Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.mft
File:                     4mNuAvFVT3DZcaZWhJwBvf8TjOg.mft (raw, json)
Hash identifier:          DQPIn5rWyHxARJOepDwnC6uSJBhbSlVfMRvsHp0TAzE=
Subject key identifier:   48:89:AD:92:0E:53:92:08:DC:81:88:F0:73:85:97:48:E0:92:7A:A3
Authority key identifier: E2:63:6E:02:F1:55:4F:70:D9:71:A6:56:84:9C:01:BD:FF:13:8C:E8
Certificate issuer:       /CN=e2636e02f1554f70d971a656849c01bdff138ce8
Certificate serial:       0197B70E94D8F69C9720F1E6EEF1DBC79990
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4mNuAvFVT3DZcaZWhJwBvf8TjOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.mft
Manifest number:          07A2
Signing time:             Sat 28 Jun 2025 15:01:15 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:15 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:15 +0000
Files and hashes:         1: 4mNuAvFVT3DZcaZWhJwBvf8TjOg.crl (hash: IRXAj2f7zf9gtCeTr37pFuqzI9zhdMml8zkDZRbPuGE=)
                          2: 7dRcXbElWutmb-vx1yNlkmHljSE.roa (hash: WZ+TCSmEO4aTN64/UdH9rIveS1dVo6wGMMxf2jnWiPU=)
                          3: 8ledFww48tlGlLdCdc6wJh5gkIA.roa (hash: Tmx1stFU3W6NXlv6YnpijkUZCwIIoq5vNpNXxvyHtoo=)
                          4: cvEKFsSTsStMmItt_2492mBbnFo.roa (hash: /gDWOgEA4TF8vJ8vkcEBambiiNBw5mr+XGx4Ku2Xa3g=)
                          5: kNp_3YkCixoFt65dB3MqrcA0XPo.roa (hash: yKQUvFhZ+Z1swcvVEnDhUbffbwLlIa/3aCYRRPNo5TY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4mNuAvFVT3DZcaZWhJwBvf8TjOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:94:d8:f6:9c:97:20:f1:e6:ee:f1:db:c7:99:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2636e02f1554f70d971a656849c01bdff138ce8
        Validity
            Not Before: Jun 28 15:01:15 2025 GMT
            Not After : Jun 29 15:01:15 2025 GMT
        Subject: CN=4889ad920e539208dc8188f073859748e0927aa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:aa:d2:9f:89:cb:30:ec:9d:11:f2:15:ef:8d:
                    72:05:2d:3c:9b:53:9f:c9:b9:86:ed:64:72:d8:bc:
                    67:6e:a1:2e:0e:39:0e:d7:89:04:80:be:50:3d:aa:
                    a0:54:31:e8:f9:0d:fe:38:e4:b1:f9:56:19:f7:b2:
                    6f:0b:e9:4f:0f:de:be:d0:7c:cd:49:67:ac:d8:da:
                    bc:71:96:19:af:1a:1e:3e:47:05:72:e5:fe:db:e0:
                    d0:d0:35:00:76:9a:d5:93:84:c3:6a:5c:1b:2b:f2:
                    8e:bc:5d:e0:ed:f8:68:56:66:a9:c4:98:4f:eb:d7:
                    5c:bb:4c:6e:59:18:a4:d9:f2:c5:ff:72:51:9b:34:
                    0f:a3:ce:3d:ab:b6:9b:54:3a:b9:90:2b:39:1d:82:
                    2a:1a:98:78:72:c8:fe:04:d0:7f:30:6c:f6:ff:ec:
                    83:f0:9e:3f:eb:45:aa:1e:30:08:bb:59:42:51:b7:
                    0b:48:77:3a:49:b2:c7:44:01:a6:1b:47:e0:53:33:
                    41:92:c6:f0:2f:5a:a4:f8:46:af:62:37:36:45:18:
                    d3:59:96:d3:f6:bd:95:b5:ab:79:3b:49:31:2e:c7:
                    25:29:7f:f7:52:98:48:da:2d:21:04:4d:07:22:67:
                    f2:a0:4e:58:8a:b9:c4:1b:35:c6:0b:e7:70:a3:51:
                    14:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:89:AD:92:0E:53:92:08:DC:81:88:F0:73:85:97:48:E0:92:7A:A3
            X509v3 Authority Key Identifier:
                keyid:E2:63:6E:02:F1:55:4F:70:D9:71:A6:56:84:9C:01:BD:FF:13:8C:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mNuAvFVT3DZcaZWhJwBvf8TjOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:39:8c:69:08:e1:6d:89:cb:e0:ab:39:8f:65:3b:97:3e:89:
         8e:45:c4:b9:07:f5:09:0b:50:2e:1e:e8:c0:28:3c:2d:d1:cf:
         5e:57:21:13:11:c4:c7:d4:07:2c:c5:12:d8:05:1b:8b:a3:76:
         10:f8:48:4d:d8:62:62:45:d8:b7:57:77:3e:45:25:9e:2b:31:
         41:f8:79:61:6c:e4:fb:9b:2a:6e:a1:1e:39:47:ce:bf:b1:78:
         92:bf:91:87:51:2e:9f:bf:53:5f:af:4e:f5:40:bd:12:c1:89:
         0f:34:8a:d1:b4:ef:09:46:94:6d:76:af:f6:40:3b:94:00:a8:
         3a:af:34:06:8c:3d:2d:12:8f:ed:a3:04:ae:b9:39:ad:18:b1:
         aa:26:40:42:62:6c:00:1e:e7:c8:7e:e3:dc:36:ba:67:da:f0:
         31:1d:52:da:24:b8:d1:9b:59:89:ed:8c:52:56:d2:31:16:63:
         44:f3:6b:26:4d:38:58:3e:12:99:08:c0:60:7d:9a:be:37:69:
         57:a0:10:73:c8:29:fa:aa:c6:58:8e:6b:db:ae:b5:2b:a3:84:
         52:66:cb:6a:00:78:14:60:1c:f7:0e:66:b5:85:6a:0d:84:33:
         24:08:9e:73:da:c3:6f:f3:3c:4a:a4:17:41:80:05:af:92:8a:
         af:59:a2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:21:38 2025 by rpki-client