Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
File:                     4a7RSE6W5L95k-m4Z7NMNNaorjY.mft (raw, json)
Hash identifier:          W8f9/dK0V1gRM89aOe+3hrOGckcV79YFwIN5nBpPVWI=
Subject key identifier:   4F:1A:B8:20:8E:96:3A:8D:B0:91:77:06:A3:0E:09:75:AB:58:45:2E
Authority key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
Certificate issuer:       /CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Certificate serial:       01974B1F4762053F10160DE4942852BD2F21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
Manifest number:          0C35
Signing time:             Sat 07 Jun 2025 16:00:30 +0000
Manifest this update:     Sat 07 Jun 2025 16:00:30 +0000
Manifest next update:     Sun 08 Jun 2025 16:00:30 +0000
Files and hashes:         1: 4a7RSE6W5L95k-m4Z7NMNNaorjY.crl (hash: MjsJNkIYZ2F1jo+dsG6eDs9Nh5Nl3DipkM+NVxRMsB8=)
                          2: 7e4XWoTxR_4GFJNbOkXvGvD-gG4.roa (hash: 4YXw3iLwYdL9YkiJ0wB5yVfXs/BwnpG21A305csfmtA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:1f:47:62:05:3f:10:16:0d:e4:94:28:52:bd:2f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
        Validity
            Not Before: Jun  7 16:00:30 2025 GMT
            Not After : Jun  8 16:00:30 2025 GMT
        Subject: CN=4f1ab8208e963a8db0917706a30e0975ab58452e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2d:74:be:db:bd:1a:8c:54:08:41:0c:8d:90:
                    ec:c9:52:01:ef:b7:fa:e5:5d:ba:05:3d:61:cd:8b:
                    95:9c:1c:77:07:d2:ba:8d:7a:32:91:84:6b:ac:f2:
                    3d:9d:2f:44:4d:0e:8c:b2:42:07:36:dc:12:20:c0:
                    ec:4e:25:2a:2d:60:2d:c7:36:7b:29:a7:57:7b:ab:
                    6e:a1:7e:6c:aa:1f:ed:d4:07:16:dc:7a:f2:97:94:
                    39:c6:83:d3:c2:5d:b2:2e:c4:c5:ae:af:5c:21:59:
                    6c:37:9a:77:9e:95:40:84:ca:7a:fa:ea:14:57:fd:
                    4f:65:3f:9b:b0:95:27:05:e1:a3:fc:2f:77:d8:83:
                    49:46:d5:b2:c2:fa:3a:25:90:a4:73:26:db:9e:76:
                    17:33:1f:85:5d:ec:a1:87:27:7a:34:2e:d3:f4:38:
                    ec:29:b2:3b:df:af:8e:b5:6d:f9:da:dc:b2:ec:e2:
                    b4:81:5e:81:db:85:56:17:37:ec:24:64:e5:a5:58:
                    b2:68:71:ce:3a:c6:47:a6:e1:bb:6c:f5:fb:df:f9:
                    4f:46:6c:75:74:79:5d:4e:a0:57:76:10:b9:df:1b:
                    25:03:36:7c:d8:c7:35:a6:62:fb:9e:6c:19:fc:7e:
                    f6:65:7e:14:66:bc:a4:c1:ea:04:7c:fd:83:ea:d7:
                    a3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:1A:B8:20:8E:96:3A:8D:B0:91:77:06:A3:0E:09:75:AB:58:45:2E
            X509v3 Authority Key Identifier:
                keyid:E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:ba:d7:ee:f7:ea:aa:56:66:5e:42:d8:47:46:9f:2b:52:1d:
         84:f7:67:02:b5:30:d0:5f:04:ba:f2:72:5e:22:b6:a9:19:4a:
         24:7a:79:47:8d:80:c5:67:ec:a9:1c:a4:9f:ae:69:fb:0d:a3:
         f1:12:fd:33:0d:9e:0d:e0:05:9d:95:d1:f6:ea:de:8f:7c:3a:
         db:19:57:bd:ae:00:9b:de:64:2e:bd:2e:f8:c9:c2:9d:19:fe:
         4f:89:db:ae:f3:56:de:ed:23:50:9e:96:cc:b9:d8:48:93:a8:
         aa:7e:70:99:d9:3f:6e:5f:6e:82:2b:d1:19:eb:2e:fc:e1:57:
         a5:90:4f:18:45:fb:e1:c8:f3:8b:09:9d:80:ba:ad:60:11:93:
         6a:82:d7:1a:57:79:69:e1:0f:49:69:58:12:ba:5c:33:f8:8d:
         cc:60:bb:db:cd:2a:8c:c5:2d:79:3b:39:22:14:81:d8:83:70:
         37:a6:42:29:00:ce:de:ee:a7:62:be:92:b6:d1:f0:04:4f:e0:
         43:d3:d5:6f:05:ed:78:3b:2a:1c:c6:8b:95:8f:2c:73:32:9c:
         be:15:17:96:49:7f:2e:83:89:8e:bb:2a:12:ba:f4:ea:64:25:
         ae:5f:df:81:e5:8f:4b:ec:00:6d:35:92:81:3e:a4:f0:37:ff:
         61:85:49:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:53:01 2025 by rpki-client