Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
File:                     e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft (raw, json)
Hash identifier:          qqp0nySZpXNVdRLhlKkiTp4U/jnZJCLX6BI3tIKU8s0=
Subject key identifier:   3B:72:00:6B:51:04:E2:BD:BF:C5:B6:99:A2:00:08:23:41:83:BE:12
Authority key identifier: 7B:89:38:5C:00:02:33:0B:09:65:67:B2:15:14:D8:E1:BC:09:68:9F
Certificate issuer:       /CN=7b89385c0002330b096567b21514d8e1bc09689f
Certificate serial:       01976BBCDDD14D936457019EFEF7FABE6690
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
Manifest number:          1591
Signing time:             Sat 14 Jun 2025 00:00:28 +0000
Manifest this update:     Sat 14 Jun 2025 00:00:28 +0000
Manifest next update:     Sun 15 Jun 2025 00:00:28 +0000
Files and hashes:         1: cLYB6l9FZL9zQXyfpqoagDuHdic.roa (hash: bfsqI0s1izdNOdCWZ5Wt/vOuavl9t3l+ssIuSAYSQTY=)
                          2: e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl (hash: 77TGnJ1XiH0ZKtUKo5IHcKUf88ovKBiB/qjPPcIDuNg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:bc:dd:d1:4d:93:64:57:01:9e:fe:f7:fa:be:66:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b89385c0002330b096567b21514d8e1bc09689f
        Validity
            Not Before: Jun 14 00:00:28 2025 GMT
            Not After : Jun 15 00:00:28 2025 GMT
        Subject: CN=3b72006b5104e2bdbfc5b699a20008234183be12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9e:1a:f4:d3:d3:7b:1c:2f:6b:54:3f:8c:0d:
                    2c:ce:5b:c2:6e:0d:64:77:1c:b2:82:e3:90:59:d2:
                    5a:1e:a2:8e:ca:3b:2f:ca:c0:88:e4:2f:a4:ae:34:
                    f7:51:ce:20:44:ce:8b:10:0b:8e:1f:7b:0e:85:a6:
                    4c:42:23:74:ca:87:71:f0:49:2d:d7:cf:39:f3:69:
                    8d:2b:10:d3:f0:a6:f1:8a:f9:82:dc:e6:b9:cd:f7:
                    61:df:6b:df:4f:1d:49:64:8c:ca:8c:16:44:b8:f4:
                    cf:d8:8a:a1:5e:8a:e6:1b:e7:d5:08:6f:bb:83:cc:
                    8b:47:a8:5d:06:36:52:67:17:fc:bc:9b:5b:86:60:
                    0d:62:46:37:e7:18:0d:39:94:06:25:b1:53:8c:45:
                    9e:cf:ff:d3:18:d8:30:a4:22:33:75:78:9d:6b:3c:
                    24:21:07:a9:9b:4a:20:13:3b:ed:80:f3:f1:27:45:
                    b8:79:bc:6e:ba:1b:a2:1a:67:d5:32:25:dd:75:35:
                    4c:a5:95:33:78:85:fb:27:43:7c:76:fa:e8:2e:1a:
                    02:7e:bd:68:f0:e8:bc:75:6b:28:55:57:94:3c:db:
                    66:97:c6:99:49:30:b1:7f:cd:0a:e9:f0:43:79:f9:
                    f8:0f:f1:58:d3:82:44:10:52:2f:b0:b9:23:4e:7e:
                    72:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:72:00:6B:51:04:E2:BD:BF:C5:B6:99:A2:00:08:23:41:83:BE:12
            X509v3 Authority Key Identifier:
                keyid:7B:89:38:5C:00:02:33:0B:09:65:67:B2:15:14:D8:E1:BC:09:68:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:02:8d:39:58:68:ea:5b:03:19:f8:c9:7d:99:c8:5f:4c:70:
         ae:2c:7f:c5:3e:13:16:92:22:c0:ef:86:8b:18:d7:6c:63:f3:
         68:56:b6:49:eb:15:2c:54:0b:92:e5:dc:10:f6:81:11:0c:e8:
         7c:8e:f1:03:ca:b4:2d:62:62:76:b8:ec:3f:28:c1:ef:ed:fc:
         ec:c4:59:b6:cd:9d:4f:ab:ab:34:d7:8d:01:29:f4:bf:07:ef:
         e6:00:63:91:5e:ee:dd:fc:7e:29:2a:70:39:8d:cc:7e:31:e5:
         3f:2a:71:6c:25:01:f0:5b:7d:34:3f:ad:d2:7c:1d:26:2e:a3:
         d7:ff:0b:f6:b9:04:b6:3f:b6:ed:70:6e:40:6f:95:99:e2:59:
         33:bc:0d:a5:1f:1e:d5:66:3d:f5:e6:60:6a:b0:f8:7e:d4:0e:
         8d:3f:78:82:1e:c8:8b:ce:2b:32:3c:18:7b:90:12:8e:b4:6b:
         41:07:e9:25:76:84:9a:cb:72:f8:f7:f0:5d:f0:4d:49:32:c9:
         34:fe:c3:f8:31:4a:3c:7d:e5:a2:83:dc:c7:0e:61:c3:2a:6e:
         76:f5:4e:09:70:93:ca:bd:4a:81:5c:1a:f4:c7:1d:4a:fb:d3:
         49:70:03:f4:37:23:85:d1:a3:0f:b0:d6:93:13:32:6b:b5:fb:
         58:21:e6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:29:50 2025 by rpki-client