Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
File:                     4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft (raw, json)
Hash identifier:          ASciQJonXGJkB6Bb9DZPxX7tB3qMAShuM2WOtvGNvwU=
Subject key identifier:   35:FD:59:63:D2:CD:25:2C:48:42:F9:65:FD:FE:E6:9E:6A:99:37:89
Authority key identifier: E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E
Certificate issuer:       /CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
Certificate serial:       01974B560C56E317B5113E07E30797A3038B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
Manifest number:          1411
Signing time:             Sat 07 Jun 2025 17:00:19 +0000
Manifest this update:     Sat 07 Jun 2025 17:00:19 +0000
Manifest next update:     Sun 08 Jun 2025 17:00:19 +0000
Files and hashes:         1: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl (hash: 3ALal8XjLG1+kOmjZaXvfK8fNB/NEX3nq0EHvCCc8SQ=)
                          2: YKk_IxXaH7sfK7_gRS3093UyRYo.roa (hash: COs47LOLhU2xn+3tfczoJAT+wVHUvoY7/hZnsmTjtwc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:56:0c:56:e3:17:b5:11:3e:07:e3:07:97:a3:03:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
        Validity
            Not Before: Jun  7 17:00:19 2025 GMT
            Not After : Jun  8 17:00:19 2025 GMT
        Subject: CN=35fd5963d2cd252c4842f965fdfee69e6a993789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d8:f4:e5:c8:e6:5d:22:03:ab:f4:30:f9:14:
                    c8:f3:da:3e:30:42:f5:e1:c5:5c:cf:c2:3d:b0:18:
                    96:36:ad:ea:e8:94:1e:a1:0c:6e:89:bb:97:ff:4c:
                    a8:92:62:15:a6:56:c6:4a:4c:fa:94:b0:fb:ec:b5:
                    94:e1:8d:3a:8d:f4:91:a8:92:b2:42:bf:c6:c2:5e:
                    6e:fe:09:56:65:23:f2:2a:6d:ef:37:97:bc:70:0f:
                    1f:8e:d8:3f:d4:4c:28:1f:94:56:fc:a4:39:ea:2f:
                    1d:f4:18:74:e8:ea:b8:07:3a:f9:5c:cf:65:e3:21:
                    5c:55:f2:8b:51:db:c0:d3:51:64:10:55:35:4d:3f:
                    be:a1:0a:a4:11:31:fb:4b:d5:3b:a4:a0:a1:ac:2a:
                    2b:fb:b7:fb:36:6a:2e:b1:7e:60:9c:28:98:d1:20:
                    c8:fc:c7:cd:28:c2:94:3c:55:02:84:b3:3f:49:37:
                    fb:59:86:75:02:c5:be:c1:2d:f7:2d:09:05:27:6d:
                    3a:d2:a1:02:56:b5:5c:a5:d5:2a:d2:fc:b5:83:37:
                    0a:6e:52:e5:7f:55:11:2d:62:23:51:2e:1f:41:b3:
                    7f:71:50:fa:8f:f9:b7:71:17:d3:4b:03:11:2b:02:
                    86:41:7a:42:b2:09:5b:81:7e:2f:14:ab:ba:ce:52:
                    6d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:FD:59:63:D2:CD:25:2C:48:42:F9:65:FD:FE:E6:9E:6A:99:37:89
            X509v3 Authority Key Identifier:
                keyid:E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:2b:d1:30:97:9e:3b:67:2b:ec:53:7a:0c:59:fd:1d:77:8f:
         d1:e6:20:b9:39:ff:47:f6:1e:54:e4:8b:55:76:da:13:de:5a:
         c1:ac:68:b6:76:ef:63:b0:34:d8:7c:b5:00:c6:f4:ec:3c:fd:
         70:0a:47:ab:95:be:d7:1b:4a:8b:f6:e8:b1:7c:c7:8b:42:2b:
         eb:79:c0:8a:95:f3:e5:0d:bf:00:df:85:54:40:9d:24:b5:f1:
         03:db:36:fc:24:ed:2b:58:1e:30:e9:0d:81:38:6f:74:30:f4:
         37:d1:73:7e:fa:2f:8c:8c:be:5f:19:11:32:74:50:96:3b:59:
         2a:a7:26:b6:71:78:92:16:db:65:fc:3e:e5:16:a9:76:19:40:
         f5:f6:48:87:6a:91:54:2e:2b:17:2f:3f:d4:e2:ea:09:ce:3d:
         53:df:ef:df:0e:49:de:90:ca:1d:0e:22:83:d8:18:c0:5a:9c:
         9d:98:3f:18:dd:b5:84:ba:e3:38:31:78:5c:2e:20:e7:d9:f6:
         98:09:f4:2b:0d:1e:83:a5:f9:82:fd:75:12:b1:0a:9b:69:21:
         72:df:5d:a8:94:27:4d:be:35:28:af:85:ee:b3:b9:fa:28:e8:
         22:1b:59:63:ea:c0:5e:22:38:45:1d:d7:de:ee:8f:6f:d3:4e:
         6a:a6:23:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:50:53 2025 by rpki-client