Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
File:                     rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft (raw, json)
Hash identifier:          93KQMrJddmKgFqrdGR4seIxOZ3VKyicxa13nVHmywVw=
Subject key identifier:   4F:16:7B:ED:99:F9:83:41:0D:89:55:FF:8A:9E:51:A3:19:52:4F:58
Authority key identifier: AC:6E:3E:13:11:14:39:14:7F:65:D3:37:D5:F0:B1:BC:2E:D7:94:34
Certificate issuer:       /CN=ac6e3e13111439147f65d337d5f0b1bc2ed79434
Certificate serial:       0197B77CA9ECB1E5B8D70DC8E88F75462720
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 17:01:29 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:29 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:29 +0000
Files and hashes:         1: AwXuQoOBDpLkL6JkvNNI78Almh8.roa (hash: rgsGgbJMkxlD2Xt53P3qCIDlwFDG3I1YNJZMV8rGCso=)
                          2: rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl (hash: ToRc5+d/R6VDzzrn27FFSaCWOYhIML6AVl4g9GyzM7s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:a9:ec:b1:e5:b8:d7:0d:c8:e8:8f:75:46:27:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac6e3e13111439147f65d337d5f0b1bc2ed79434
        Validity
            Not Before: Jun 28 17:01:29 2025 GMT
            Not After : Jun 29 17:01:29 2025 GMT
        Subject: CN=4f167bed99f983410d8955ff8a9e51a319524f58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:92:80:9a:a6:4a:3e:96:f1:62:1c:ef:8c:60:
                    5f:28:9b:26:a4:46:d7:cd:79:d0:0f:85:e8:85:8d:
                    c3:a9:f7:0b:86:f5:c7:64:ff:f4:8c:d3:44:de:3b:
                    02:f4:d8:b0:d7:1a:fc:1a:7c:da:cf:ef:d8:a1:d4:
                    16:75:95:fe:cd:79:ca:21:9d:6b:65:04:6f:f9:40:
                    47:42:7d:18:b3:51:c2:e9:7f:d5:bf:40:bd:4b:11:
                    55:de:70:2e:c8:7e:6a:67:06:85:a5:bf:44:f8:58:
                    ba:f8:23:a1:75:fe:47:6a:5d:e9:60:33:97:58:96:
                    86:85:c4:1d:ef:bd:a1:f6:1f:76:a5:30:a9:30:db:
                    7b:3f:ea:bc:b3:f0:33:54:ca:b3:ed:88:2c:96:54:
                    c6:36:d6:9a:49:ec:36:f1:38:a3:40:8a:9d:af:2c:
                    c3:db:b6:04:94:94:da:62:d2:d7:00:0a:70:43:c3:
                    b1:26:97:81:2d:f7:7e:ee:78:c1:4d:23:27:52:48:
                    5f:d9:ca:3a:cd:16:4f:72:60:8d:0e:ac:92:59:38:
                    cb:0e:27:e5:33:2c:82:c7:ca:2b:f1:b5:ab:9c:34:
                    76:30:02:5f:ba:a5:3b:92:70:46:9c:4f:ef:d0:a9:
                    73:75:bf:92:fc:6e:e2:f8:10:b2:bf:c4:a5:3f:50:
                    d4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:16:7B:ED:99:F9:83:41:0D:89:55:FF:8A:9E:51:A3:19:52:4F:58
            X509v3 Authority Key Identifier:
                keyid:AC:6E:3E:13:11:14:39:14:7F:65:D3:37:D5:F0:B1:BC:2E:D7:94:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:bd:ee:a7:dd:9c:c9:a8:e4:17:ab:77:d5:92:f0:fe:21:80:
         dc:ab:b3:ad:9c:5a:f1:43:9f:5c:6e:14:b5:85:c8:2c:ff:ce:
         29:be:ce:cb:1b:c3:b8:a5:66:3b:2d:3a:40:44:09:29:5c:88:
         2b:74:64:b5:f0:c7:06:92:95:24:37:e0:8b:3c:60:af:f8:dd:
         5a:df:1d:b0:03:57:8f:9a:da:a5:15:a2:fc:cc:fc:e0:2f:73:
         96:dc:a2:46:90:6f:a8:9f:cd:7e:4b:3f:af:4a:75:2a:50:aa:
         aa:ec:95:9d:a7:72:96:97:f0:0c:97:d9:62:39:bb:37:e1:e0:
         36:d1:0a:cf:db:a6:e1:0c:24:a1:f1:6d:1b:63:95:97:b4:fe:
         1f:a9:bd:a4:c0:50:0e:df:b7:81:fc:9c:4f:29:ae:74:30:1a:
         f2:11:1f:f0:93:e5:02:02:c4:cb:70:e0:9d:84:75:71:c8:22:
         43:df:8d:e6:10:5d:7f:6c:e1:45:0c:a4:97:0a:8e:60:96:d9:
         37:0f:3a:1a:40:4d:f0:a0:f7:35:b2:ea:9b:94:ed:2f:66:28:
         46:ca:4b:2e:21:53:1b:7b:0d:57:aa:dd:d3:e6:48:5f:5f:59:
         80:dc:57:4a:84:b3:66:e0:b7:e2:69:7f:6a:84:1b:a3:9f:9e:
         0f:31:44:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:26:54 2025 by rpki-client