Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
File:                     ToWU69x9fPfaLgA8hNhqfBr4cbw.mft (raw, json)
Hash identifier:          JhsJseL1IDRj+T6JupJ9Vfv1gFBAfJlDoU7zznmLKq0=
Subject key identifier:   75:1C:DE:57:29:3D:73:F0:71:D2:BF:46:F4:F6:9C:03:E8:0D:13:C3
Authority key identifier: 4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC
Certificate issuer:       /CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc
Certificate serial:       0197B5C52B5F949BEEBBFA91DB8F19EF4FD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
Manifest number:          0457
Signing time:             Sat 28 Jun 2025 09:01:27 +0000
Manifest this update:     Sat 28 Jun 2025 09:01:27 +0000
Manifest next update:     Sun 29 Jun 2025 09:01:27 +0000
Files and hashes:         1: GanlBJdb2pr7VV04ogaTHUPUlUg.roa (hash: Vbl6ZyOGtSJws1SpPK0y8iRHBk5yj2N+r0ihm4gCy0w=)
                          2: ToWU69x9fPfaLgA8hNhqfBr4cbw.crl (hash: LfXr7g7goIifNzyIfLVkAeSOM02N7VCoYj4R6wD4Kes=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 09:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:c5:2b:5f:94:9b:ee:bb:fa:91:db:8f:19:ef:4f:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc
        Validity
            Not Before: Jun 28 09:01:27 2025 GMT
            Not After : Jun 29 09:01:27 2025 GMT
        Subject: CN=751cde57293d73f071d2bf46f4f69c03e80d13c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2b:45:da:6a:fa:44:e0:d1:e5:fb:95:b2:8b:
                    47:50:0f:a5:ec:bb:81:45:09:83:19:9b:7c:38:59:
                    26:26:0a:00:44:c4:17:69:73:48:21:ff:24:25:ab:
                    aa:29:9d:5c:ec:9e:16:c4:dd:1f:1e:f3:bd:5d:ce:
                    ce:04:32:59:09:b0:96:7e:82:06:5b:0e:37:02:be:
                    12:1b:ed:ab:7a:a8:57:60:6d:2a:52:10:66:59:ba:
                    78:26:b9:45:d7:ff:80:5a:38:3b:f6:07:be:a3:1e:
                    32:1f:74:8f:8d:5c:d0:81:f2:1e:bc:33:72:38:56:
                    59:86:32:33:0f:d0:51:26:ed:47:fd:8f:52:63:78:
                    0a:fd:b0:48:21:30:e5:9f:ea:7b:9c:59:41:fc:e2:
                    a5:31:28:4b:92:58:6b:65:49:05:c4:ab:de:dd:cb:
                    cb:dd:04:fc:12:9b:bb:e7:12:d6:c6:f8:2c:fe:bc:
                    47:2d:1a:f2:5a:b9:20:c5:07:e8:dc:c8:8b:35:5a:
                    6e:1c:ae:18:cc:8b:fc:92:20:e6:a7:04:71:23:52:
                    e3:4e:47:51:72:ba:f8:57:f8:6b:74:82:61:94:7e:
                    22:70:39:ef:ef:63:bf:c6:19:68:53:ca:fa:f2:01:
                    1a:c1:9e:18:60:5f:2f:0d:96:f1:b2:4e:66:dd:8a:
                    f1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:1C:DE:57:29:3D:73:F0:71:D2:BF:46:F4:F6:9C:03:E8:0D:13:C3
            X509v3 Authority Key Identifier:
                keyid:4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:83:de:5a:b6:2d:f2:95:12:6e:67:54:dc:b8:10:f3:41:05:
         33:cc:a8:c7:d2:15:64:ad:e9:97:ce:dc:51:32:fc:f6:42:6a:
         6a:2f:bc:1d:82:88:81:1a:5e:ff:69:3e:2d:fd:83:a2:81:5e:
         61:9b:de:19:23:40:bd:60:e2:e4:f3:b5:eb:54:65:38:87:bd:
         d8:8a:61:e3:43:00:8c:84:6d:11:a8:ec:04:c4:cd:ca:2e:20:
         80:7f:6a:b4:3b:0c:53:76:e2:ac:a8:8f:30:c2:32:3f:bf:d5:
         27:3f:3b:9f:cf:88:b5:fa:be:8f:e2:55:f0:3d:05:6c:2f:d4:
         13:9d:db:a2:17:3a:94:02:6f:d2:85:ed:a8:a2:90:d2:b4:1b:
         07:bc:ae:3d:80:d4:07:86:08:5f:6b:d9:a9:2d:42:de:ef:b9:
         1f:df:fa:20:fc:fc:0b:a6:8f:1c:d1:eb:36:ed:5c:e3:b1:46:
         d8:9a:d0:5b:1f:6a:2f:20:df:8a:e8:0f:b1:3d:24:98:b4:f7:
         11:12:dc:1e:7a:06:a1:9a:41:81:1c:2b:d3:2a:2a:75:82:77:
         4e:3e:2b:5a:be:19:7d:56:94:20:63:7a:fd:e5:88:c6:55:c0:
         06:b0:a8:f7:45:1c:ff:4d:63:e4:54:af:83:15:b7:ad:79:10:
         0f:79:15:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:53:04 2025 by rpki-client