Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
File:                     4jDeX9PCRVFzumlqmUQdliDYHTg.mft (raw, json)
Hash identifier:          zxVpj/Ta0uW5RLulAZPu+N8uX2gY/PrOCOwz8coDQHk=
Subject key identifier:   31:B9:B6:87:FC:15:C0:5E:7E:71:7A:76:7C:11:90:3B:4C:8E:C8:DE
Authority key identifier: E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
Certificate issuer:       /CN=e230de5fd3c2455173ba696a99441d9620d81d38
Certificate serial:       019749310F9B6C91B28827383251EE6D65BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
Manifest number:          0B94
Signing time:             Sat 07 Jun 2025 07:00:41 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:41 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:41 +0000
Files and hashes:         1: 4jDeX9PCRVFzumlqmUQdliDYHTg.crl (hash: lEwBBWGRnGmZQLs9q7Iw/EL1haFHjKomGvXK8CkgacI=)
                          2: qADZbjUspL_WRqhq7wvNpX-fT-E.roa (hash: 8V+RbGGUYULjGMvZVkBND643qQkjbKJgabtjnmu0hrU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:0f:9b:6c:91:b2:88:27:38:32:51:ee:6d:65:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e230de5fd3c2455173ba696a99441d9620d81d38
        Validity
            Not Before: Jun  7 07:00:41 2025 GMT
            Not After : Jun  8 07:00:41 2025 GMT
        Subject: CN=31b9b687fc15c05e7e717a767c11903b4c8ec8de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:19:60:71:30:fc:73:92:e4:87:6d:59:94:36:
                    a3:ac:6b:57:12:a4:81:86:97:52:66:94:e7:1e:17:
                    eb:c0:59:f8:c4:47:74:31:a8:10:f7:f6:54:97:2b:
                    f7:80:50:80:58:d8:eb:82:a4:56:b7:af:66:b7:47:
                    b4:d1:08:48:38:41:56:18:e3:41:f0:38:fb:be:83:
                    0d:4e:2b:f6:71:8b:c0:46:91:69:19:3c:a2:c9:d9:
                    70:b1:05:cc:3c:1d:30:81:0b:2c:69:f3:6b:7d:8a:
                    d3:5d:68:81:c6:05:03:af:30:da:31:53:70:84:99:
                    71:a7:37:e2:7d:ac:50:88:12:7a:b6:a6:ba:6c:c3:
                    11:cf:9e:75:87:e7:89:5a:f9:7e:27:4a:38:bf:01:
                    7e:0d:55:58:ef:64:f5:40:cb:e2:11:45:5e:11:b7:
                    d1:95:fd:60:cd:5a:33:7a:78:5c:31:12:8c:8b:a6:
                    ef:d9:5b:46:1c:80:ca:fc:10:92:0f:1a:51:67:ad:
                    72:56:77:37:eb:2a:e9:14:e4:3a:99:9d:b4:1b:a6:
                    5c:c5:d8:b5:f5:7c:2c:10:12:68:50:5e:07:00:1b:
                    c7:42:80:5b:b7:2c:04:76:c8:e6:68:69:b5:49:f7:
                    f1:4b:57:26:50:fc:bd:f1:37:d7:7b:08:28:ac:ee:
                    6a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B9:B6:87:FC:15:C0:5E:7E:71:7A:76:7C:11:90:3B:4C:8E:C8:DE
            X509v3 Authority Key Identifier:
                keyid:E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:db:fc:27:fd:0a:9e:53:80:f3:20:dc:e8:2d:46:ea:2a:f9:
         e2:c9:84:c6:73:95:cc:d7:94:7b:73:26:84:70:51:df:6c:af:
         c1:86:79:68:d6:8e:b0:62:df:7e:45:28:df:4c:42:09:48:16:
         5d:38:ac:19:ed:4a:b8:f4:5f:a7:71:4b:e4:17:4b:1c:53:8b:
         7c:67:ac:80:c4:7b:df:77:ab:9f:98:af:42:17:ee:d3:ca:46:
         ec:4e:b4:c8:92:ac:b9:d5:0b:ba:51:53:44:63:b7:b2:8e:f4:
         10:07:da:02:7e:b0:aa:b2:93:17:ed:2d:0e:3c:ac:fa:72:29:
         7f:af:68:9f:cb:52:8c:62:f3:00:08:a4:4a:f6:43:d0:83:c2:
         12:1d:b7:7b:07:ea:de:5f:d6:d1:56:7f:2d:43:62:d1:51:45:
         07:14:ae:30:df:88:70:33:3c:5e:25:63:49:c2:19:dc:96:fb:
         a8:ed:e9:08:29:13:21:7f:75:45:29:81:1c:08:80:04:99:eb:
         88:12:66:c7:48:8d:07:07:3a:5e:df:a0:a1:7b:5b:0d:3f:9c:
         6d:ec:c3:d2:44:b7:2c:a4:ae:52:8f:92:6a:59:85:b9:85:9e:
         4d:3e:3e:6f:cc:e9:ca:a0:6d:8d:63:a4:3b:90:00:27:75:5f:
         29:5f:d1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:47:20 2025 by rpki-client