Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
File:                     4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft (raw, json)
Hash identifier:          fOncEVQ9RdNSqy+tqbU06oA4C345/1OMu60tEFPr+tk=
Subject key identifier:   5C:F4:5C:9B:BC:91:E2:67:71:24:C4:EC:BC:4C:1F:BC:6F:C1:2A:E0
Authority key identifier: E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF
Certificate issuer:       /CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef
Certificate serial:       019764A85B99FCC4A39F1E97D2EDAA2C373D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
Manifest number:          1183
Signing time:             Thu 12 Jun 2025 15:00:44 +0000
Manifest this update:     Thu 12 Jun 2025 15:00:44 +0000
Manifest next update:     Fri 13 Jun 2025 15:00:44 +0000
Files and hashes:         1: 4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl (hash: Hpmm9Xs2fcCuOXYe6wbhe3VrIOCyKzmPTN04uwvflCc=)
                          2: t1ORbdksbr2p1B59lFrh9IkJsfE.roa (hash: JVz20kQAYF9u2DMBNNZhgOePGcGoxFfVOgHdTdf+BvA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:64:a8:5b:99:fc:c4:a3:9f:1e:97:d2:ed:aa:2c:37:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef
        Validity
            Not Before: Jun 12 15:00:44 2025 GMT
            Not After : Jun 13 15:00:44 2025 GMT
        Subject: CN=5cf45c9bbc91e2677124c4ecbc4c1fbc6fc12ae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:89:7f:13:5e:67:2a:62:f8:9c:e3:54:ab:1a:
                    d4:79:df:9a:3b:b5:b1:e9:76:ec:3d:e1:0c:ed:22:
                    82:a0:66:d0:62:da:33:df:0f:df:9f:57:08:f1:9a:
                    74:47:5f:9e:dd:06:80:7c:5e:07:77:53:dd:b7:02:
                    b4:3a:af:40:ac:59:a8:a6:14:39:56:75:82:03:86:
                    4d:f5:5d:15:8a:29:2b:e1:58:d9:d8:45:ec:0a:2f:
                    b9:dd:75:33:83:20:ba:81:3b:80:72:a6:0e:5c:86:
                    65:55:57:75:4a:89:0f:1d:66:00:f8:70:d8:73:c7:
                    df:f0:5d:58:fa:ba:79:42:be:7f:a4:cd:a9:47:dd:
                    ff:a1:e2:92:67:fe:18:c6:72:c1:e5:67:63:72:8e:
                    f5:ae:5d:6e:bd:28:5f:80:c1:6b:ba:87:ff:eb:f4:
                    36:e1:44:c9:de:7a:25:34:ab:80:19:0d:33:47:d6:
                    05:53:ce:1b:cc:64:cb:8c:e2:69:80:d2:eb:d0:84:
                    cc:0b:5b:01:57:3e:08:1b:10:51:eb:65:18:ba:b3:
                    60:e5:13:89:ee:7f:4f:56:a6:85:2d:38:ce:51:bc:
                    b3:19:2c:20:8c:a2:45:73:3d:5c:55:54:57:e7:72:
                    38:a6:5c:0a:f1:73:25:7e:b4:3e:79:6b:1f:6b:1e:
                    b3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F4:5C:9B:BC:91:E2:67:71:24:C4:EC:BC:4C:1F:BC:6F:C1:2A:E0
            X509v3 Authority Key Identifier:
                keyid:E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:83:15:f8:37:c3:aa:ae:a6:5c:44:3c:e3:7f:2e:dc:a6:f3:
         48:97:91:81:08:24:ef:85:30:7f:ed:06:27:96:91:35:95:c0:
         a1:73:ab:da:f4:68:6b:ba:e7:58:63:ee:cb:5a:ee:3b:45:44:
         eb:ef:33:ff:cc:e3:d4:f3:9e:92:d7:27:5c:38:93:be:27:42:
         68:8a:7c:77:be:86:07:3f:3b:12:31:c5:d7:22:f0:4b:fd:62:
         14:9e:68:c1:8f:fc:a8:7d:a3:48:c0:f5:29:13:80:42:6f:0f:
         6d:34:c4:57:86:35:24:8a:52:30:fb:c7:7e:76:8c:1e:76:e4:
         8e:f2:3c:76:65:8c:71:eb:e1:f8:b9:07:ae:77:fc:d2:74:69:
         8c:f4:66:d5:97:7c:a7:35:e9:e8:41:ce:d1:c4:aa:f6:f6:5b:
         1d:fb:2b:ad:68:d8:c6:48:16:17:af:1d:f2:b6:f0:c7:c0:cd:
         5e:eb:79:4d:58:e1:1f:e6:fe:39:7e:76:b8:87:4b:6d:32:0f:
         8e:eb:9f:c8:2c:56:cd:74:3c:fc:0a:71:19:a9:71:4f:29:bb:
         7c:65:38:fb:02:a1:69:f6:8b:46:7e:fa:1e:86:d3:4b:96:6b:
         89:75:76:8b:33:27:7d:6f:23:65:39:58:f4:7b:67:73:de:2d:
         7b:31:9b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 21:13:45 2025 by rpki-client