Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
File:                     4z5OBZxk_xm-EKehUEV1YeRV0U8.mft (raw, json)
Hash identifier:          LnWpsdXb/vhfufhYXm3K2kk8EmpG7U4E8VYb9eG1t10=
Subject key identifier:   54:34:AD:A1:4B:16:96:90:C4:50:3A:A0:A7:3B:79:10:30:48:5B:B4
Authority key identifier: E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F
Certificate issuer:       /CN=e33e4e059c64ff19be10a7a150457561e455d14f
Certificate serial:       01975D93447BFEC17CE1BDA655D7B9E479D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
Manifest number:          068F
Signing time:             Wed 11 Jun 2025 06:00:21 +0000
Manifest this update:     Wed 11 Jun 2025 06:00:21 +0000
Manifest next update:     Thu 12 Jun 2025 06:00:21 +0000
Files and hashes:         1: 4Vx5uY-wUi0YX0Kfqz3unLfjiuA.roa (hash: CqAh2hOC6+tjEARJLtXVTVdqWTjo1Zk7c/vuGkdSa5s=)
                          2: 4z5OBZxk_xm-EKehUEV1YeRV0U8.crl (hash: MDCbJVkgmry0kel1pPyDUUo+5wYI2fKMS0lX5FRmk3w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 06:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5d:93:44:7b:fe:c1:7c:e1:bd:a6:55:d7:b9:e4:79:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e33e4e059c64ff19be10a7a150457561e455d14f
        Validity
            Not Before: Jun 11 06:00:21 2025 GMT
            Not After : Jun 12 06:00:21 2025 GMT
        Subject: CN=5434ada14b169690c4503aa0a73b791030485bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:44:19:18:8c:cf:c7:42:b9:48:be:38:93:24:
                    1c:9d:ab:02:bd:9c:53:1d:84:a7:49:c7:ae:ae:92:
                    86:da:07:b2:9a:89:fa:ed:57:e7:f0:91:8e:a5:69:
                    2c:7e:9a:3d:ed:4c:62:82:7a:8f:9e:93:0c:0a:27:
                    1f:83:a2:18:2a:5e:9f:e4:2c:9a:6b:0d:ca:fe:bc:
                    e3:1e:95:26:03:3a:4f:a9:61:85:27:fc:bb:52:67:
                    0d:84:1f:94:77:62:eb:c2:5f:49:ef:b1:69:d4:5e:
                    11:f4:5b:90:22:dc:cc:c4:dd:80:cb:79:5f:c5:87:
                    92:e4:dc:66:b0:d1:64:f1:23:d2:8c:23:64:9e:62:
                    0e:f2:39:06:bb:bb:55:08:3a:60:93:c7:33:ba:56:
                    b1:b1:ff:72:99:6b:2a:1d:3c:a0:a7:77:74:35:cc:
                    2e:c4:a9:4f:86:a8:03:f4:c4:ad:57:a8:09:eb:57:
                    07:88:83:b7:ff:44:f3:7b:d4:ae:c8:e7:97:f5:18:
                    91:ca:70:62:40:ad:7e:46:51:d0:47:bd:1f:60:b0:
                    35:fb:0c:8d:20:d1:b0:de:f8:76:03:03:3b:32:05:
                    ac:71:3b:ab:4e:e6:6a:d0:c4:69:c7:43:3a:ce:d9:
                    be:06:aa:82:3f:a7:16:1d:43:57:e1:44:05:ad:bf:
                    6b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:34:AD:A1:4B:16:96:90:C4:50:3A:A0:A7:3B:79:10:30:48:5B:B4
            X509v3 Authority Key Identifier:
                keyid:E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:8b:5f:4d:bf:27:bb:81:f7:ec:9a:37:cb:b4:e9:7d:72:e5:
         ed:2b:c4:ec:f4:e3:bb:05:53:0b:5e:4c:77:d7:73:8f:3e:6e:
         90:91:91:9a:40:38:77:31:1c:e2:e7:99:22:01:31:eb:c9:35:
         1a:5d:4a:91:25:6b:a0:db:b3:83:e1:d6:67:ae:71:e0:a4:c1:
         a8:7d:4f:07:82:c9:80:48:34:78:a3:41:b0:6a:44:e5:12:48:
         c3:07:4e:8c:a1:7a:f6:c5:b3:ab:53:61:5c:51:e9:85:0f:87:
         e7:ca:7b:d8:3c:a7:3b:23:94:46:d6:1f:82:f8:54:ff:3b:6a:
         f5:9c:f9:ee:03:27:c9:ff:e9:8c:2b:01:ed:2a:94:07:e7:9b:
         fa:68:71:a6:c4:cd:c7:eb:2c:3d:be:2c:87:11:ff:9e:7b:39:
         63:c3:26:e4:da:ec:fd:5b:eb:22:ef:03:20:51:84:7a:ac:9f:
         0a:27:c3:16:0b:bc:b1:4a:6b:95:b5:ab:1b:a9:e8:5b:3a:f2:
         00:d8:e7:8c:8e:16:6d:5d:1d:63:d0:9a:9d:df:d7:2f:20:18:
         b7:eb:a3:35:04:c4:d0:70:8b:cf:13:1e:37:d3:23:b5:94:d9:
         97:1c:e3:a7:7c:2f:c4:7b:58:c9:05:30:46:53:a3:56:25:5d:
         36:0f:4c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:26:29 2025 by rpki-client