Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft
File:                     4PL1Rd2yNOOD02uKjWtWo43XL4k.mft (raw, json)
Hash identifier:          LjpG0Z5ZXtZavTBRq+Id5Y5pOcQ1x5EUzRtG1QJ+J8Q=
Subject key identifier:   D3:64:2A:79:79:DC:F7:1A:C4:78:DF:D0:E1:10:2C:62:63:50:DD:D8
Authority key identifier: E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89
Certificate issuer:       /CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89
Certificate serial:       0197BC6BBDA64C307E6C587B63804CA1EF05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft
Manifest number:          07CA
Signing time:             Sun 29 Jun 2025 16:01:06 +0000
Manifest this update:     Sun 29 Jun 2025 16:01:06 +0000
Manifest next update:     Mon 30 Jun 2025 16:01:06 +0000
Files and hashes:         1: 4PL1Rd2yNOOD02uKjWtWo43XL4k.crl (hash: Bjx6TY1x2YfyJNOqMO16G8gjHiqbOynZ3XASZj14OM8=)
                          2: XiEwAhXSmb2kKQcnLFCKbFJrlrE.roa (hash: Yd4FhLWqP85JzI7J+m2iFxGbkWfW5fOZQ9iT2O1gqws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 13:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:bc:6b:bd:a6:4c:30:7e:6c:58:7b:63:80:4c:a1:ef:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89
        Validity
            Not Before: Jun 29 16:01:06 2025 GMT
            Not After : Jun 30 16:01:06 2025 GMT
        Subject: CN=d3642a7979dcf71ac478dfd0e1102c626350ddd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:63:5e:2f:1d:56:1a:29:3e:33:67:44:2f:c0:
                    c4:b9:e0:dc:2e:1d:04:f5:e8:23:42:0b:84:2d:ad:
                    0e:32:f9:a6:c7:b7:ad:ea:fc:b6:21:cc:52:9c:cf:
                    78:a8:b0:9a:ef:a9:56:0d:2d:ab:5b:f4:de:0f:cb:
                    7b:54:6e:82:a7:cf:90:84:e4:e3:d6:85:5e:89:07:
                    e2:0f:81:da:35:11:a8:45:e0:ec:59:dc:bc:08:58:
                    3c:3e:25:5f:7a:1c:4e:44:c6:10:af:59:bd:e4:b3:
                    ed:fc:79:46:f4:af:55:19:f2:f6:b3:ec:b2:cd:e8:
                    1f:93:8e:47:5d:0b:79:24:8b:58:03:b6:e8:2a:2e:
                    7b:94:a2:6c:68:56:9b:f3:40:c6:b4:38:2a:49:5e:
                    1b:61:53:55:ae:64:33:87:46:1f:e4:5b:ef:45:a7:
                    e8:60:46:d8:b6:f5:e5:5b:76:ba:4f:a7:41:81:45:
                    30:10:fb:97:f0:81:15:57:79:ef:e9:2f:fe:a7:f2:
                    ee:91:e0:7e:3b:20:1d:d7:03:12:5c:25:17:d3:31:
                    53:ff:37:f5:f0:54:fe:59:cb:a0:53:79:de:79:43:
                    93:c5:d8:c4:1c:35:61:55:89:7b:5c:cd:da:6e:8c:
                    8f:70:d5:f9:7a:f5:64:79:47:c4:30:56:0b:2d:17:
                    2a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:64:2A:79:79:DC:F7:1A:C4:78:DF:D0:E1:10:2C:62:63:50:DD:D8
            X509v3 Authority Key Identifier:
                keyid:E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:9e:a7:80:3c:03:61:e7:d5:de:3c:2e:15:a6:d7:f4:da:8f:
         b3:64:d8:71:22:fa:c4:e3:92:7e:5b:d5:a1:91:53:9a:04:82:
         ab:28:41:41:4b:bf:55:6c:02:f3:92:1c:18:ae:0c:a0:05:17:
         39:4b:35:8b:12:06:18:0c:4b:c5:c9:63:57:bc:fd:83:43:a1:
         9a:94:ae:45:09:37:ef:38:c6:4d:a0:05:2e:36:3e:38:fd:28:
         71:42:be:11:f5:fa:af:94:0e:78:fd:b8:e3:ec:a2:d6:98:46:
         d3:85:ec:c1:81:f8:81:e7:31:88:c6:99:dd:f2:f5:fa:72:d6:
         02:57:86:51:3d:a1:7d:9f:a3:e1:43:ad:89:47:cb:b7:5d:18:
         c7:d7:f2:4c:69:bf:25:ca:32:86:15:50:ea:85:47:d2:06:94:
         9b:a9:34:3a:b0:d1:e7:bb:35:3b:bb:17:c9:61:3d:30:cc:d5:
         7f:b1:54:a5:c6:fd:ae:23:b9:d7:40:80:a0:b7:43:23:5e:ce:
         bd:4d:0e:65:ab:f6:9c:e7:01:ea:41:f5:01:f0:fe:64:7b:c0:
         8c:c5:a0:1c:37:d6:d0:14:9c:10:31:7f:de:43:93:35:f3:d7:
         e2:ff:08:b9:c4:3e:74:71:c3:d5:37:ac:1a:8e:f7:87:6e:9b:
         7d:c1:2f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:10:59 2025 by rpki-client