Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
File:                     4qKrCidaLQTx4mNassd-s65gOMw.mft (raw, json)
Hash identifier:          4ABuBzrn/WbSA2fz3+ioRUgP4n5ymOvGanKoF+NDe8I=
Subject key identifier:   6E:CF:72:79:77:ED:F5:F7:E7:16:9F:EB:58:E6:AF:EA:F4:94:82:9B
Authority key identifier: E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC
Certificate issuer:       /CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc
Certificate serial:       0197B70E615FFA65E062E5A29F8649D3717B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
Manifest number:          08F8
Signing time:             Sat 28 Jun 2025 15:01:02 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:02 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:02 +0000
Files and hashes:         1: 4qKrCidaLQTx4mNassd-s65gOMw.crl (hash: Pw8WOuquc6wJt+ywjby+yLI1WroymazlpmTKpxzg36w=)
                          2: r-_fYxsQeAAnWT8K8BN3aabue4c.roa (hash: vX8iAlHxAeCaWnzF37mIFqPFZYMuvvYEyZXEicfJpc8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:61:5f:fa:65:e0:62:e5:a2:9f:86:49:d3:71:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc
        Validity
            Not Before: Jun 28 15:01:02 2025 GMT
            Not After : Jun 29 15:01:02 2025 GMT
        Subject: CN=6ecf727977edf5f7e7169feb58e6afeaf494829b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b2:80:d5:fd:a4:84:14:6c:80:b9:20:dd:34:
                    ba:78:94:83:2f:0b:b3:b5:c3:c8:3e:98:86:8d:d1:
                    7c:5d:a7:48:18:82:b4:b7:1a:4a:48:94:91:09:d9:
                    94:28:aa:42:a7:94:3b:2d:59:88:8b:81:fe:e7:61:
                    d7:1b:ab:ed:7e:7c:a9:0c:49:ae:33:09:0d:72:aa:
                    2c:f0:af:93:2f:94:e8:9f:c7:14:dc:26:31:b3:08:
                    3c:21:6d:f4:55:e9:ad:f5:7e:ea:eb:98:02:aa:85:
                    ef:eb:c8:04:a0:2f:33:1e:ff:86:90:59:99:88:5a:
                    a0:3d:f8:b9:1d:32:d5:71:d8:a6:67:0b:29:64:19:
                    24:b0:6d:bd:4b:bd:d1:2a:b7:49:a1:a8:f3:59:0c:
                    2c:ad:58:4f:94:7b:d9:23:80:2d:c3:b6:90:72:9b:
                    cd:7c:30:26:97:c7:3b:92:2c:a5:56:9f:26:de:60:
                    34:34:da:85:11:38:ac:ed:c1:05:35:28:9c:92:24:
                    ab:c7:51:d1:a4:78:a3:09:61:fc:a0:3d:37:8c:3b:
                    01:aa:b4:81:d1:c0:12:f0:8f:1e:a6:5a:3f:38:18:
                    a1:d3:cf:7c:f8:f0:19:64:84:0a:99:2a:e6:4d:cc:
                    77:25:05:ff:a3:30:1f:01:aa:d1:6b:ae:9b:0e:8c:
                    ea:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CF:72:79:77:ED:F5:F7:E7:16:9F:EB:58:E6:AF:EA:F4:94:82:9B
            X509v3 Authority Key Identifier:
                keyid:E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:30:36:68:c3:27:fe:b6:72:36:ca:13:b7:4b:3a:48:2c:61:
         16:55:71:34:30:ab:36:f8:33:78:69:85:4e:0c:81:8e:bd:d0:
         45:ca:da:a0:85:66:2f:7f:56:26:5e:28:98:80:c2:ef:39:e1:
         d5:54:47:40:80:ae:06:f0:8f:3d:9b:51:54:7d:57:13:74:16:
         fd:15:7c:e9:51:10:1d:b1:e4:61:12:ff:15:c2:f2:0f:88:67:
         9e:8a:61:dd:47:c6:d7:ed:64:c5:72:87:46:d9:3e:f6:02:79:
         17:3d:39:e7:3a:80:3e:c9:5a:bf:96:95:d9:ed:09:58:02:50:
         d3:bb:21:30:3c:d5:cd:f9:dd:b5:06:a5:fa:b3:ac:4c:98:1c:
         c3:5b:90:60:fc:34:5d:73:2b:7e:da:78:8e:a1:80:2a:d7:75:
         1b:6b:eb:e6:29:a2:4e:03:92:25:5d:17:6c:68:e1:6f:97:a2:
         00:82:8e:d0:46:e4:44:2e:2d:8b:09:b1:cb:41:6f:ab:b3:67:
         b4:ab:00:a7:ae:9e:c9:50:ee:98:9a:31:d6:54:40:f6:27:b6:
         02:be:3b:78:86:da:f2:92:ad:21:d5:a1:37:e7:93:b5:d2:22:
         5d:c4:81:03:f1:34:c9:42:2e:f0:b3:61:ad:e5:df:0f:27:43:
         89:8c:18:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DmFf+mXgYuWin4ZJ03F7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYTJhYjBhMjc1YTJkMDRmMWUyNjM1YWIyYzc3ZWIzYWU2
MDM4Y2MwHhcNMjUwNjI4MTUwMTAyWhcNMjUwNjI5MTUwMTAyWjAzMTEwLwYDVQQD
Eyg2ZWNmNzI3OTc3ZWRmNWY3ZTcxNjlmZWI1OGU2YWZlYWY0OTQ4MjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rKA1f2khBRsgLkg3TS6eJSDLwuz
tcPIPpiGjdF8XadIGIK0txpKSJSRCdmUKKpCp5Q7LVmIi4H+52HXG6vtfnypDEmu
MwkNcqos8K+TL5Ton8cU3CYxswg8IW30Vemt9X7q65gCqoXv68gEoC8zHv+GkFmZ
iFqgPfi5HTLVcdimZwspZBkksG29S73RKrdJoajzWQwsrVhPlHvZI4Atw7aQcpvN
fDAml8c7kiylVp8m3mA0NNqFETis7cEFNSickiSrx1HRpHijCWH8oD03jDsBqrSB
0cAS8I8eplo/OBih0898+PAZZIQKmSrmTcx3JQX/ozAfAarRa66bDozq7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG7Pcnl37fX35xaf61jmr+r0lIKbMB8GA1UdIwQY
MBaAFOKiqwonWi0E8eJjWrLHfrOuYDjMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHFLckNpZGFMUVR4NG1OYXNzZC1zNjVnT013LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81NWQ5MmMtZDNlMi00ZGExLThkNTMt
N2U0N2RhMWNlNDA2LzEvNHFLckNpZGFMUVR4NG1OYXNzZC1zNjVnT013Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS81NWQ5MmMtZDNlMi00ZGExLThkNTMtN2U0N2RhMWNlNDA2
LzEvNHFLckNpZGFMUVR4NG1OYXNzZC1zNjVnT013LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARDA2aMMn
/rZyNsoTt0s6SCxhFlVxNDCrNvgzeGmFTgyBjr3QRcraoIVmL39WJl4omIDC7znh
1VRHQICuBvCPPZtRVH1XE3QW/RV86VEQHbHkYRL/FcLyD4hnnoph3UfG1+1kxXKH
Rtk+9gJ5Fz055zqAPslav5aV2e0JWAJQ07shMDzVzfndtQal+rOsTJgcw1uQYPw0
XXMrftp4jqGAKtd1G2vr5imiTgOSJV0XbGjhb5eiAIKO0EbkRC4tiwmxy0Fvq7Nn
tKsAp66eyVDumJox1lRA9ie2Ar47eIba8pKtIdWhN+eTtdIiXcSBA/E0yUIu8LNh
reXfDydDiYwYHg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:56:58 2025 by rpki-client