Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
File:                     4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft (raw, json)
Hash identifier:          F2oQUfWezTsVmDeeTZz9R8PtSX1XSa6cXnlUaAtPB3g=
Subject key identifier:   13:3A:E6:42:0A:DE:F2:4B:7C:70:71:DB:0A:AF:AE:2E:55:B2:67:AE
Authority key identifier: E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2
Certificate issuer:       /CN=e04b28a19dbf534ad61cb049986e5424c3284de2
Certificate serial:       0197B5FC6739E6FDD6D4BAEEF24303566A71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
Manifest number:          03DD
Signing time:             Sat 28 Jun 2025 10:01:46 +0000
Manifest this update:     Sat 28 Jun 2025 10:01:46 +0000
Manifest next update:     Sun 29 Jun 2025 10:01:46 +0000
Files and hashes:         1: 2G3KAngu1j7cVjl09bHkVR1Q8mU.roa (hash: U0mdK9ze04Jz/Qx2ufdQLy/tw5yhbjVYG2kiEygUxAU=)
                          2: 4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl (hash: NGWeBlGEMQUk2JoqkkHjvjFiuC+MxN89jfv257/ZWFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:fc:67:39:e6:fd:d6:d4:ba:ee:f2:43:03:56:6a:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e04b28a19dbf534ad61cb049986e5424c3284de2
        Validity
            Not Before: Jun 28 10:01:46 2025 GMT
            Not After : Jun 29 10:01:46 2025 GMT
        Subject: CN=133ae6420adef24b7c7071db0aafae2e55b267ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:16:65:33:c6:af:f5:5b:50:66:82:d2:cb:74:
                    e3:2e:b1:64:76:c2:11:9e:cd:c2:8e:55:a0:d0:a9:
                    88:38:65:2a:8d:b1:e3:ab:83:8b:84:ec:f7:0c:6e:
                    ab:ec:74:41:56:44:88:92:a6:2b:52:83:49:32:b1:
                    6a:77:1b:37:68:eb:97:69:58:12:8b:ec:46:54:4e:
                    e8:8f:5f:8e:7f:b4:58:95:25:a0:60:e8:11:3d:d4:
                    9d:d5:72:d5:fe:68:10:59:13:16:e4:da:4a:7b:50:
                    37:55:96:65:f1:45:e1:df:93:eb:2d:55:81:cb:2d:
                    42:30:15:fe:3c:f7:31:1d:1e:0c:ac:ca:76:d2:c4:
                    e6:26:d4:2c:54:58:50:d0:39:a8:31:9a:e6:6a:85:
                    83:b8:7b:56:90:70:e8:11:0c:61:41:cb:f6:01:7e:
                    10:b0:ce:e4:35:30:46:58:67:a3:0f:d4:0d:9e:0b:
                    69:b7:b4:6b:14:fc:0d:bc:81:89:ce:a8:5c:3f:73:
                    70:c9:69:35:e7:60:25:8a:76:d9:5b:9f:4d:40:a0:
                    c8:9a:96:85:2e:77:55:19:18:d3:5c:fd:29:60:41:
                    35:83:b3:21:50:bc:a5:f9:6b:71:4e:d4:bd:11:b8:
                    a6:2a:29:06:8c:c3:55:50:6c:a5:8d:f7:0c:9f:a5:
                    a2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:3A:E6:42:0A:DE:F2:4B:7C:70:71:DB:0A:AF:AE:2E:55:B2:67:AE
            X509v3 Authority Key Identifier:
                keyid:E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:0c:ad:6d:c4:8a:d9:f0:71:3a:12:75:88:77:68:a2:7c:c6:
         ff:76:86:66:77:11:f4:fc:5b:26:4b:fa:d0:24:50:65:57:18:
         cf:76:23:a1:f6:10:42:72:e2:c0:80:81:66:66:63:7f:74:d7:
         95:51:54:47:de:c1:54:ec:f7:4c:f5:f9:e3:49:14:b8:e2:07:
         2a:1b:fd:fd:f6:02:c3:63:2f:01:93:f8:22:04:d7:44:d3:fc:
         2d:7d:a5:0f:b0:61:31:10:a3:a0:e3:29:45:94:dc:35:f8:75:
         67:4d:25:36:2e:fd:07:19:8f:91:dd:44:b5:80:82:f3:ae:60:
         f8:6f:d4:02:e0:ac:7d:9e:5b:51:77:86:ff:88:bb:41:37:04:
         66:43:1a:d7:1a:b9:d6:b3:32:b4:22:24:5a:a7:d9:1e:5e:ad:
         b1:6c:78:be:08:e8:da:5a:52:7c:16:e9:7b:6f:ba:08:30:9a:
         72:38:bc:58:df:c0:20:af:ad:ac:22:bd:54:52:16:94:f2:31:
         9f:d0:a4:5d:67:b7:02:31:f8:76:e9:1f:7c:a2:a4:86:cf:3d:
         10:66:b3:d3:02:30:3d:3e:a0:4d:2b:ef:fa:34:96:18:98:e3:
         64:0a:49:b0:40:21:5c:a8:cc:dc:c8:43:b5:02:36:a8:ba:cf:
         70:ce:0f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:39 2025 by rpki-client