Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
File:                     4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft (raw, json)
Hash identifier:          sHZREy81ZPtE/Sc2hy12cFHRvV268qwS1eBdVFHD/QE=
Subject key identifier:   2A:39:DB:32:36:38:B5:F8:68:98:C0:F9:AF:D4:B1:97:06:7F:63:60
Authority key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4
Certificate issuer:       /CN=e10d5c29a3439703d89b5abf03a75d861771bef4
Certificate serial:       01974967EDDA7AD951986CB499AFD1747D09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
Manifest number:          15D2
Signing time:             Sat 07 Jun 2025 08:00:37 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:37 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:37 +0000
Files and hashes:         1: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl (hash: /pj/Aupy8mLMP9dKnWBsfMOZLkumqp8/wEm3n3jNuzk=)
                          2: OrmnaIv7Ykw3uSFBs-BQky_7bs4.roa (hash: vkDAHcA+JuGp7WyKg9OyBQapexmqkZf8f/9s6IqTZIM=)
                          3: bLr6r57MqGHm8nK9w2IYUZH55ic.roa (hash: jUNvR24icg+/HoCVfLpAKbv7/xE1cDm9e9GWJS4plns=)
                          4: mslAiLHq2RhVoMBrlDZ7StvNRw0.roa (hash: 9NtVz0Q/+ObnJjRSZZ6ysBHLYm1GnmXiKVFqUmldHlw=)
                          5: pNPaH5D4xPmlPFV22uJzIwwP5IE.roa (hash: Pi2NdX9kNLRUHiHGw5FRE4YwS0JXW5XgtjtIrUJ6EM4=)
                          6: s_WZrtHOlNd7wkkUhFGq2ejwDiQ.roa (hash: lRuZA83oB7sCJB/yZFB/ga5/o6PvU/KmR8+cgqPbV88=)
                          7: xxqAQj5ApVpCjQK_UbA4qZzprNM.roa (hash: kbcAcd5UMZoHVsf0Y1OkYvbV4qpft1douUqZabuqL8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:67:ed:da:7a:d9:51:98:6c:b4:99:af:d1:74:7d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e10d5c29a3439703d89b5abf03a75d861771bef4
        Validity
            Not Before: Jun  7 08:00:37 2025 GMT
            Not After : Jun  8 08:00:37 2025 GMT
        Subject: CN=2a39db323638b5f86898c0f9afd4b197067f6360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f0:28:64:d8:0d:e0:b5:b8:45:f6:ad:84:74:
                    47:85:57:b1:94:df:6f:a4:fd:f3:a4:16:73:8c:f4:
                    0c:7c:32:ff:4a:6e:9a:15:06:8d:75:4a:ad:f1:a3:
                    18:cf:30:9c:7e:06:4e:1a:f6:04:5a:24:de:a7:04:
                    58:c3:a8:36:36:4a:a8:0d:1f:27:aa:95:8b:6c:e4:
                    65:c5:19:4e:0f:f0:7e:4b:33:ed:95:ad:7a:24:34:
                    96:03:b3:fb:98:4f:e1:87:64:10:ac:5f:29:19:e4:
                    bb:db:91:0d:c0:65:31:05:53:e5:26:1b:28:de:50:
                    7b:2c:28:c9:07:aa:5d:58:0b:c8:da:58:4a:8a:42:
                    db:73:21:fc:87:19:5c:c5:5e:d3:a8:21:4d:7e:06:
                    be:c5:30:11:d5:79:d8:20:17:31:1a:fd:16:45:6c:
                    0c:77:01:84:3f:fc:fc:1f:28:29:7a:19:a9:bb:be:
                    3a:67:bd:6d:93:99:7b:ea:86:6d:a0:72:64:f8:e2:
                    10:dd:87:cc:56:97:05:6a:a2:ca:86:47:10:32:1d:
                    f6:3b:1a:19:e8:18:b2:9c:16:a3:44:c6:08:27:f3:
                    47:e0:64:0e:d2:c9:a4:2e:f9:0d:c5:7a:7c:c7:1d:
                    18:ed:2b:aa:cd:30:35:38:60:55:1c:87:90:1d:1f:
                    65:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:39:DB:32:36:38:B5:F8:68:98:C0:F9:AF:D4:B1:97:06:7F:63:60
            X509v3 Authority Key Identifier:
                keyid:E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:96:47:f3:c4:96:a3:10:3a:6b:81:4d:e2:09:21:b5:4f:95:
         14:6c:e8:fa:28:55:be:bb:94:c0:d6:fd:cb:70:56:67:7e:e9:
         50:ba:69:e7:96:68:a3:5c:4b:05:24:ac:16:be:5a:68:04:3a:
         8f:5d:28:27:a9:e7:c0:cf:b6:f2:0c:27:41:a9:1f:a9:57:ed:
         7f:10:39:8b:5a:54:af:e2:aa:06:20:74:ff:e5:31:1f:a7:0e:
         84:82:81:76:ad:e9:6e:ef:e7:18:14:61:b0:6f:e6:df:74:34:
         20:d6:e2:57:5f:e8:e6:6a:4d:70:e5:b0:bb:16:4b:9d:c4:92:
         6a:cc:50:a7:ab:13:e7:9c:6d:8e:00:3a:e6:c3:67:74:66:43:
         aa:8a:53:41:b0:72:8a:3f:a7:9f:cf:11:fe:e6:f8:1b:79:14:
         ac:00:55:07:0d:c3:33:a0:6c:5c:af:b2:3f:61:2b:51:22:90:
         35:1d:fb:2b:60:6a:82:e7:92:43:53:ae:60:0c:50:3d:20:a0:
         7e:cf:92:82:64:89:e9:11:b2:65:4b:04:b8:d3:53:84:40:f2:
         25:1e:06:b5:07:ee:8a:65:3c:6d:0b:f3:3f:6d:44:ac:a0:c7:
         f0:9b:6f:3d:bd:3d:df:0a:07:26:11:63:aa:ab:cb:4f:35:ba:
         27:4a:9a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:45:20 2025 by rpki-client