Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
File:                     4g-H2rlrUPdu6kmxgeqU0mogUyc.mft (raw, json)
Hash identifier:          nls9lnYAGKVfI92zcnX5i1fL0dVUHefv0VzIS0Xxf5Q=
Subject key identifier:   41:ED:C2:22:32:FB:F7:28:34:57:88:92:0B:7D:3E:02:F6:E9:17:A9
Authority key identifier: E2:0F:87:DA:B9:6B:50:F7:6E:EA:49:B1:81:EA:94:D2:6A:20:53:27
Certificate issuer:       /CN=e20f87dab96b50f76eea49b181ea94d26a205327
Certificate serial:       01974DB2DCE4D76AA841C94A8E2673D8C70E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
Manifest number:          1581
Signing time:             Sun 08 Jun 2025 04:00:56 +0000
Manifest this update:     Sun 08 Jun 2025 04:00:56 +0000
Manifest next update:     Mon 09 Jun 2025 04:00:56 +0000
Files and hashes:         1: 4g-H2rlrUPdu6kmxgeqU0mogUyc.crl (hash: a3vgByk2nXRYN6U6htzgTyX6Kad2gzY43QnrT2YwBTc=)
                          2: 8e6EuYvdvJ1TbEt2w_l--VFTSVE.roa (hash: lEOGzvYRz251FXAafldpzBiZsWV7u1gV99thpvyYuY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 04:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:b2:dc:e4:d7:6a:a8:41:c9:4a:8e:26:73:d8:c7:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e20f87dab96b50f76eea49b181ea94d26a205327
        Validity
            Not Before: Jun  8 04:00:56 2025 GMT
            Not After : Jun  9 04:00:56 2025 GMT
        Subject: CN=41edc22232fbf728345788920b7d3e02f6e917a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:27:fe:49:c3:e9:39:56:fc:a9:c4:02:9e:b4:
                    9f:e1:47:79:a8:30:19:df:9f:e3:ed:f7:70:f5:f8:
                    bf:e6:54:3a:91:ee:6d:9e:b8:5e:d6:94:9a:38:2c:
                    41:09:4b:ef:de:53:08:3f:e4:d6:d3:a4:22:b2:f4:
                    88:9f:53:49:cd:22:c2:9e:50:6f:be:65:62:bd:21:
                    09:f8:9d:5c:84:b3:9f:59:20:e1:16:07:47:a7:d6:
                    99:b1:ca:d1:ab:dd:dd:af:ed:ae:74:a6:52:fb:82:
                    61:58:71:8c:90:fb:bb:e4:1d:96:83:73:0d:52:eb:
                    dd:bb:b0:db:8f:74:80:1c:5f:31:bf:ec:ca:f1:88:
                    fa:3d:7e:48:31:8a:1a:22:6f:16:fb:c3:6b:b0:fd:
                    10:1d:41:21:b0:c2:aa:33:ab:02:a6:fd:8f:ab:36:
                    ba:98:f4:c9:b9:6b:15:5d:e2:18:8c:8c:9d:23:08:
                    0d:18:12:68:ca:e7:c4:66:b5:65:9e:63:12:e6:56:
                    a0:dc:68:f9:fb:57:75:9b:85:54:4c:01:73:bc:88:
                    1a:b8:54:ef:c5:7b:17:53:8d:7d:d5:60:81:ce:ff:
                    cb:ed:fc:a4:20:7f:86:1b:fe:a3:46:5b:27:34:d8:
                    34:d4:c7:22:34:6d:fc:8d:21:52:95:cb:8d:5d:fc:
                    1c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:ED:C2:22:32:FB:F7:28:34:57:88:92:0B:7D:3E:02:F6:E9:17:A9
            X509v3 Authority Key Identifier:
                keyid:E2:0F:87:DA:B9:6B:50:F7:6E:EA:49:B1:81:EA:94:D2:6A:20:53:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:77:74:00:02:45:0f:0c:50:a6:ee:bb:e0:05:9e:3f:2e:6d:
         cd:6d:32:1b:cc:6d:1c:46:ac:0c:2e:55:88:fa:2c:cd:dc:c2:
         d3:57:8f:42:7f:8e:a0:02:ab:a8:58:34:df:e1:37:bf:ba:97:
         17:01:b5:2d:9e:47:6e:fe:ea:e7:0a:d3:97:54:d7:b6:2e:b5:
         5b:bd:97:b0:94:b8:32:4e:21:7e:e8:b3:69:79:6a:b9:bb:af:
         22:8b:d2:ce:68:ea:04:ef:aa:a8:c2:d0:29:6f:59:3c:08:d7:
         62:13:60:32:62:32:bc:5e:1f:77:7d:e6:2c:ef:7c:45:d8:df:
         ac:d1:b1:81:18:70:1c:37:06:fb:3c:e2:1f:1d:0d:95:43:da:
         2b:7d:d0:ac:56:0f:3f:3e:9d:d0:f6:bc:9d:27:6d:cd:f1:cb:
         c8:11:f8:2a:9a:63:5f:31:b3:db:7c:8d:3c:30:2f:6e:62:35:
         f0:e8:14:2c:8c:36:f1:a1:54:09:75:76:2b:40:47:0a:49:3e:
         85:10:a8:ed:0d:ed:98:8f:91:6f:af:3b:5e:7f:be:84:44:e5:
         37:15:3d:32:62:22:e3:72:40:38:75:af:1c:02:33:0c:dc:dc:
         0b:b5:1d:83:72:e6:2a:67:21:7b:e1:7a:40:57:d1:79:99:03:
         d3:40:cd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:23:50 2025 by rpki-client