Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
File:                     e4jUpKsYpZtmTauv2ziA3DWyK5E.mft (raw, json)
Hash identifier:          zpxkz8wlaWFRWdM8dr/vVU6S/I6oQ9Q7mc6mF2c44aY=
Subject key identifier:   6D:49:23:74:BE:A0:9B:22:E0:6F:B3:D6:AC:5A:E1:98:CD:CD:14:6E
Authority key identifier: 7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91
Certificate issuer:       /CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91
Certificate serial:       01974968083C193DDC6F846D6C1F7A8B84AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
Manifest number:          1582
Signing time:             Sat 07 Jun 2025 08:00:43 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:43 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:43 +0000
Files and hashes:         1: XWu-Cy3k4bG46jzu68jWDU2BUlE.roa (hash: oYNAZflFkpftatNeWIk412xMRJVARxZKG+FJn7voe4M=)
                          2: e4jUpKsYpZtmTauv2ziA3DWyK5E.crl (hash: nE0fQtOZ+T2w1D5XWV6P5K8J7fI0AMgrwMERnyVYm1c=)
                          3: jYKhHXV1OB2pC6LjAmSh2r6YUk0.roa (hash: 7C9VKQGPhygAtV4ulo4sNDzQRhMNsoU08LmAQx4ncWw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:68:08:3c:19:3d:dc:6f:84:6d:6c:1f:7a:8b:84:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91
        Validity
            Not Before: Jun  7 08:00:43 2025 GMT
            Not After : Jun  8 08:00:43 2025 GMT
        Subject: CN=6d492374bea09b22e06fb3d6ac5ae198cdcd146e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:67:9c:e0:29:ba:4d:b4:f7:40:47:5e:c6:e2:
                    a0:df:7f:d4:82:c8:ab:2c:61:40:3d:93:f8:97:60:
                    ae:59:da:16:8d:cc:1a:80:04:25:f0:d7:a6:a0:90:
                    3d:9f:c3:30:88:77:c8:fa:61:1d:95:29:f8:34:11:
                    6e:48:c4:93:5b:2e:13:a6:08:8e:16:4a:c2:93:2a:
                    01:a2:b2:78:9b:73:4f:40:24:2a:91:4b:f4:5e:82:
                    f0:0a:0c:f4:04:ae:51:53:ab:a5:ff:f3:bb:3c:15:
                    e4:c5:38:0f:d7:2d:ea:43:28:f1:5b:92:c5:d2:7b:
                    74:f5:2a:22:9e:14:5b:3a:2d:79:86:0b:54:29:a5:
                    cc:e1:6a:c5:1d:5c:7f:e6:d2:6e:b9:61:ee:7d:13:
                    e8:d9:37:b1:25:8a:55:6e:0b:2b:8e:2e:2e:99:f0:
                    9a:86:f4:c4:db:96:96:36:2e:90:5b:8c:34:8e:7d:
                    6c:2b:4f:80:e8:99:e8:a8:00:a9:e7:6d:6c:98:c2:
                    fc:b6:5c:ba:01:94:be:c1:ed:eb:e4:8f:71:13:f4:
                    32:63:25:5d:6d:78:7e:c6:1a:c8:18:3f:8f:35:b5:
                    c1:33:0d:19:b5:76:b8:35:e5:e5:78:fd:48:5f:34:
                    3a:aa:ae:1a:15:b7:ac:70:b8:6b:37:1b:0f:08:7e:
                    8e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:49:23:74:BE:A0:9B:22:E0:6F:B3:D6:AC:5A:E1:98:CD:CD:14:6E
            X509v3 Authority Key Identifier:
                keyid:7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:0f:f5:39:be:5f:9e:e4:01:91:5c:b0:67:0a:2c:3e:d4:10:
         b7:1f:4d:6b:a4:26:07:3a:e0:0b:8d:be:c7:e7:7f:29:5f:ef:
         2d:f9:2c:4f:9a:fa:fe:0d:82:e0:55:4a:05:77:d7:b9:54:1a:
         34:dc:8f:05:e5:de:35:74:43:72:09:bd:d8:42:4f:02:be:c2:
         f6:01:6e:1d:45:38:bc:e6:53:d4:7d:3c:08:30:b1:9e:91:8a:
         64:e0:de:f8:ef:02:f4:e8:71:d5:2f:46:36:0d:16:94:16:12:
         bd:01:d7:78:68:1c:1d:31:e7:ad:62:d7:62:a0:9d:6d:c2:ce:
         ba:6b:6e:64:c3:01:c2:1c:8d:13:e3:6d:1e:35:d9:1e:ff:2d:
         cf:08:73:d8:75:a2:6e:a9:d8:e2:0b:f8:23:46:49:07:b3:0e:
         6b:49:7b:b0:ab:03:a0:9c:b1:d1:0a:0f:aa:9b:f1:43:c4:c5:
         67:45:40:01:32:0a:05:20:76:8f:45:4c:49:7b:41:0f:72:66:
         5e:03:5d:66:95:78:1f:c8:0f:d9:d8:c1:92:78:ee:23:a0:4c:
         b5:72:2c:ec:6b:8c:e4:90:16:43:71:3b:94:1f:ee:8a:8f:25:
         6a:f9:62:ba:60:d8:8c:19:73:1c:6b:bd:4f:3f:b8:db:3e:1e:
         03:85:71:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:46:48 2025 by rpki-client