Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
File:                     4koyJ4zntMsgXfzK14YBSjsK4yM.mft (raw, json)
Hash identifier:          8Ge2qRNWbRqB/RsobxX3WCcvpHwVCgIdpUKYYfRk36M=
Subject key identifier:   9C:A6:60:59:F1:31:6B:C7:99:13:87:59:66:86:AD:38:4E:FE:CE:CC
Authority key identifier: E2:4A:32:27:8C:E7:B4:CB:20:5D:FC:CA:D7:86:01:4A:3B:0A:E3:23
Certificate issuer:       /CN=e24a32278ce7b4cb205dfccad786014a3b0ae323
Certificate serial:       0197B96A9E11977991A2E52ACACD32B6F3C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
Manifest number:          0D4F
Signing time:             Sun 29 Jun 2025 02:01:01 +0000
Manifest this update:     Sun 29 Jun 2025 02:01:01 +0000
Manifest next update:     Mon 30 Jun 2025 02:01:01 +0000
Files and hashes:         1: 4koyJ4zntMsgXfzK14YBSjsK4yM.crl (hash: zAP6NbHgNOjQ287hEGkSUg28nX0L0OeN/+Jzaz31Mo0=)
                          2: Fl9jCud-UU_nsltrgxF4woEzDPA.roa (hash: t0KQ+pJmnr1NHNCgrJUYJH3j4t5bgDietQ+c+4tjYIw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:6a:9e:11:97:79:91:a2:e5:2a:ca:cd:32:b6:f3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e24a32278ce7b4cb205dfccad786014a3b0ae323
        Validity
            Not Before: Jun 29 02:01:01 2025 GMT
            Not After : Jun 30 02:01:01 2025 GMT
        Subject: CN=9ca66059f1316bc7991387596686ad384efececc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:92:38:75:b5:07:74:3e:ae:1e:61:cf:33:5c:
                    02:dd:3f:8c:be:8f:56:b1:b6:2e:f5:90:56:39:60:
                    9d:a6:ec:1b:6c:cc:c3:2a:b1:05:6c:50:1b:05:dd:
                    c7:7b:5d:44:85:72:53:ab:d8:e2:bb:86:4a:cb:fa:
                    d6:05:de:51:59:0c:43:f9:a1:4e:ec:62:07:11:52:
                    f6:b8:ea:a0:5f:32:74:64:e5:47:28:fb:14:86:06:
                    91:b2:ec:c2:fa:38:03:ac:c4:d0:9f:ec:d2:c1:ef:
                    3f:25:d0:fe:70:74:75:55:bb:a2:2d:e7:0e:60:2d:
                    e0:f9:1c:71:6e:83:a4:56:08:82:96:ba:7d:e9:61:
                    e1:f2:ea:9e:42:f2:57:09:92:64:4e:e0:a9:03:c5:
                    c2:bc:47:e7:cf:ca:72:59:68:d0:1f:7c:3c:3f:9e:
                    25:69:b6:56:b8:0d:b6:6c:89:e9:0a:8d:c0:8d:83:
                    1b:6a:d8:12:64:97:f1:c4:1a:b5:c5:64:9b:03:d6:
                    27:bb:ce:83:2e:a8:45:c2:a4:ba:ac:a1:54:68:66:
                    2b:75:aa:96:55:e1:b8:08:e9:c4:eb:41:b3:a9:68:
                    c7:d2:1f:16:2f:40:73:d5:d0:81:31:72:de:eb:c7:
                    0a:cd:1d:66:3d:72:c9:0d:17:66:aa:b9:8f:e2:87:
                    fd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A6:60:59:F1:31:6B:C7:99:13:87:59:66:86:AD:38:4E:FE:CE:CC
            X509v3 Authority Key Identifier:
                keyid:E2:4A:32:27:8C:E7:B4:CB:20:5D:FC:CA:D7:86:01:4A:3B:0A:E3:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:d3:36:84:d2:8b:74:73:27:28:4b:60:25:70:41:37:33:ee:
         60:2b:82:01:7a:4f:80:de:2b:fe:7a:82:54:30:65:3c:67:b6:
         dd:df:10:0c:3b:1a:c8:76:eb:d4:ee:f3:d6:a5:71:9e:22:10:
         1e:e4:11:00:7e:99:3f:c9:df:e7:fa:0e:8a:a4:0c:f4:18:4e:
         ca:92:da:ad:43:11:09:e2:de:a3:7d:5c:24:18:e7:f1:dd:9d:
         50:8c:44:f7:5c:29:12:c5:c9:57:4a:8c:2a:b9:d0:28:9c:0c:
         b3:0b:f3:ab:a4:e3:f4:d5:e2:0f:6c:96:fa:8f:cc:30:a6:d6:
         02:c0:14:ed:e3:e4:64:c7:a1:a4:7b:d2:84:52:22:91:29:17:
         ee:08:22:4a:6c:bd:9b:1f:d5:69:87:9e:9b:7a:77:f8:b8:60:
         fc:f7:2a:b2:4c:cd:c4:7c:0a:61:9e:45:a8:01:94:08:49:bb:
         3a:64:f0:13:1e:88:f8:40:d3:0d:38:5a:56:89:b9:a1:61:e7:
         8f:b0:07:8d:37:84:7b:2c:85:dc:6e:9d:8b:95:ea:1e:93:b8:
         f0:7e:46:1e:50:95:cc:18:b8:39:d5:05:dd:9f:11:23:18:e9:
         a8:74:c2:bf:2c:63:7e:6a:36:c1:f9:03:5e:41:6d:c2:cc:17:
         6e:8f:b6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:24:31 2025 by rpki-client