Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
File:                     1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft (raw, json)
Hash identifier:          zeyK4ypilfEasTmC/51uGf5wQQIXCxDjl+Yord65Y4g=
Subject key identifier:   4D:1A:0A:84:7D:30:C7:76:ED:8C:17:AE:DF:61:77:8E:4E:38:A3:FD
Authority key identifier: FA:4F:44:BA:81:4B:8C:94:B7:AF:E3:02:2E:E0:14:62:F5:13:BF:F7
Certificate issuer:       /CN=fa4f44ba814b8c94b7afe3022ee01462f513bff7
Certificate serial:       01974F334B227BB19E4CD52A3326BC484643
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
Manifest number:          041B
Signing time:             Sun 08 Jun 2025 11:00:50 +0000
Manifest this update:     Sun 08 Jun 2025 11:00:50 +0000
Manifest next update:     Mon 09 Jun 2025 11:00:50 +0000
Files and hashes:         1: 1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl (hash: SOOEEXFLWSaJ3atMNSNcadc1IbpWI+RP4Da3YRCsFa4=)
                          2: bdIq5nOBWGITXlJ9zml2Pg0QFbI.roa (hash: k0q9hqwpfMQ2WeyDd3IadaGT9hLdAeghDeVvZBVh6H0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:33:4b:22:7b:b1:9e:4c:d5:2a:33:26:bc:48:46:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa4f44ba814b8c94b7afe3022ee01462f513bff7
        Validity
            Not Before: Jun  8 11:00:50 2025 GMT
            Not After : Jun  9 11:00:50 2025 GMT
        Subject: CN=4d1a0a847d30c776ed8c17aedf61778e4e38a3fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3b:01:29:6e:c9:f1:23:99:e4:12:a6:53:87:
                    36:57:13:0f:08:b0:8d:02:4e:37:88:7a:31:2e:19:
                    b4:cf:ab:34:a3:7c:40:e3:68:3a:60:3a:7d:eb:ab:
                    c5:4a:48:c6:1c:51:eb:ab:0f:e3:9d:a4:d3:7e:1c:
                    ad:1e:f3:63:84:1c:bd:4e:2e:ff:1d:e0:55:6c:a7:
                    5a:cd:d4:77:66:10:9f:4a:7f:79:ff:9d:16:74:8f:
                    62:e8:b5:65:89:5b:6d:72:ad:22:a9:e3:3a:a8:24:
                    50:ac:d6:71:60:fd:f5:06:3b:8a:c7:96:37:b8:da:
                    13:40:76:39:5b:7f:57:14:76:91:ea:dd:d1:a8:b3:
                    5d:22:2e:b1:46:fb:d6:ef:a3:1c:2c:2f:b5:35:dc:
                    ac:36:7f:6b:3f:42:5f:70:3c:a4:c4:06:0d:c0:9b:
                    58:69:91:0f:f5:57:37:d4:df:1b:32:95:87:7c:1f:
                    76:02:99:c7:ae:96:a0:a1:dd:1c:71:28:63:63:20:
                    a4:ef:d8:14:fa:04:e4:c8:15:42:22:55:0c:5c:20:
                    da:49:18:d6:8d:32:28:30:db:10:ff:d7:69:ba:f0:
                    14:eb:25:2f:dc:9b:09:ab:96:37:c4:ee:6a:77:96:
                    5f:2f:c6:99:a6:7c:3e:7f:f4:c1:05:d7:83:de:98:
                    10:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:1A:0A:84:7D:30:C7:76:ED:8C:17:AE:DF:61:77:8E:4E:38:A3:FD
            X509v3 Authority Key Identifier:
                keyid:FA:4F:44:BA:81:4B:8C:94:B7:AF:E3:02:2E:E0:14:62:F5:13:BF:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:3c:62:0f:a0:6b:6a:f1:2c:b3:3d:b3:db:5a:a1:e9:77:bd:
         00:dd:43:16:fa:8d:b8:ec:04:4f:ca:e8:4c:11:2f:52:06:53:
         f9:96:a6:a1:c5:69:c6:b4:9e:79:ae:65:70:1b:8f:ee:5a:53:
         98:7f:7a:33:27:96:cf:ab:37:70:0d:14:f8:21:20:35:3d:a4:
         82:94:70:71:6f:f2:fe:6f:c5:18:d9:6b:3e:9f:25:13:db:f9:
         ce:7a:12:83:3d:92:ec:af:7a:dc:f6:0d:2d:bf:30:18:04:12:
         05:06:df:7e:43:1c:cf:c7:9c:07:de:64:a8:3b:9a:2d:39:c9:
         28:91:d1:20:72:7f:0e:98:9d:30:97:87:c9:1a:e7:c9:00:db:
         93:d9:eb:cd:a0:29:1e:0a:21:f5:b1:e1:2e:a4:40:f8:87:fd:
         8f:17:90:8a:fa:5f:53:c0:2e:09:b7:8a:fc:d3:fe:0d:76:f4:
         92:f6:32:70:3b:3e:4d:69:a5:bf:66:49:c8:9c:f8:a4:a0:a0:
         c9:4f:6c:68:19:15:b9:16:66:4c:80:d0:23:5f:d7:ad:52:dd:
         6b:ff:40:5b:aa:d0:bb:ec:bd:65:99:0d:fe:72:2b:0e:31:85:
         ab:82:fd:91:74:fa:e3:cd:dc:b3:a2:dd:d1:f1:55:35:5a:d7:
         1b:59:53:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:34:18 2025 by rpki-client