Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
File:                     4fP23EYQ9sm7qkUyERc45JO2rfA.mft (raw, json)
Hash identifier:          6GkFYfZoZIgc9ARyHKqm+BRYKiCy/sXb4ZXzc9R+EWI=
Subject key identifier:   9C:ED:B7:3B:70:51:4E:6E:93:78:37:F9:F6:57:28:AF:09:8D:C9:61
Authority key identifier: E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0
Certificate issuer:       /CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
Certificate serial:       01975D935E8392BAF25AD4411863DA35A8AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
Manifest number:          0389
Signing time:             Wed 11 Jun 2025 06:00:28 +0000
Manifest this update:     Wed 11 Jun 2025 06:00:28 +0000
Manifest next update:     Thu 12 Jun 2025 06:00:28 +0000
Files and hashes:         1: 0jdBY_E5YLyLUu_FzsB8buFy_Wg.roa (hash: m69bij1M0dFLciXpzKZZy7Clt1a/35aqA5PNXsZojag=)
                          2: 4fP23EYQ9sm7qkUyERc45JO2rfA.crl (hash: z/l8JYZIIExD7Sn2zQMoQloD9u2q4FUBlNbVgjmBi+A=)
                          3: xDz5khWz84DZoygENZz9smDY9DE.roa (hash: ImBhN/9eW34k/DBkodgK0kDXEWCtP6C29MLbYuo8Lq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5d:93:5e:83:92:ba:f2:5a:d4:41:18:63:da:35:a8:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
        Validity
            Not Before: Jun 11 06:00:28 2025 GMT
            Not After : Jun 12 06:00:28 2025 GMT
        Subject: CN=9cedb73b70514e6e937837f9f65728af098dc961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:08:72:6c:9b:32:4b:1b:f0:f2:b4:e2:3c:28:
                    b1:d8:d6:dc:67:e2:03:fd:78:da:1b:55:49:88:d1:
                    64:bf:64:41:57:09:be:05:5e:f2:5e:5d:e9:8c:43:
                    3f:3a:4c:f3:55:cf:26:19:b4:9e:30:a0:0a:c8:78:
                    25:ac:50:c8:82:1d:a7:9a:6d:eb:8b:1e:df:a4:c7:
                    ba:33:79:b6:6a:cc:b7:bd:5b:a0:e7:ef:ff:77:db:
                    cd:45:7d:73:80:4e:bd:95:3c:cd:40:da:fc:24:a1:
                    8a:92:ac:52:46:88:48:a1:82:eb:42:c2:a7:74:3f:
                    7e:62:75:d6:00:bb:c9:2d:8f:35:1f:b3:a5:ac:8a:
                    be:c5:39:18:bf:bc:b1:17:0d:b3:c3:e0:d8:37:4f:
                    73:2d:4e:f1:6c:69:88:31:d7:5e:90:96:f4:c5:ec:
                    ed:cd:1a:43:f6:1e:38:b7:fb:fa:ae:a8:0c:b2:08:
                    d3:74:24:f0:c1:07:77:d2:fe:0c:82:82:8e:f5:b5:
                    94:4d:4d:6b:e7:ce:94:bf:1a:a1:95:bc:9a:06:b4:
                    9e:d2:35:02:79:b3:d5:1a:d9:57:94:62:4c:0e:64:
                    83:26:17:10:38:39:59:99:a6:d4:3b:7a:74:89:bd:
                    d2:d2:12:f7:00:ba:4d:fc:90:32:b9:51:bc:9e:27:
                    49:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:ED:B7:3B:70:51:4E:6E:93:78:37:F9:F6:57:28:AF:09:8D:C9:61
            X509v3 Authority Key Identifier:
                keyid:E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:2c:f9:e2:f9:67:53:07:8a:2b:d5:fa:a8:17:e6:af:7e:aa:
         04:14:30:a6:c6:49:d9:a7:d9:3d:03:51:84:f4:27:c0:05:d7:
         9d:c8:a5:f7:89:97:5a:84:10:73:ad:97:80:84:75:aa:72:6e:
         ee:c2:3b:cb:42:10:64:f5:6b:a5:d9:42:e3:ae:c8:2c:2d:00:
         5a:a1:0c:2f:df:46:73:4a:19:aa:56:ce:12:be:9e:45:e7:e1:
         98:fe:f8:1b:3e:26:67:ca:f5:d3:c6:5b:ec:38:15:c6:a9:c8:
         bf:23:ae:61:6d:6d:38:9c:52:f8:dc:ef:0c:c5:79:4c:f2:d0:
         29:8b:f9:7a:99:12:41:6e:8b:47:27:80:3d:e4:87:7d:97:8c:
         b4:e8:d0:c0:e3:18:d5:2e:8d:f6:05:9d:d4:c0:ec:19:e0:ec:
         33:fd:8a:7b:01:13:a3:65:4a:3d:e3:e3:48:ce:d8:de:47:87:
         1f:aa:90:24:80:c8:38:2c:e7:c4:d5:d0:bf:f0:65:10:f7:72:
         df:d4:c1:5a:01:79:e1:f1:38:72:9c:32:42:5a:18:0f:19:47:
         ee:4c:b8:9e:e9:ce:e4:ef:1f:0b:f0:7d:4b:bb:b5:18:08:1e:
         10:05:8f:f3:af:8a:b3:83:93:89:fc:fc:e5:1b:37:e4:ab:34:
         c5:70:09:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 10:01:02 2025 by rpki-client