Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
File:                     4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft (raw, json)
Hash identifier:          a0ixtOw8Ea2crFy58c9FZgEC8cMVK+j4m0tQydb/TCI=
Subject key identifier:   C5:F2:8F:D7:76:AE:72:AC:26:3B:D7:A9:58:CD:DD:B2:2D:04:FE:37
Authority key identifier: E3:EA:14:D1:34:3B:99:25:06:BE:E6:C3:D9:0E:19:A6:97:98:B0:18
Certificate issuer:       /CN=e3ea14d1343b992506bee6c3d90e19a69798b018
Certificate serial:       0197B74592293586F36BAA7BE5F15BE86CAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
Manifest number:          0EF4
Signing time:             Sat 28 Jun 2025 16:01:19 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:19 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:19 +0000
Files and hashes:         1: 4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl (hash: whgn75Fj1KlL4kwiYVp/UcNly5zTsrJyV6fNpUa1lFw=)
                          2: GLpHbmgk_HKZm99_6XW1zFhPnQ0.roa (hash: L9ftFB4BS92bIq/ClzkGPs+4wSqKQ5UFQA3ipP2ayPk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:92:29:35:86:f3:6b:aa:7b:e5:f1:5b:e8:6c:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3ea14d1343b992506bee6c3d90e19a69798b018
        Validity
            Not Before: Jun 28 16:01:19 2025 GMT
            Not After : Jun 29 16:01:19 2025 GMT
        Subject: CN=c5f28fd776ae72ac263bd7a958cdddb22d04fe37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:53:00:5d:93:6e:8e:be:85:e9:72:5c:03:b5:
                    03:c5:2a:3f:26:32:e9:49:4d:bd:a6:de:74:b2:17:
                    d6:6c:5e:a2:45:27:95:8f:7c:4e:cf:35:48:95:ef:
                    f6:f0:9f:6a:b3:27:ef:c6:30:5c:0d:0e:01:e0:79:
                    e3:a4:28:3f:fb:94:78:c0:87:c9:85:23:27:c8:90:
                    57:1c:08:4f:bd:75:18:f0:76:5f:cd:73:53:41:1a:
                    5f:b8:e5:77:cb:a2:da:ec:27:a6:1b:a8:2b:df:3a:
                    74:f6:71:7e:6d:40:dd:70:3a:cb:5f:9d:05:bc:45:
                    2f:41:93:75:1a:12:68:c8:33:16:2a:b4:65:b3:59:
                    24:c3:d5:c0:89:77:ba:1b:d5:e7:54:61:6f:9f:c6:
                    54:6d:91:67:cd:02:fc:f8:f0:d5:be:cc:ea:2c:7b:
                    ed:15:bb:f8:6b:c2:9d:d4:f0:a1:36:e3:f7:d9:1f:
                    82:25:50:07:a2:10:0f:c1:1e:da:62:c1:87:e1:61:
                    d5:1d:dc:c9:ca:6c:fc:22:07:b9:e7:f0:a5:80:95:
                    c8:ae:c9:29:ad:39:0f:6a:65:2d:b9:39:7b:c4:a3:
                    4b:0e:5f:2d:43:44:b1:67:6e:cf:02:15:78:c2:6b:
                    98:cb:b1:60:3a:c8:92:84:1f:a2:96:0d:1d:f7:d9:
                    da:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F2:8F:D7:76:AE:72:AC:26:3B:D7:A9:58:CD:DD:B2:2D:04:FE:37
            X509v3 Authority Key Identifier:
                keyid:E3:EA:14:D1:34:3B:99:25:06:BE:E6:C3:D9:0E:19:A6:97:98:B0:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:6c:40:2a:9e:19:c2:c3:71:97:18:56:be:ce:71:eb:8d:d4:
         2b:81:1b:db:83:2c:f3:71:32:26:bd:0d:cd:7e:f1:99:4d:7a:
         a5:16:52:3c:14:90:0d:2a:31:f4:7b:45:63:5b:5d:75:47:fe:
         2a:e9:df:16:39:b2:be:ad:66:43:11:c5:f0:84:1a:dc:6f:6c:
         8b:69:62:9c:f9:d6:00:f9:59:e0:d9:ed:b3:be:6b:a4:cc:80:
         ff:02:2c:78:26:e1:03:4c:8c:c5:91:9c:f6:bc:da:1f:96:d7:
         9e:24:3c:f7:f7:33:0f:e2:c4:a3:5c:ed:96:b4:b8:65:b9:67:
         2c:2d:e2:b4:47:ea:91:22:66:f7:dc:7e:49:78:e9:7f:e0:9a:
         be:2b:1b:c0:6e:09:ec:38:6a:e9:7d:25:21:7c:1a:e1:59:2b:
         49:1c:f9:e7:ea:e7:f4:34:f3:61:34:2c:4d:5b:05:1f:c1:a6:
         b6:b7:47:03:3e:23:ba:9f:d0:60:c2:37:4a:0c:f9:df:4c:57:
         2b:12:56:72:54:73:f1:f7:95:ef:4d:75:f4:5e:5f:d1:40:6e:
         92:79:14:12:33:eb:24:04:ed:59:ed:11:46:c4:dc:a1:e8:11:
         fa:ed:9f:6d:69:a7:07:77:8d:87:b8:21:28:49:7b:6f:1b:af:
         0b:f7:e1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:25 2025 by rpki-client