Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
File:                     4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft (raw, json)
Hash identifier:          ommGVFplMAk770Pt79mBHixpexOOIoOXq5wPKTkoxg4=
Subject key identifier:   98:AE:96:30:86:16:8B:10:2A:8C:8A:C9:B4:57:19:DC:38:ED:C9:0D
Authority key identifier: E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC
Certificate issuer:       /CN=e31aba3c2f56283ce5c74bce405844c1591babfc
Certificate serial:       0197B8212D2195A75EBCD64999105E746FA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 20:01:11 +0000
Manifest this update:     Sat 28 Jun 2025 20:01:11 +0000
Manifest next update:     Sun 29 Jun 2025 20:01:11 +0000
Files and hashes:         1: 4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl (hash: aDHkTQJM7m72dRJBF64nPzeJGJnV6M4EHDM2IackbHA=)
                          2: PmKzLROtlSNpGVP9Gabn59_vPcQ.roa (hash: 4+SnbeNGMFNkaQG14haNRuuikDneIrgDVYY+Z1QI1eI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:21:2d:21:95:a7:5e:bc:d6:49:99:10:5e:74:6f:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e31aba3c2f56283ce5c74bce405844c1591babfc
        Validity
            Not Before: Jun 28 20:01:11 2025 GMT
            Not After : Jun 29 20:01:11 2025 GMT
        Subject: CN=98ae963086168b102a8c8ac9b45719dc38edc90d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:31:b7:85:c7:cc:2b:39:1b:15:a1:48:e4:ae:
                    58:f1:1e:02:0e:6a:62:74:8e:74:ea:ff:4d:9d:d5:
                    cc:35:ff:19:ad:b4:3f:50:21:d0:ac:bd:6b:51:db:
                    b4:f2:76:76:fb:ea:a1:f0:c9:28:10:a2:a8:7b:46:
                    a7:b1:a5:6e:3b:c2:5d:0b:b5:f4:29:2a:14:55:8f:
                    51:03:07:0d:f1:2f:48:0f:ac:2e:29:3d:d7:09:90:
                    96:6e:2f:5d:67:03:39:c5:e0:62:f6:41:d9:cf:17:
                    99:19:27:e7:e7:00:79:9c:b7:b1:82:e8:fc:08:ff:
                    da:60:83:da:ba:65:07:ef:52:3e:64:d5:e6:8c:6c:
                    75:68:4d:f8:f6:0c:ba:7c:eb:0b:57:9f:51:16:61:
                    cc:10:8a:f9:a0:14:18:d9:76:94:16:49:31:57:88:
                    b9:7d:f7:e9:92:4e:00:89:9f:75:7a:0b:fc:76:ee:
                    99:ae:f3:79:93:3b:c8:8a:cc:a8:96:e1:39:9f:57:
                    46:80:43:40:0f:04:6c:fb:25:66:dc:da:21:b0:27:
                    33:53:a5:52:5c:d1:8f:ea:12:7c:fd:b3:d9:95:2b:
                    f1:15:ad:c5:51:d3:73:c4:57:c7:7a:bd:77:05:1e:
                    4d:6d:e1:37:87:7f:0a:af:00:26:37:02:6d:f9:8c:
                    e1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:AE:96:30:86:16:8B:10:2A:8C:8A:C9:B4:57:19:DC:38:ED:C9:0D
            X509v3 Authority Key Identifier:
                keyid:E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:85:5f:2d:bc:3f:2f:c6:d8:22:1c:a4:a8:d8:a6:39:d1:5b:
         54:37:f6:f8:1f:e6:c6:d8:da:f9:15:6f:0a:8d:bb:01:c0:06:
         6b:3c:76:2f:b7:fa:91:13:80:51:c6:bb:3a:43:f0:66:cd:44:
         a9:ba:f3:da:72:06:1d:fc:4a:60:a8:34:c7:e0:32:1e:98:48:
         8d:a5:68:0e:60:5b:4f:73:97:27:d6:09:93:c3:a3:16:97:78:
         4e:2b:e7:b9:d3:b3:26:cd:8e:17:f1:ef:5a:3f:af:a4:fa:49:
         f6:9f:3e:e1:98:a5:29:87:b4:a7:5e:c3:50:ab:56:6c:f0:53:
         dd:2c:51:4b:68:b5:d2:bd:c2:69:2d:4c:01:34:91:08:da:de:
         e8:2b:55:98:10:4c:52:e8:40:aa:71:16:1b:26:de:94:0a:e5:
         76:be:78:01:32:75:03:4c:b6:22:ff:f1:9f:9e:50:56:c5:c9:
         ac:46:50:aa:da:3e:2d:62:e2:d4:96:63:2e:fe:4d:12:9b:71:
         9d:d2:52:e6:72:a6:0a:67:56:e8:9b:06:86:9a:4a:54:98:cd:
         23:a0:8d:20:dc:82:a8:17:92:a0:f2:c6:7b:f8:7c:09:7a:1a:
         a9:fa:6b:4e:be:f6:89:24:d3:c0:ed:49:06:d5:02:fb:8c:73:
         dd:83:82:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:28 2025 by rpki-client