Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
File:                     4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft (raw, json)
Hash identifier:          H1g2+VbRfRHb9bXxT9b8yBS7xUBQuByV2ZeSnEsbjX4=
Subject key identifier:   E8:A2:A0:81:7D:C7:5A:B4:38:49:CE:11:56:85:5E:21:75:FE:DB:28
Authority key identifier: E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF
Certificate issuer:       /CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef
Certificate serial:       01975535A784586C678BD8F42C15740D4A93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
Manifest number:          117B
Signing time:             Mon 09 Jun 2025 15:01:08 +0000
Manifest this update:     Mon 09 Jun 2025 15:01:08 +0000
Manifest next update:     Tue 10 Jun 2025 15:01:08 +0000
Files and hashes:         1: 4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl (hash: QtZO5pPloJavDt5UZMBjQTlMVfDLp1VB0vacts0q7ts=)
                          2: t1ORbdksbr2p1B59lFrh9IkJsfE.roa (hash: JVz20kQAYF9u2DMBNNZhgOePGcGoxFfVOgHdTdf+BvA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 11:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:55:35:a7:84:58:6c:67:8b:d8:f4:2c:15:74:0d:4a:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef
        Validity
            Not Before: Jun  9 15:01:08 2025 GMT
            Not After : Jun 10 15:01:08 2025 GMT
        Subject: CN=e8a2a0817dc75ab43849ce1156855e2175fedb28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8b:fe:53:3f:62:7c:de:47:db:87:6d:a3:0b:
                    cf:2c:5a:db:49:5a:d0:cc:3f:43:31:2d:4b:e9:89:
                    cd:1d:92:33:88:2b:8a:92:0b:71:4d:bc:83:4c:9d:
                    14:8f:33:e8:09:c7:16:a8:12:6f:4d:91:87:71:d1:
                    85:23:ee:de:79:b0:f5:b8:81:b2:2f:17:1e:79:60:
                    79:71:2d:e4:10:d9:28:92:bb:1f:1d:92:64:37:1f:
                    8f:45:d7:0a:51:13:5b:a3:30:9f:e6:b0:4a:24:82:
                    c9:79:6a:52:2a:18:0f:14:d1:02:7f:27:f2:2d:08:
                    2a:52:ec:67:6d:97:97:0d:06:ec:55:e1:5b:29:32:
                    c0:6f:91:9a:af:45:5d:ac:c3:53:3c:6b:4d:a5:a1:
                    95:cc:88:c5:21:ee:72:9e:90:2e:8c:4b:c6:4f:bd:
                    82:80:55:72:93:ea:d1:a2:58:f7:c2:aa:5c:8b:1a:
                    a2:70:cf:9b:d4:8a:ba:7f:f5:c7:ed:b6:b9:a4:5f:
                    cf:16:e3:5f:f5:09:56:57:58:9c:cc:f4:5c:04:fb:
                    16:de:15:46:01:9c:65:c0:33:ae:ed:84:aa:fe:ed:
                    15:6c:01:10:7d:01:ad:7b:6f:7e:b1:b6:03:3f:77:
                    96:6d:86:65:1d:74:4a:71:2a:33:e2:d4:ce:a7:ed:
                    d8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A2:A0:81:7D:C7:5A:B4:38:49:CE:11:56:85:5E:21:75:FE:DB:28
            X509v3 Authority Key Identifier:
                keyid:E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:32:84:68:78:c2:d2:ce:d4:ab:87:ff:86:df:90:3d:b4:9b:
         8f:45:29:09:c9:6c:b6:d6:d6:86:7e:ce:83:c7:11:82:b0:76:
         0a:a3:56:42:3d:a0:27:46:dd:35:c3:c8:b8:ab:cd:f7:ef:21:
         4b:5c:90:51:c0:4a:31:8b:40:e5:4f:98:58:e3:c6:4b:30:f6:
         4d:3a:ac:85:22:8f:0e:c9:7c:59:ca:4b:02:9e:f2:31:a2:d4:
         43:99:d3:a2:1e:3f:88:bc:18:28:ad:5d:d4:6b:2f:f1:02:ca:
         4b:5d:ea:7a:50:bb:4d:3b:66:74:ea:54:fb:00:af:ee:1c:04:
         05:cd:af:04:a6:a0:f7:40:ee:c5:49:6b:11:43:47:c5:34:83:
         ed:b6:c3:bd:b4:46:85:9b:97:e5:0d:08:09:ec:d6:c9:32:61:
         ae:f0:30:f7:89:ba:9a:b5:4c:00:38:7a:58:8a:cc:2b:e0:b7:
         91:93:99:00:af:3a:08:fc:cb:20:ce:57:90:81:63:b5:ec:a0:
         0b:5a:8e:0d:8c:47:d9:1e:e5:8a:3c:19:76:8e:e9:50:b3:79:
         ac:c6:9a:23:3d:10:d5:1e:7e:65:5a:8e:65:cd:4e:39:f5:45:
         ae:0f:0a:79:55:53:ab:92:bc:a1:61:9f:67:29:0b:43:47:0b:
         7c:85:73:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:05:59 2025 by rpki-client