: E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
Certificate issuer:       /CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Certificate serial:       019893A389560AA27A265AD0DEBDF34670F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
Manifest number:          0D0F
Signing time:             Sun 10 Aug 2025 11:00:24 +0000
Manifest this update:     Sun 10 Aug 2025 11:00:24 +0000
Manifest next update:     Mon 11 Aug 2025 11:00:24 +0000
Files and hashes:         1: 4kycUM9OLawF4fBDKCJOIKRgXXc.crl (hash: EQl533O978Ah+YzLDcyFiozI+PWr/P/mnPm0lBeKNGA=)
                          2: Q3-HdEPCyjZHl-Sg4_PuJRYIuT8.roa (hash: XEPQxkckVuIQ5rwgxJmegps237sKjQ4AEXFUBlmNa1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:a3:89:56:0a:a2:7a:26:5a:d0:de:bd:f3:46:70:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
        Validity
            Not Before: Aug 10 11:00:24 2025 GMT
            Not After : Aug 11 11:00:24 2025 GMT
        Subject: CN=18c75968cadac9cd4fd9aa040116346d3c6801e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:38:be:6c:7c:76:cd:8d:28:2e:cc:b4:92:26:
                    fe:51:20:cf:e9:5a:10:21:d9:04:b8:33:ff:85:ea:
                    f2:8c:2e:46:4d:bb:fc:bc:95:11:eb:d9:70:cb:6d:
                    ba:29:48:f2:7d:4d:4e:41:ad:17:d2:dc:d0:12:1d:
                    d1:95:3d:dc:4c:c9:ad:c1:19:d8:cb:a0:54:ee:aa:
                    43:ff:f9:bc:14:ce:eb:87:32:9f:02:cd:3f:0f:81:
                    7e:43:54:3e:fd:52:ae:de:da:8f:2f:8f:78:23:1b:
                    92:00:b0:a0:58:b8:fa:f1:d8:5d:b0:af:af:4b:54:
                    42:38:78:ca:9d:45:66:be:ad:1b:d2:ef:25:fe:35:
                    a6:f6:dc:8a:50:a0:e2:0e:b3:ad:27:5c:95:0f:83:
                    20:76:65:60:44:67:98:47:bf:84:02:8a:1d:3d:22:
                    f1:cb:77:65:a8:dc:89:b9:f0:53:5d:93:cf:6d:b6:
                    da:08:65:ed:4e:1d:5a:16:a0:a2:74:00:a8:45:5d:
                    76:24:17:b3:01:aa:fc:59:de:b3:7f:58:17:7b:55:
                    e3:4d:c6:b4:bf:81:b6:40:a1:11:a2:74:47:b5:c6:
                    da:bb:15:96:06:77:01:eb:69:5c:3c:0a:4c:42:cc:
                    cc:f5:01:28:c4:0c:68:28:d3:2c:2c:1d:f5:81:1e:
                    04:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C7:59:68:CA:DA:C9:CD:4F:D9:AA:04:01:16:34:6D:3C:68:01:E9
            X509v3 Authority Key Identifier:
                keyid:E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:be:cd:29:c8:21:0b:b5:1d:b2:5d:88:1c:f8:39:58:92:53:
         05:2b:67:be:f3:02:42:bd:6c:d8:14:61:94:d6:4b:27:74:8f:
         51:ad:92:0a:ff:c0:47:91:18:51:ba:b4:d1:de:af:b6:e8:ef:
         e6:91:a5:5e:9d:d0:b4:0a:67:75:22:25:8a:ee:94:51:a3:49:
         26:8e:79:8c:43:6e:5c:37:10:d3:21:d5:c3:82:c8:89:93:36:
         f4:b1:34:af:a3:d7:81:ef:84:a6:78:fa:89:d7:01:fe:4d:5b:
         69:c5:c0:a6:93:df:8a:48:2d:15:df:37:e2:4f:1e:4d:a4:c7:
         cb:3d:73:1c:05:b4:64:6d:de:b1:6b:0c:d6:33:6b:22:b2:52:
         f6:78:bc:e6:33:93:13:79:aa:cc:e2:62:cc:81:00:00:b0:4c:
         d6:c4:e0:73:85:57:3d:5d:ba:5d:ad:70:b3:71:7c:8f:8c:fe:
         88:70:3c:12:17:ed:a0:6a:cc:1d:d0:b1:92:a8:bf:be:ba:3a:
         f0:47:ca:0b:63:35:77:e6:20:fe:c8:33:5c:46:9e:db:95:3a:
         b8:78:a6:3e:60:51:6e:70:93:c9:20:ed:08:9e:5f:7c:3c:c6:
         99:29:f0:14:62:6a:5e:4a:b9:af:9e:39:a4:1c:42:4b:7b:7c:
         31:15:46:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:48:55 2025 by rpki-client