Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
File:                     4_NSlr0mUtdWucSi8KzS_dp5CXw.mft (raw, json)
Hash identifier:          oI764j0WG525FJ3mPYrm/1vwYY4dGZcJMJo97oK7a+c=
Subject key identifier:   4B:F9:0A:00:05:79:2F:39:16:F0:47:2F:F3:8F:5A:D7:CE:C7:AB:98
Authority key identifier: E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C
Certificate issuer:       /CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c
Certificate serial:       0197B6A18523371DE3B244DF30B110407C0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
Manifest number:          04A7
Signing time:             Sat 28 Jun 2025 13:02:08 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:08 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:08 +0000
Files and hashes:         1: 4_NSlr0mUtdWucSi8KzS_dp5CXw.crl (hash: bpEk3PZpoglN3Vlm24IvDmggG2+649w8Hatopg8bGHI=)
                          2: F1IHbwYI_Vw2biKY9qAxXXgkI1s.roa (hash: x6r7SsZ8T6EvaiAfOOYnrFS57CvR635mJl2CHWctk7k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:85:23:37:1d:e3:b2:44:df:30:b1:10:40:7c:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c
        Validity
            Not Before: Jun 28 13:02:08 2025 GMT
            Not After : Jun 29 13:02:08 2025 GMT
        Subject: CN=4bf90a0005792f3916f0472ff38f5ad7cec7ab98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6b:4e:b2:00:a0:78:59:a7:f3:9f:f4:56:1a:
                    36:93:9e:4f:4e:ca:dd:49:ab:f4:95:a2:b8:38:49:
                    51:ea:cc:58:3d:e7:4c:87:1f:66:7d:4e:44:ad:f5:
                    7c:2e:ac:b1:0b:56:44:38:83:54:cb:d4:ac:3a:d8:
                    1b:b7:1e:b3:c4:f9:ea:2b:34:c0:01:66:af:c1:be:
                    30:ca:ec:b5:ec:81:f6:6d:32:ee:6c:ae:67:c1:46:
                    d7:f5:8d:34:8a:10:98:d1:f9:84:e1:e3:38:9f:3f:
                    8d:19:d7:87:f3:97:99:1e:ce:86:e1:4e:83:21:b6:
                    86:3a:3d:8f:6c:2e:d5:b8:dc:c4:7f:17:95:fd:6f:
                    fd:29:42:df:9e:4c:d9:38:48:a3:71:23:ff:4d:b3:
                    93:2a:d7:c0:3e:26:76:14:46:e1:b4:8e:ff:39:74:
                    38:5b:44:43:3a:f6:fa:91:1d:89:b9:26:d1:83:12:
                    b5:58:51:45:71:55:c1:0d:ab:23:10:92:2b:d5:76:
                    ae:23:3f:f8:6a:6b:39:9d:38:c1:e4:12:d4:9c:35:
                    42:77:6e:62:f7:aa:74:d6:46:84:1a:30:cc:b0:ac:
                    90:48:65:1f:bc:40:57:0d:87:8f:da:e0:f0:72:67:
                    2e:04:71:5d:02:45:0c:3b:8d:c8:da:a2:7d:01:4a:
                    31:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F9:0A:00:05:79:2F:39:16:F0:47:2F:F3:8F:5A:D7:CE:C7:AB:98
            X509v3 Authority Key Identifier:
                keyid:E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:c9:6f:94:06:ab:87:58:8d:4b:4e:79:cc:c9:ac:47:1a:c0:
         af:63:f8:d6:fd:59:71:9a:83:0f:48:8b:ab:9d:d2:43:a7:9a:
         8a:15:04:c1:b4:5a:c5:10:52:c2:a8:cd:ec:55:44:30:74:e9:
         fb:a2:69:62:15:fd:d3:85:be:f4:6e:14:7c:6a:9d:06:81:41:
         41:92:71:31:fe:58:7f:41:23:de:09:f0:ee:67:67:6c:26:ee:
         aa:e0:dc:50:9a:44:a6:3d:bc:62:88:10:6d:64:d5:53:53:75:
         71:f6:cf:84:de:dd:fb:fc:18:05:37:fb:5b:05:7f:ef:b6:45:
         3a:a7:f8:cd:f9:2a:c2:dc:5f:bf:f0:fd:84:f3:3a:f1:57:1a:
         af:4b:d8:02:bb:03:48:46:dc:57:80:c0:37:0e:1b:d5:ed:dd:
         e1:01:3a:7a:b5:64:a4:bb:29:dc:c3:eb:e6:6e:e8:dc:e0:be:
         86:c1:63:55:4c:e5:3a:e6:10:9a:a2:4b:4f:28:6d:97:c8:7b:
         12:bf:74:7c:45:90:6a:33:85:b9:bc:ee:30:f4:22:9d:18:b2:
         c5:37:c1:18:85:65:e8:00:f3:88:3d:45:b9:ba:24:c2:f2:af:
         24:c2:cc:b9:de:d2:d6:24:36:bf:79:3b:42:3c:dd:07:a3:c9:
         da:c3:50:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oYUjNx3jskTfMLEQQHwMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZjM1Mjk2YmQyNjUyZDc1NmI5YzRhMmYwYWNkMmZkZGE3
OTA5N2MwHhcNMjUwNjI4MTMwMjA4WhcNMjUwNjI5MTMwMjA4WjAzMTEwLwYDVQQD
Eyg0YmY5MGEwMDA1NzkyZjM5MTZmMDQ3MmZmMzhmNWFkN2NlYzdhYjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02tOsgCgeFmn85/0Vho2k55PTsrd
Sav0laK4OElR6sxYPedMhx9mfU5ErfV8LqyxC1ZEOINUy9SsOtgbtx6zxPnqKzTA
AWavwb4wyuy17IH2bTLubK5nwUbX9Y00ihCY0fmE4eM4nz+NGdeH85eZHs6G4U6D
IbaGOj2PbC7VuNzEfxeV/W/9KULfnkzZOEijcSP/TbOTKtfAPiZ2FEbhtI7/OXQ4
W0RDOvb6kR2JuSbRgxK1WFFFcVXBDasjEJIr1XauIz/4ams5nTjB5BLUnDVCd25i
96p01kaEGjDMsKyQSGUfvEBXDYeP2uDwcmcuBHFdAkUMO43I2qJ9AUoxlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEv5CgAFeS85FvBHL/OPWtfOx6uYMB8GA1UdIwQY
MBaAFOPzUpa9JlLXVrnEovCs0v3aeQl8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNF9OU2xyMG1VdGRXdWNTaThLelNfZHA1Q1h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81NzQ5NjAtZDY4ZC00MDY5LTk1NmQt
MDU5MDhjNjNiNDVhLzEvNF9OU2xyMG1VdGRXdWNTaThLelNfZHA1Q1h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi81NzQ5NjAtZDY4ZC00MDY5LTk1NmQtMDU5MDhjNjNiNDVh
LzEvNF9OU2xyMG1VdGRXdWNTaThLelNfZHA1Q1h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8lvlAar
h1iNS055zMmsRxrAr2P41v1ZcZqDD0iLq53SQ6eaihUEwbRaxRBSwqjN7FVEMHTp
+6JpYhX904W+9G4UfGqdBoFBQZJxMf5Yf0Ej3gnw7mdnbCbuquDcUJpEpj28YogQ
bWTVU1N1cfbPhN7d+/wYBTf7WwV/77ZFOqf4zfkqwtxfv/D9hPM68Vcar0vYArsD
SEbcV4DANw4b1e3d4QE6erVkpLsp3MPr5m7o3OC+hsFjVUzlOuYQmqJLTyhtl8h7
Er90fEWQajOFubzuMPQinRiyxTfBGIVl6ADziD1FubokwvKvJMLMud7S1iQ2v3k7
QjzdB6PJ2sNQvQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:05:54 2025 by rpki-client