Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
File:                     4hEKzOM6yFARyowi0gAWZuRbk3c.mft (raw, json)
Hash identifier:          HaXUZd3hrlygrAovTpbrzvamKb3IdsW3rkAag03trSs=
Subject key identifier:   61:4D:71:45:8D:83:6F:24:EA:34:F8:D2:D0:A2:9E:29:A9:DF:4F:04
Authority key identifier: E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
Certificate issuer:       /CN=e2110acce33ac85011ca8c22d2001666e45b9377
Certificate serial:       0197B7B381BD62A30F77C273A53B67F10DF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
Manifest number:          15C3
Signing time:             Sat 28 Jun 2025 18:01:24 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:24 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:24 +0000
Files and hashes:         1: 4hEKzOM6yFARyowi0gAWZuRbk3c.crl (hash: oNAImYI9IjkFQiO6DenX9lRXBFLTgKSCfAxuq1p9xt4=)
                          2: 6fR_eS1-S-5XOCu6-_w9WFRAsnM.roa (hash: QrWF8qdwleA9HW7Gs5bTLxZ2kKrxxkYNg+tfhj45HxE=)
                          3: EeuiVBHDBppbMbvhnK9cVO-GWuY.roa (hash: RibVRzvF2zG1KnABcO1H1cwM+0LZwhWIJrVmfB+N9ZY=)
                          4: JMkLxoa9gyb522lPudXUln-VtH8.roa (hash: HGRLs3/3xdKBB32Jm7MzBkeAQwnme0p6aKkTVOkrnLU=)
                          5: UdT52qeUwfKz4cUKsNmdkQLdPTw.roa (hash: Kck1eebPn1LOtIjWwJSFOCY1FX3byBpP9hqNzAg6lBY=)
                          6: feh72HR-_mrzGLz7VSpEFnXqaJo.roa (hash: LwnQ+vMA051C/u4c2Kzemun4LSgaDWuT73rcQZC4pSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:81:bd:62:a3:0f:77:c2:73:a5:3b:67:f1:0d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2110acce33ac85011ca8c22d2001666e45b9377
        Validity
            Not Before: Jun 28 18:01:24 2025 GMT
            Not After : Jun 29 18:01:24 2025 GMT
        Subject: CN=614d71458d836f24ea34f8d2d0a29e29a9df4f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1d:a5:da:8d:0e:83:b6:e3:20:be:3b:d2:50:
                    b3:96:7f:8b:fb:09:4a:35:3d:81:1d:10:71:3b:e9:
                    5c:cb:19:c0:7a:5d:e0:85:e1:d6:77:af:41:41:b2:
                    eb:1a:44:40:9e:4b:a3:4d:94:02:c8:03:89:e5:de:
                    08:ef:2e:7d:78:0c:03:e0:e5:79:ee:ab:0c:a8:85:
                    83:5a:10:b1:1c:c7:28:f3:d9:98:85:6c:a5:b9:e7:
                    aa:32:60:fc:c5:a0:d9:07:da:a2:1c:a6:5e:ef:bb:
                    77:bf:e1:1f:a7:92:c4:ba:f2:55:5f:cf:46:df:77:
                    ef:5c:96:92:9d:20:a8:ea:d8:5b:a3:58:53:ce:eb:
                    b8:e0:3a:08:ff:66:d4:fd:cd:a0:52:e9:89:45:4e:
                    4e:ea:5a:3c:9a:04:8f:fa:64:6b:48:6c:de:52:68:
                    c7:39:8a:9c:ae:c4:d9:d7:9e:5c:d6:0f:5a:84:71:
                    46:1d:47:b9:f7:7d:fd:66:1c:ca:f9:ac:15:5e:3d:
                    e0:b8:b4:62:f9:39:25:56:a0:ae:8f:75:cc:d6:de:
                    44:4a:60:78:08:b1:df:f8:e2:70:59:3f:85:29:c8:
                    60:d7:21:aa:fb:60:c5:f2:7f:ab:4b:ce:b3:bf:6d:
                    c0:ba:41:ea:89:17:69:8c:ef:20:01:f1:1f:8a:0f:
                    13:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4D:71:45:8D:83:6F:24:EA:34:F8:D2:D0:A2:9E:29:A9:DF:4F:04
            X509v3 Authority Key Identifier:
                keyid:E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:0a:74:69:fe:6f:c0:ee:eb:c6:da:90:84:9d:79:c6:00:54:
         53:71:9e:d0:e4:5a:4a:d7:3e:0d:fe:a0:7a:93:9a:f7:1b:b4:
         01:8b:fc:05:b0:26:e3:be:f5:29:dc:f9:99:c9:d2:24:97:58:
         d0:aa:73:73:6a:f7:ba:8f:8b:c9:fe:53:ed:1b:91:07:ae:2c:
         bd:f6:3c:ce:6a:17:98:66:cf:be:5e:0b:5e:4a:2c:76:9f:00:
         70:56:57:25:ef:d6:65:28:c6:47:20:66:0a:8c:a5:4c:d6:7f:
         fd:bc:5e:b8:c6:8c:8b:78:d9:92:d5:d6:12:07:41:c7:81:e0:
         1a:ce:1e:37:ff:5f:2f:d3:5c:5d:26:54:bc:7e:b5:1b:90:c0:
         56:cb:88:05:c4:43:24:cf:7e:1f:ea:12:4b:2b:2b:b2:ea:c2:
         16:41:bb:5b:b5:9c:6d:22:ae:8c:77:85:eb:d6:f0:79:bd:e2:
         e4:62:b4:85:49:05:ff:de:e6:43:4f:f7:93:cc:eb:33:46:dc:
         db:90:2a:c4:cc:ba:67:ab:07:9c:1b:c4:d1:b5:10:ec:cb:9e:
         df:56:20:19:8d:15:2f:22:74:37:64:d7:92:ee:00:e4:39:46:
         2d:3a:85:9a:3f:26:4f:ee:3c:6a:d8:f0:d6:61:da:33:6c:c8:
         bc:a8:1e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:26:11 2025 by rpki-client