Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
File:                     S-EpiiFeXkt9HgWoX7xZHDifnd0.mft (raw, json)
Hash identifier:          tewsTyg4VAvfnbvSStzqKd8zj8n0PTKLVpc036os0/M=
Subject key identifier:   C3:D3:6D:53:8D:24:F6:00:85:42:50:AA:68:CC:9B:D2:94:E3:65:F3
Authority key identifier: 4B:E1:29:8A:21:5E:5E:4B:7D:1E:05:A8:5F:BC:59:1C:38:9F:9D:DD
Certificate issuer:       /CN=4be1298a215e5e4b7d1e05a85fbc591c389f9ddd
Certificate serial:       019747E7361E51DB2F600422C39EE3F02C25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
Manifest number:          1254
Signing time:             Sat 07 Jun 2025 01:00:24 +0000
Manifest this update:     Sat 07 Jun 2025 01:00:24 +0000
Manifest next update:     Sun 08 Jun 2025 01:00:24 +0000
Files and hashes:         1: S-EpiiFeXkt9HgWoX7xZHDifnd0.crl (hash: WLEm5SfOSX2Jwqk2p7k8DllJakei2MBG46yqaNBUJos=)
                          2: s1JSRv9qjaGD9ezms7UcWMZoLZc.roa (hash: m1XaHhOIwQT47gv3DHtN00RXZ5ujYkmfy6Ne91kvsN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:e7:36:1e:51:db:2f:60:04:22:c3:9e:e3:f0:2c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4be1298a215e5e4b7d1e05a85fbc591c389f9ddd
        Validity
            Not Before: Jun  7 01:00:24 2025 GMT
            Not After : Jun  8 01:00:24 2025 GMT
        Subject: CN=c3d36d538d24f600854250aa68cc9bd294e365f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:89:6c:a9:e2:11:c6:fe:63:44:8b:76:a0:3a:
                    cb:9f:39:5e:33:ac:1b:dd:44:80:aa:b1:12:b6:cb:
                    8f:4d:1d:86:ca:5c:d1:fc:3b:f1:b2:02:87:f7:18:
                    97:d4:8a:93:8c:e3:fe:5a:6f:aa:41:e1:93:10:ec:
                    d4:fe:ef:e1:d5:75:e6:05:25:97:c0:77:a3:bc:c4:
                    a2:40:8b:fd:e8:ab:e7:6b:e2:8c:1d:ad:4a:ce:88:
                    0f:a8:df:a3:08:e1:da:ad:d9:40:ff:b8:03:3a:c2:
                    83:34:51:c0:97:be:6d:81:1d:d6:b6:4c:a4:8f:90:
                    e5:d4:c1:7c:d0:12:f4:4e:b6:d5:4c:bd:8d:6f:59:
                    74:34:e7:4a:fb:e6:48:d7:44:93:ed:30:f4:22:f4:
                    88:2b:d8:33:56:8d:fc:15:12:12:e9:99:03:37:81:
                    db:11:cb:e5:b5:e6:fa:28:e3:66:00:75:01:21:74:
                    7c:83:e3:68:ea:af:ee:de:97:27:a2:43:2d:55:21:
                    64:ed:47:3a:21:9f:a1:38:70:5e:ed:90:65:1d:e0:
                    e7:56:f2:ef:70:40:21:ac:39:de:fb:0b:1a:79:8b:
                    70:df:b1:85:05:be:28:15:da:ea:9a:95:c3:a1:2c:
                    0c:e5:d2:64:1b:43:c0:9b:8f:69:08:89:3d:b4:35:
                    d0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D3:6D:53:8D:24:F6:00:85:42:50:AA:68:CC:9B:D2:94:E3:65:F3
            X509v3 Authority Key Identifier:
                keyid:4B:E1:29:8A:21:5E:5E:4B:7D:1E:05:A8:5F:BC:59:1C:38:9F:9D:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:b2:14:2d:10:22:92:78:d1:4b:b4:60:9f:57:cb:bb:77:34:
         c7:8a:83:de:86:b7:09:d6:63:74:f2:86:0c:f0:24:43:35:95:
         3b:d3:42:33:cd:7e:65:b8:53:45:0d:21:10:c0:ad:15:d7:b4:
         95:51:55:4c:8f:15:e6:2e:0c:fe:4e:9b:21:7b:57:4c:20:fe:
         e3:0d:0f:65:03:44:5e:8a:3c:9e:b4:85:d1:d9:10:b5:9c:44:
         78:2f:b1:2a:bf:7b:0f:88:81:40:e6:4e:c9:19:f8:5d:f6:6b:
         b6:0f:77:d1:52:05:9e:c4:10:65:a9:2a:54:df:ef:19:f6:38:
         49:62:14:91:db:ce:c5:19:6f:ba:94:cc:04:7b:6e:03:70:13:
         21:bc:c2:13:a5:36:c5:c9:71:e4:a7:bc:4d:68:19:b2:91:12:
         a0:35:59:ff:90:2d:07:2c:88:01:b3:da:9f:23:4e:6c:ca:3a:
         3b:cd:db:9e:6b:c1:f2:00:e0:68:2d:41:39:ed:57:c1:01:e6:
         0b:74:10:68:a1:5c:ad:ee:e1:3f:a5:29:94:5c:4b:7b:b9:70:
         ea:20:f5:68:04:b9:7b:31:4c:85:11:2b:1b:fb:bb:c3:e9:db:
         6b:86:b3:15:fb:a6:0b:81:8f:d5:da:e5:95:09:1e:0d:bf:bd:
         54:08:04:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:26:31 2025 by rpki-client