Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft
File:                     4YVsMIKrL8jdGzWaezmRNoU4tNA.mft (raw, json)
Hash identifier:          M6hL2wzGttSR8Sw6yNSCzpwZ1Q4ixVBIQKu1DFOeDxY=
Subject key identifier:   84:A2:91:CD:D3:8F:F9:41:EB:60:74:63:DF:F7:C4:6D:57:3C:50:8B
Authority key identifier: E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0
Certificate issuer:       /CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0
Certificate serial:       0197B632E0D0DC64301642B8FFADB64AED0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft
Manifest number:          0A49
Signing time:             Sat 28 Jun 2025 11:01:17 +0000
Manifest this update:     Sat 28 Jun 2025 11:01:17 +0000
Manifest next update:     Sun 29 Jun 2025 11:01:17 +0000
Files and hashes:         1: 4YVsMIKrL8jdGzWaezmRNoU4tNA.crl (hash: C3z9StuR2xs9ehfgYoCvi2arK4PUDzR4M8lkF8L1HeI=)
                          2: DubK0ajew1E_RURQjQNCAhLGbkc.roa (hash: o2iba58UUQFPb0v5v5MuvKEyUlVzhsgsqL1rMivQOXg=)
                          3: Kq9oy1uLDEVjPK7uo7CtOBtF3Fs.roa (hash: +hOcbW8T2Du+uljugS3IXJD+qzn/X9C29PD+zWkfcl4=)
                          4: hn2vtXI_FxI2fK5snrvER2liYkI.roa (hash: h1TFBwFQDb6c/MRMsjXSVpwRX890l+6Op+4syOnaFGY=)
                          5: hzE5LvcG1hl--6wBh1ojQ7tfIYE.roa (hash: 87OEa14cIeRPup2IlbeWtF8BT8tzrS9k5/ocOLGWxJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 11:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:e0:d0:dc:64:30:16:42:b8:ff:ad:b6:4a:ed:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0
        Validity
            Not Before: Jun 28 11:01:17 2025 GMT
            Not After : Jun 29 11:01:17 2025 GMT
        Subject: CN=84a291cdd38ff941eb607463dff7c46d573c508b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:26:d2:ad:86:80:96:99:fd:b0:1c:b9:d3:87:
                    6b:ff:c9:d4:72:28:44:39:30:0a:7e:b6:5c:1e:dd:
                    88:1e:34:fb:cb:15:2c:dd:1d:eb:5a:4c:83:69:8d:
                    34:eb:ef:75:8d:73:eb:5a:3e:96:83:39:cd:06:2b:
                    80:f2:69:fc:40:51:1d:7b:5f:17:85:9c:4b:63:62:
                    97:38:6b:95:80:b3:16:83:27:31:42:85:4d:fb:4e:
                    20:4a:2f:8d:d8:4c:b4:0c:77:b8:25:f0:fa:46:b8:
                    05:04:7a:86:d9:95:0b:3b:70:87:5e:ec:5d:5f:2f:
                    74:35:3f:36:b1:78:07:1c:85:d9:42:96:97:c9:83:
                    95:72:87:e9:59:1e:71:20:df:94:a3:5c:bb:70:b6:
                    c0:11:af:b7:33:93:fc:c4:aa:fa:57:e9:8d:26:4c:
                    b8:44:d6:b9:44:2a:59:ff:ac:06:36:30:c6:5c:2b:
                    82:04:5a:c3:ce:46:11:00:3f:ec:f1:75:52:8f:9a:
                    06:60:16:4f:2b:73:27:bf:32:f7:07:ab:c2:82:9e:
                    d6:d0:dd:de:36:86:db:92:9d:aa:39:6c:3e:89:0a:
                    0d:48:cb:80:0e:e8:19:d6:bb:8e:9c:c5:7f:2c:1b:
                    ea:8f:03:97:19:b4:f0:b9:78:98:33:22:42:1b:c1:
                    3d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A2:91:CD:D3:8F:F9:41:EB:60:74:63:DF:F7:C4:6D:57:3C:50:8B
            X509v3 Authority Key Identifier:
                keyid:E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:7a:a6:1c:7a:f1:df:e2:17:07:02:70:9a:39:cb:65:ce:89:
         92:d2:15:8d:68:3b:76:cc:c5:4c:e6:58:ca:8d:d5:3b:db:f3:
         b6:d9:de:24:77:78:4e:0c:59:cb:79:5d:70:46:ef:a5:94:4e:
         d6:22:89:99:88:7d:6f:df:f1:c3:b9:82:e2:c1:eb:d0:1c:b9:
         29:35:57:73:c9:09:e2:94:e3:fc:2c:a8:e9:de:57:2c:bd:05:
         05:e1:9d:39:cf:86:ca:d4:6d:aa:0c:86:6d:e0:1a:42:70:65:
         cf:b3:42:d6:a7:0c:29:67:92:dd:dc:b6:38:d2:ee:ae:35:7b:
         d1:8d:0b:35:5b:36:f9:fe:b9:6a:90:61:ec:d2:d1:95:93:ed:
         e3:ec:3d:a6:e4:e8:d2:62:a6:89:4f:24:09:7f:7e:53:a0:15:
         5f:7a:af:54:fa:15:28:4f:c2:7e:18:0f:4f:b1:3b:a1:73:10:
         df:15:b3:9f:2e:b2:5e:1d:e8:e3:96:6b:56:05:a0:8b:db:08:
         e5:bc:47:db:09:46:5c:92:1b:fc:4b:ea:2a:75:b2:08:ef:5a:
         b4:f7:b2:02:7e:0d:6b:a0:70:7a:aa:02:8c:a3:b1:ab:de:2b:
         ec:79:08:a2:df:c8:f3:a9:67:22:fa:da:e3:ca:a9:90:88:cd:
         c2:95:85:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:15 2025 by rpki-client