Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
File:                     4Gkduvo6jeBwsHAi3prfdDQftPI.mft (raw, json)
Hash identifier:          0yDPhfgCexuRyXtXRrIwtxGenN05Sdw+tnOOcyVB8Io=
Subject key identifier:   72:CA:2E:E9:A0:BF:B3:DC:BE:81:DE:E9:04:11:6E:06:DD:E5:9B:8E
Authority key identifier: E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
Certificate issuer:       /CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Certificate serial:       0197B5FBE15B1C54721929E4079400494274
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
Manifest number:          0E75
Signing time:             Sat 28 Jun 2025 10:01:12 +0000
Manifest this update:     Sat 28 Jun 2025 10:01:12 +0000
Manifest next update:     Sun 29 Jun 2025 10:01:12 +0000
Files and hashes:         1: 4Gkduvo6jeBwsHAi3prfdDQftPI.crl (hash: OS3hdBuxBi/h0x5QYkGOrQRmV95sn9SnWdGQyLh/HUc=)
                          2: ZcIsus6k0U4n68vd2BlSmmX0JTQ.roa (hash: GGkzJjiRy+xG+nAGWUrXuzxUvFxqlSxJYvMRGhTfLjg=)
                          3: fO5bykwkTB3KiAZuWcyGEBGhJE8.roa (hash: 3HfGLaMktk6F2ghb5LrLG+rGBzaC5K9KjLNpttW6IrQ=)
                          4: wFM8K8dCgcjVIF6EWdiQdlQNXyY.roa (hash: lm9Zbfc6llKnFMQrYcsYug5Fz4BrAVnfVm1lHsp7Cfo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:fb:e1:5b:1c:54:72:19:29:e4:07:94:00:49:42:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
        Validity
            Not Before: Jun 28 10:01:12 2025 GMT
            Not After : Jun 29 10:01:12 2025 GMT
        Subject: CN=72ca2ee9a0bfb3dcbe81dee904116e06dde59b8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e3:df:84:51:a5:3d:8c:66:f5:a8:9b:55:ae:
                    12:1e:69:69:a7:7f:49:be:e7:5e:d6:8e:48:0b:03:
                    11:ea:3f:48:f4:96:8c:49:13:7e:cf:2b:e8:3c:a7:
                    a0:46:23:d5:55:44:10:c5:7a:1b:17:63:a8:e6:6f:
                    be:08:74:71:c3:38:a4:49:cf:f0:08:4c:90:e7:82:
                    a9:95:fc:a8:75:f0:ff:ba:99:90:31:94:b6:bd:28:
                    ca:b3:78:f4:a9:8b:bb:81:91:8b:8a:a5:48:19:3b:
                    d0:c9:bc:43:bd:e6:4a:2d:a9:4e:47:f0:ab:a4:1f:
                    b6:f7:a2:01:e9:9d:95:ca:d5:26:39:22:09:e5:a7:
                    37:9f:c3:0e:22:01:59:a4:66:74:4f:04:34:0f:2a:
                    c2:83:80:94:96:30:1f:96:dd:0b:8d:7d:89:e6:83:
                    ba:8c:c8:45:86:e9:6a:a1:2e:2f:83:24:0d:86:5a:
                    a1:81:1b:2c:ef:30:b6:37:f2:27:c2:56:40:c5:4d:
                    20:8f:14:72:57:0e:3e:96:72:58:74:64:72:51:f1:
                    5d:4d:bf:80:52:cc:18:a7:6a:ff:4c:25:5f:72:c2:
                    8d:b7:71:0b:6e:0a:62:2b:78:9e:4b:f5:d5:fe:40:
                    a4:77:52:30:e1:be:b3:e6:02:2d:be:2c:e6:63:6d:
                    34:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:CA:2E:E9:A0:BF:B3:DC:BE:81:DE:E9:04:11:6E:06:DD:E5:9B:8E
            X509v3 Authority Key Identifier:
                keyid:E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:e4:d7:8c:72:25:19:85:24:a1:c2:5d:a3:aa:ee:84:63:d8:
         59:13:64:c7:e7:96:89:85:16:d8:4d:0f:16:eb:cb:1d:8b:6c:
         c1:1e:71:41:b2:c7:7e:08:5b:fb:8e:e5:2b:64:12:9f:92:d0:
         7e:f8:0c:be:a9:88:04:a7:14:c9:d3:7d:c5:c3:10:19:61:a6:
         9a:29:50:67:cf:00:58:00:d4:29:ef:bc:6e:87:90:32:0e:9a:
         f1:28:46:c0:84:36:fb:ee:1e:9e:6d:ec:31:d3:1c:d2:34:fa:
         1c:32:21:cb:43:96:c1:4c:00:be:dd:96:ee:42:5c:44:e3:cb:
         df:4d:51:4e:b4:ee:bb:a8:e5:f1:23:1f:30:a8:ae:e7:5f:c3:
         58:6b:61:fe:e0:40:65:7b:5b:06:53:db:58:35:42:3c:f3:50:
         f2:75:f0:91:4a:19:b1:f8:5b:86:f3:14:3e:2c:7d:45:1a:24:
         81:86:59:88:59:0a:90:dc:92:c2:f4:5f:00:04:19:e3:aa:2c:
         37:e4:f8:be:9d:5b:64:21:fe:0c:55:ec:7c:90:4c:16:24:fd:
         fe:51:36:9c:14:c8:1c:cc:25:d3:ad:60:b3:c7:40:44:eb:9f:
         41:b6:e2:a4:4d:5e:6c:8b:73:8a:f2:22:89:43:9f:f6:08:1f:
         fd:2a:06:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:52:54 2025 by rpki-client