Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
File:                     4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft (raw, json)
Hash identifier:          SeqIbn93zvWK+GYLsmy1m6Zjrr0f9So1Iax+rOnNNaw=
Subject key identifier:   91:E9:42:B3:3E:DC:09:78:C6:72:1B:78:F4:E4:F0:DC:44:12:E1:25
Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
Certificate issuer:       /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Certificate serial:       019757C8805DAED3AAC05B7C1A31E5DD1B4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
Manifest number:          1592
Signing time:             Tue 10 Jun 2025 03:00:46 +0000
Manifest this update:     Tue 10 Jun 2025 03:00:46 +0000
Manifest next update:     Wed 11 Jun 2025 03:00:46 +0000
Files and hashes:         1: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl (hash: qzC+NJjWar+k0tm4gMXGkdrI2zzggdoliRB1iadoT20=)
                          2: 9le1peACXBsZiHPrKGecXIwJa-c.roa (hash: abfbtZOYUj++vuicVi05zrp5kGNnF9HGnL5WTr/9qlE=)
                          3: AP7i3LahdsovYM70eVMlu0H0VyQ.roa (hash: gGYT6xMXK+q6XWFTZbqb5glJj73Q26Rxlysft5i280U=)
                          4: De0WCETpJfbN-_KAZM7Z5RJy8Ss.roa (hash: Kcw5neScj8y714DABjN4V/ktwunea0zBp9yHTOn8VeE=)
                          5: WCta5h-gHZZ_q49m5T2AptEQh0A.roa (hash: UEF6WvkAssJSXqYGaMl3u6THXq5hVmf7y+Pa60Tl3Bc=)
                          6: WIgYr5JYPXYMftdONSWv5Do5-Gk.roa (hash: Z2h27NPSq0u/AueWae1+/QX3Wc6gNsL5Ji2s5jEoznc=)
                          7: fLAxf74rd6UX3gfivf6snrbKhmg.roa (hash: 2y9JcTYhuslVBan0BBae3TsVIsvndLj/5tEYAdt92BQ=)
                          8: oSdrWOCaJ0gBbDhOrwzjpvj5kgk.roa (hash: fLc644uvb/7KJE5lOwMGlDoVjD+MslKnwZyZQoL0QcU=)
                          9: obrA-ZoCgk0zS8hgJpmT67NaB2Y.roa (hash: z5uErOAwohXeLePMQPhb50zJXMj4qbujXHMXCoCiW5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:57:c8:80:5d:ae:d3:aa:c0:5b:7c:1a:31:e5:dd:1b:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
        Validity
            Not Before: Jun 10 03:00:46 2025 GMT
            Not After : Jun 11 03:00:46 2025 GMT
        Subject: CN=91e942b33edc0978c6721b78f4e4f0dc4412e125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fa:42:9e:a4:9a:a0:08:a9:7a:11:75:f8:e1:
                    75:1b:77:2c:3a:52:0e:df:75:45:7d:37:97:4d:52:
                    39:b2:4d:4e:5c:40:21:b2:71:13:db:37:f2:0e:af:
                    b0:e5:31:dd:c0:11:4c:b7:fe:30:74:d7:9b:ac:3e:
                    a2:e3:d7:40:87:9b:c2:49:90:75:3b:a4:72:4b:a5:
                    21:0e:19:98:4f:c3:1c:a3:7a:17:71:87:45:67:6b:
                    4b:8d:20:dc:62:63:a8:fc:5c:32:96:34:36:89:1b:
                    31:02:26:9e:d0:b4:ac:4e:52:3f:9c:66:9e:9d:14:
                    a3:1a:02:f0:37:ab:5c:70:75:59:98:42:f0:21:c8:
                    ac:0b:41:c6:3a:58:4d:64:b1:cb:57:1f:fa:00:27:
                    f0:43:c6:47:56:26:82:b5:0e:21:9d:30:cc:8e:2f:
                    e3:8f:6b:b9:a0:70:b4:dd:97:9d:39:09:02:c5:e8:
                    99:21:e5:c4:4e:85:80:fd:60:92:90:92:49:fb:24:
                    50:79:54:68:26:35:41:12:91:1e:b8:b4:56:ab:16:
                    47:d2:c6:a9:a6:09:c3:e2:40:b3:cc:0f:dd:f9:dc:
                    0c:39:87:8d:ae:d1:3c:12:93:67:62:80:a4:2b:ad:
                    a2:d1:59:7e:56:d0:10:68:17:ca:c0:2f:40:0a:be:
                    86:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:E9:42:B3:3E:DC:09:78:C6:72:1B:78:F4:E4:F0:DC:44:12:E1:25
            X509v3 Authority Key Identifier:
                keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:c4:b4:10:7a:05:a4:6e:00:47:9b:98:55:46:c4:a6:73:8c:
         66:9a:9e:b1:1f:99:a9:15:04:f3:16:40:b1:94:7d:2f:87:15:
         99:4f:2c:a1:b9:b9:d3:0e:59:c3:0a:e2:34:07:fa:ce:ae:5b:
         97:c8:5d:34:77:9d:f6:50:df:73:e0:f7:14:89:8a:21:b0:f8:
         8a:8b:dc:5a:d6:b3:7e:a8:f3:63:8c:f1:d3:f9:3e:e9:73:9c:
         3d:70:68:27:08:69:77:88:03:0a:4b:6d:79:c1:1d:a7:dd:aa:
         55:5d:86:12:c1:b1:42:bb:b3:21:10:3e:c1:32:1a:58:a4:f1:
         8c:18:70:a7:60:f0:5e:aa:58:8b:eb:3a:8f:ae:25:fa:6e:bd:
         4c:88:c4:2a:16:a4:e7:00:93:4c:f7:a9:d4:29:97:28:48:d5:
         62:1b:39:7c:78:12:af:2d:f5:e4:01:ac:36:3e:10:1c:d9:f5:
         db:da:64:8c:75:ba:16:4c:f2:f4:08:57:dd:57:08:21:0a:7e:
         58:75:ee:02:98:59:95:60:03:38:d2:f5:c8:82:2c:6d:39:5c:
         05:92:46:e9:f7:9c:1c:f5:06:36:d8:f4:29:f2:ec:dc:32:02:
         ef:99:d9:20:ae:8b:11:a8:59:a8:31:4b:96:56:ff:08:6d:59:
         e7:ec:81:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:12:36 2025 by rpki-client