Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
File:                     RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft (raw, json)
Hash identifier:          apDgeORleZdJrN4xc+p6sbdoMcK65eoND9ga1Wi2LjE=
Subject key identifier:   A4:28:62:C4:25:9A:EF:0B:85:5B:BD:C1:9A:C2:C1:DC:37:A9:1A:4E
Authority key identifier: 44:7C:D4:1D:9E:6C:CF:80:30:6C:1B:46:BD:C0:B5:77:B1:EE:2C:AE
Certificate issuer:       /CN=447cd41d9e6ccf80306c1b46bdc0b577b1ee2cae
Certificate serial:       0197518F838C965F87BD49767E5848502F94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
Manifest number:          1377
Signing time:             Sun 08 Jun 2025 22:00:49 +0000
Manifest this update:     Sun 08 Jun 2025 22:00:49 +0000
Manifest next update:     Mon 09 Jun 2025 22:00:49 +0000
Files and hashes:         1: RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl (hash: Euhy/a9hVk2jNHn7EnbZhg+xUSAVuOWmd+bARM/erBM=)
                          2: UK2n5J82Y8mJ_ChH-Mf3D9V405E.roa (hash: tUUMnCPKY1tGYA08Lbr1dGnhLn6RW32Wd2MZ44NLy2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:8f:83:8c:96:5f:87:bd:49:76:7e:58:48:50:2f:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=447cd41d9e6ccf80306c1b46bdc0b577b1ee2cae
        Validity
            Not Before: Jun  8 22:00:49 2025 GMT
            Not After : Jun  9 22:00:49 2025 GMT
        Subject: CN=a42862c4259aef0b855bbdc19ac2c1dc37a91a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e0:a9:bf:ca:72:76:06:1d:f2:40:79:16:17:
                    81:bc:d5:f6:45:42:1f:74:b3:a8:5c:4f:dc:88:a1:
                    9c:c9:23:7a:5c:ff:55:fc:a0:ad:e6:48:d4:98:db:
                    fb:90:0e:ab:af:92:43:b4:31:ee:25:2e:17:db:0d:
                    40:87:13:04:8a:d0:92:17:7c:53:a0:cd:ec:c3:3e:
                    ee:9d:8a:74:89:6b:7b:82:bd:3f:d8:59:3c:70:99:
                    b6:ca:d3:b9:b0:72:7c:dc:68:40:db:39:8b:0d:45:
                    08:49:5e:67:03:3b:e5:73:71:a7:07:da:0b:49:2a:
                    f1:ab:46:67:ad:e2:0d:cd:ed:69:0f:a1:36:2f:0d:
                    8b:05:e2:2e:b1:fc:9a:0f:c3:b3:78:72:ee:5a:29:
                    08:16:47:8b:b5:a5:64:bc:23:60:2c:88:21:f6:ff:
                    fd:cb:3e:d0:28:92:da:9f:84:0f:30:ea:2e:03:08:
                    90:9a:e6:61:6c:ad:72:84:24:66:ae:62:ac:6d:d5:
                    94:18:3d:24:99:34:cd:72:b1:d6:0d:16:9e:31:c0:
                    07:57:33:73:c0:e7:07:6b:9f:7b:10:49:f9:aa:1e:
                    6c:ce:79:19:25:ab:1a:c8:23:79:eb:04:2d:5a:c3:
                    52:54:fd:b5:9c:80:1a:0e:34:34:fa:9e:ce:64:b7:
                    24:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:28:62:C4:25:9A:EF:0B:85:5B:BD:C1:9A:C2:C1:DC:37:A9:1A:4E
            X509v3 Authority Key Identifier:
                keyid:44:7C:D4:1D:9E:6C:CF:80:30:6C:1B:46:BD:C0:B5:77:B1:EE:2C:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:93:2e:99:f8:44:42:02:fd:cb:26:d1:a2:f9:c1:84:07:e2:
         15:17:dd:c3:06:19:d1:fa:5a:89:dc:0e:15:ec:e5:4e:9d:a5:
         b3:84:1f:e5:5f:33:56:1a:80:f7:a0:d5:bf:60:86:81:02:21:
         3e:bc:7d:61:59:62:46:75:cc:63:ce:de:43:8e:59:0e:10:56:
         38:9e:f4:a8:97:b0:35:e4:24:82:f9:fb:9d:83:da:09:cf:2c:
         c5:0b:fa:c7:42:8f:62:b4:94:ea:da:b7:d0:e8:37:3c:9d:75:
         3d:a6:c8:63:09:2e:00:db:d7:cf:08:4b:53:72:9e:32:02:19:
         8c:46:41:df:f5:b5:f4:ea:50:64:22:39:17:9d:10:86:44:68:
         79:85:69:f4:15:fd:af:f9:cf:3e:51:d3:8b:6a:a9:1e:b9:dc:
         ea:0a:2b:22:68:0a:49:80:04:aa:89:f9:4b:7d:d9:5d:25:b7:
         c5:59:16:85:5d:09:ff:da:6d:ad:ca:08:08:d8:b8:02:98:23:
         1b:bb:7e:e6:11:35:51:4f:8c:d4:1c:71:a9:c2:73:36:b6:b4:
         fc:5b:71:38:83:cd:38:8e:ea:57:5b:a5:77:f4:d7:52:4d:c3:
         f3:4b:5f:72:ed:8e:64:bd:b7:2c:7f:4c:ec:b8:93:c1:7d:66:
         22:80:f8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:52:14 2025 by rpki-client