Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
File:                     4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft (raw, json)
Hash identifier:          TEBqW85lTee3wOEjrLE+MDpAp2G+qrKmkn60aLJMV+s=
Subject key identifier:   ED:70:30:BC:93:CA:9F:B7:F3:70:70:58:70:CE:98:23:32:8A:1C:BA
Authority key identifier: E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4
Certificate issuer:       /CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4
Certificate serial:       01974779BCBD2036D94D3E9F98A81D7A3C79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
Manifest number:          0296
Signing time:             Fri 06 Jun 2025 23:00:49 +0000
Manifest this update:     Fri 06 Jun 2025 23:00:49 +0000
Manifest next update:     Sat 07 Jun 2025 23:00:49 +0000
Files and hashes:         1: 4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl (hash: m1GqI4ONFVK7G3IwWBjgez/qYnrBfP83PDnOow/ig58=)
                          2: MVPwNZ1sWh_qT3u_yevkatHjGzM.roa (hash: C2EFQTV5AK3R2J2AxwzeI6jL/kPjrl3mk/7AjDMYss0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:bc:bd:20:36:d9:4d:3e:9f:98:a8:1d:7a:3c:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4
        Validity
            Not Before: Jun  6 23:00:49 2025 GMT
            Not After : Jun  7 23:00:49 2025 GMT
        Subject: CN=ed7030bc93ca9fb7f370705870ce9823328a1cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f0:c5:e0:5a:f8:c9:46:6f:0e:6d:df:30:8d:
                    2e:3c:78:d0:57:6d:cd:f4:6e:49:8e:86:3e:4c:5a:
                    48:74:97:3a:03:56:84:fa:82:c7:b8:d8:e2:8a:42:
                    c5:b0:51:b4:2a:4a:46:94:19:42:0f:a6:36:31:78:
                    0b:0c:4c:2a:48:a9:10:8e:9c:42:fd:26:24:ce:aa:
                    cb:58:8c:c4:a7:06:c0:8a:0d:93:a2:0c:2e:5f:40:
                    4b:b1:89:28:b8:43:6e:22:e1:01:23:db:04:3d:7b:
                    3f:fb:a0:ca:48:23:a8:bc:5e:50:a0:67:da:64:02:
                    44:29:f2:7d:13:1e:8f:8e:90:d2:34:3b:a2:bf:63:
                    32:e4:94:b3:12:df:f2:f0:0c:02:b3:a7:c3:0d:e3:
                    89:cb:57:a8:0a:4b:46:ea:bf:97:4f:75:3f:2b:58:
                    e3:62:27:5b:24:c2:0b:3d:ad:e0:fa:36:68:89:31:
                    4f:27:e5:2c:a0:aa:e4:9b:b6:bd:f8:c6:48:8b:a0:
                    b6:f8:49:f7:a1:1e:7c:96:92:87:2a:7e:f9:f6:c7:
                    12:73:26:d1:a6:38:76:39:82:0b:bf:c8:d6:85:98:
                    08:9e:24:f6:9d:e8:fe:a8:31:da:aa:13:d3:09:4c:
                    86:77:49:25:85:9a:77:c5:9f:0d:6b:88:3c:de:79:
                    bd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:70:30:BC:93:CA:9F:B7:F3:70:70:58:70:CE:98:23:32:8A:1C:BA
            X509v3 Authority Key Identifier:
                keyid:E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:19:a1:54:ea:a3:89:c6:4c:58:4f:d4:f0:89:64:e3:82:14:
         d9:45:50:1f:ba:6a:99:5b:59:e3:b4:e6:86:5d:5e:e5:7d:67:
         e7:0e:df:ab:94:71:93:3a:a0:26:09:f6:4b:b0:7f:ba:07:bf:
         eb:ba:1c:65:dd:c6:a6:49:38:aa:be:73:53:20:61:43:3b:f1:
         39:dc:be:ce:48:39:14:71:9e:26:a4:f2:dc:5c:f8:0d:e3:a0:
         bb:67:86:23:da:6c:5f:78:41:af:c8:e2:37:12:4c:be:49:8f:
         01:e0:5b:06:36:c8:e5:1f:ab:31:f3:7f:8b:6d:0e:30:0f:dc:
         cf:84:80:22:33:5c:da:a6:c0:bc:3f:4c:99:c9:ef:94:38:81:
         7c:93:52:42:b6:b0:23:15:5d:1e:38:5e:77:c0:e4:42:be:7c:
         d7:bd:a0:c5:89:91:a3:da:26:09:5c:8d:5c:91:0d:d1:41:12:
         e8:ae:79:ba:10:e8:e6:4d:04:b0:88:42:5a:80:1a:de:17:c9:
         0a:35:4f:5c:cb:ff:3d:2a:a5:7c:5b:5b:a7:05:1e:e4:2a:f0:
         15:45:15:15:9d:5b:10:5d:3a:04:fe:ef:d9:fd:fb:87:d7:87:
         aa:27:9a:f8:03:fb:86:26:d6:9f:60:aa:f2:ab:f7:46:cb:7e:
         73:2e:1a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:21 2025 by rpki-client