Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
File:                     4AEry55udHI3ckeBpMkZ_FyUGWU.mft (raw, json)
Hash identifier:          njRgWRRszk0s49rYEWBxIKmS8lOaiIn2Ux+VOARZnLI=
Subject key identifier:   61:7A:51:9E:3E:27:03:F4:61:CC:FF:4A:27:EC:56:B8:F5:30:10:CC
Authority key identifier: E0:01:2B:CB:9E:6E:74:72:37:72:47:81:A4:C9:19:FC:5C:94:19:65
Certificate issuer:       /CN=e0012bcb9e6e747237724781a4c919fc5c941965
Certificate serial:       0197B70EFAB45E39963B1003DA9FDE93F806
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
Manifest number:          0636
Signing time:             Sat 28 Jun 2025 15:01:41 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:41 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:41 +0000
Files and hashes:         1: 4AEry55udHI3ckeBpMkZ_FyUGWU.crl (hash: x9EQDSL4/3+f349ch6qkiR/ENdXTaJlZ+fGjG3T91kU=)
                          2: MYSNIQYUaSC8ss7EtwLxh0CCkZs.roa (hash: AWgu8sQIv0FgWnatk16HiARuSleHz/0dfX9flEkjltg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:fa:b4:5e:39:96:3b:10:03:da:9f:de:93:f8:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0012bcb9e6e747237724781a4c919fc5c941965
        Validity
            Not Before: Jun 28 15:01:41 2025 GMT
            Not After : Jun 29 15:01:41 2025 GMT
        Subject: CN=617a519e3e2703f461ccff4a27ec56b8f53010cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2c:e1:d7:ff:57:6d:83:65:ba:e8:7e:b6:2b:
                    70:59:52:b2:b5:0b:8e:5a:1d:50:38:1a:8f:fe:59:
                    de:9f:99:f1:ed:fb:96:85:3c:55:dc:a6:f4:68:50:
                    2b:4b:f1:ab:5f:67:25:53:bd:1f:e2:d5:00:99:f6:
                    5e:0f:bf:31:31:7c:99:af:38:9f:59:a2:97:7c:bd:
                    42:83:78:82:7d:d3:17:4c:2e:69:93:1b:73:52:92:
                    03:4b:22:dd:58:58:9b:fc:eb:06:91:5f:ea:70:08:
                    0d:ed:75:f1:8a:af:0f:ca:63:3c:41:68:05:0e:b5:
                    10:bb:04:f2:4c:6d:f4:bf:2e:d2:f8:dc:58:5c:a7:
                    6a:bd:04:15:90:d1:53:da:fe:5d:36:b9:90:12:61:
                    7e:29:bb:0c:d9:bb:90:22:85:ef:eb:15:16:f5:cf:
                    82:5d:00:40:54:98:ab:99:6b:39:2a:a4:1e:6c:6d:
                    2b:25:cd:33:7f:88:28:7b:16:bc:a2:80:44:6e:75:
                    8c:34:54:35:16:1a:d1:70:34:0c:f0:31:b4:3f:9d:
                    f6:3e:60:d3:1b:4e:09:a6:33:20:0d:f9:1d:64:c7:
                    27:94:eb:ae:9c:72:71:51:2e:92:d8:f1:7d:b4:ac:
                    11:f0:69:37:f3:2e:41:17:a4:28:b3:80:d7:7e:e9:
                    30:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7A:51:9E:3E:27:03:F4:61:CC:FF:4A:27:EC:56:B8:F5:30:10:CC
            X509v3 Authority Key Identifier:
                keyid:E0:01:2B:CB:9E:6E:74:72:37:72:47:81:A4:C9:19:FC:5C:94:19:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:56:7d:1f:75:46:4e:38:5d:85:b0:aa:ed:9f:d2:dd:ca:7d:
         1d:cc:ee:af:16:c5:9e:3a:3c:a5:4c:2f:9f:c8:7b:a8:f5:fa:
         d0:ad:2b:b9:ba:40:b4:d0:93:b4:51:ae:e7:49:25:76:ae:33:
         85:69:8a:89:39:7b:d9:d0:bc:3b:c6:f1:aa:c4:72:d2:43:44:
         96:f7:03:ed:94:27:a0:b9:31:56:4f:e3:bd:a0:73:3c:48:03:
         3a:3b:6e:89:ec:9a:87:d1:69:d6:6b:1c:25:29:24:82:75:6e:
         09:ba:f5:42:14:e7:b3:4c:63:2b:ea:2c:2b:3c:08:b5:15:bb:
         44:2a:6d:eb:c8:aa:07:40:ae:00:73:3d:f5:1f:d0:40:62:0a:
         69:2e:2d:e3:fd:a5:ce:ab:38:8f:9d:e0:db:0e:e4:20:66:41:
         ef:3e:59:4d:aa:45:be:0b:33:0f:32:ff:00:ef:43:f8:aa:3d:
         ee:3c:32:5c:b3:12:5c:23:21:9a:9d:4b:c3:ec:a5:ef:7b:fc:
         ba:bf:5c:02:15:f9:87:a8:92:ea:24:64:c2:d4:29:c2:18:34:
         69:e1:25:e6:b9:fc:40:27:60:ad:75:77:63:e6:0d:75:d9:ac:
         94:64:f6:49:f1:ab:57:89:8d:2f:b5:51:62:9f:d5:02:34:40:
         86:c3:0b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:17 2025 by rpki-client