Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
File:                     4uQkJWNHPN8ULMt8zjwsw26j1GU.mft (raw, json)
Hash identifier:          Acir4LZFcgBxSmm4g3oY43hhlBNHLeqzs9Vx42N3Tws=
Subject key identifier:   51:EA:91:AD:1B:3D:74:67:9A:42:43:77:38:7A:9E:4B:B3:F3:83:EF
Authority key identifier: E2:E4:24:25:63:47:3C:DF:14:2C:CB:7C:CE:3C:2C:C3:6E:A3:D4:65
Certificate issuer:       /CN=e2e4242563473cdf142ccb7cce3c2cc36ea3d465
Certificate serial:       0197B7B366B84247D4BD4CE08A8DB7D850BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
Manifest number:          0BB4
Signing time:             Sat 28 Jun 2025 18:01:17 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:17 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:17 +0000
Files and hashes:         1: 4uQkJWNHPN8ULMt8zjwsw26j1GU.crl (hash: z+GlPCk7AM7UldyYgDTNfROrXQCNiS0FPGYdTRdFMr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:66:b8:42:47:d4:bd:4c:e0:8a:8d:b7:d8:50:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e4242563473cdf142ccb7cce3c2cc36ea3d465
        Validity
            Not Before: Jun 28 18:01:17 2025 GMT
            Not After : Jun 29 18:01:17 2025 GMT
        Subject: CN=51ea91ad1b3d74679a424377387a9e4bb3f383ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ca:0a:1c:e9:2a:5b:35:e3:68:ba:9a:10:b1:
                    b8:6a:c5:b8:04:62:bf:75:cf:e1:3a:f9:c3:06:d9:
                    03:4e:a4:f3:44:3c:d9:9c:bd:86:94:f0:67:bd:0b:
                    10:12:11:e9:f0:3a:f9:f6:44:b8:62:ff:c2:cb:d1:
                    88:02:23:83:b5:40:c4:fb:84:c2:23:5e:b4:4b:59:
                    a4:6b:28:32:3a:f9:9b:c9:6a:28:a0:5a:63:09:11:
                    e1:1a:f8:b6:60:60:d0:8b:48:8a:1d:31:00:fc:51:
                    40:6e:5f:b6:81:1d:9e:bd:82:0a:41:4f:c2:a5:d8:
                    a6:38:81:2b:c1:e3:12:5d:57:f7:f4:c7:c7:bb:04:
                    2e:b5:e8:b1:cc:66:22:38:f8:47:0d:33:e5:99:2c:
                    64:76:6b:c7:4c:40:82:59:b8:91:f3:87:15:cd:23:
                    5e:e2:91:98:38:7f:6a:47:2e:b9:8e:42:3f:ba:d3:
                    fb:89:eb:16:0e:51:6d:0b:57:ef:ac:03:e0:b8:df:
                    92:b5:88:13:5d:1a:52:b6:a1:bb:7c:89:ca:2b:55:
                    6e:17:e2:c1:75:fb:50:f1:cc:f2:70:ad:de:ab:50:
                    c1:3b:4b:b1:fa:1c:67:dd:ef:42:0a:30:88:e1:1a:
                    51:9b:b1:34:ee:ec:27:af:9a:32:8c:9c:9e:6e:99:
                    e5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:EA:91:AD:1B:3D:74:67:9A:42:43:77:38:7A:9E:4B:B3:F3:83:EF
            X509v3 Authority Key Identifier:
                keyid:E2:E4:24:25:63:47:3C:DF:14:2C:CB:7C:CE:3C:2C:C3:6E:A3:D4:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:4a:1f:9e:05:cd:b0:1c:5d:dc:81:af:91:7d:b2:3f:63:69:
         b2:c5:82:9b:0c:fe:4a:43:60:e0:e7:8c:14:9d:a6:3b:51:9e:
         0b:35:a0:21:ed:de:97:74:4d:2f:55:b1:48:61:cd:c1:2a:25:
         d7:39:5e:46:6a:3a:ee:c8:28:f2:81:46:0d:12:84:b8:21:60:
         3a:d1:34:9a:50:be:18:88:c2:ac:a3:2e:de:6a:5d:c5:c1:f0:
         eb:20:bd:bc:28:41:b0:b6:b4:71:0f:a9:fb:e0:89:51:4a:e6:
         62:9c:2e:98:39:9e:fb:06:2e:8d:5f:69:6a:8f:ee:c9:e8:c8:
         59:96:47:b1:62:e1:04:c1:22:c5:1e:38:e3:3a:37:c0:a8:42:
         bc:09:66:70:cf:14:1b:b4:c0:40:41:b3:d5:91:c6:31:9f:97:
         ec:5a:ab:a8:dd:e0:99:28:84:21:ac:ad:08:76:1a:32:7d:35:
         8f:db:4a:09:b2:44:dd:a2:c4:ef:81:93:17:11:28:47:8a:76:
         1b:fc:a1:50:fa:0f:7b:fe:cf:9e:f1:e4:73:b2:61:e0:30:26:
         22:b6:15:5a:5b:42:fe:2e:0a:fd:20:07:d0:eb:08:df:90:13:
         f1:88:06:fe:3d:8f:cc:a0:7b:c8:d3:e5:96:12:d1:04:de:41:
         e2:a4:03:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:24 2025 by rpki-client