Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
File:                     4tGVYU7uSi27UfWyHmnRbE4UQa8.mft (raw, json)
Hash identifier:          ZHW87V862QXJdlXjHkTlomwk8HPpAmDw4BGWRO7ua7s=
Subject key identifier:   EC:B0:50:54:73:3C:6C:1E:C0:53:CA:78:29:F4:CE:FB:46:C0:EE:8F
Authority key identifier: E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF
Certificate issuer:       /CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af
Certificate serial:       019755D9D526D72435CA103B3504470C9679
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
Manifest number:          68
Signing time:             Mon 09 Jun 2025 18:00:28 +0000
Manifest this update:     Mon 09 Jun 2025 18:00:28 +0000
Manifest next update:     Tue 10 Jun 2025 18:00:28 +0000
Files and hashes:         1: 4tGVYU7uSi27UfWyHmnRbE4UQa8.crl (hash: mqryB5CORJl0Iu8bNplh8d/l2saX4fx6vi3tDDfQDvE=)
                          2: I6b16o_Ase2s-4OxbTzP2XU7AO8.roa (hash: 6HiWXRxkCGNhrpcrbbFpGCz17IhI/bbEhWJf+70NeCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:55:d9:d5:26:d7:24:35:ca:10:3b:35:04:47:0c:96:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af
        Validity
            Not Before: Jun  9 18:00:28 2025 GMT
            Not After : Jun 10 18:00:28 2025 GMT
        Subject: CN=ecb05054733c6c1ec053ca7829f4cefb46c0ee8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c9:f1:b1:c6:25:74:99:0f:c1:fb:52:75:e3:
                    b3:04:ff:d8:dc:c4:4d:3a:fe:60:70:2a:4f:f1:91:
                    eb:9d:c4:20:30:69:b6:68:d4:a2:b5:38:ff:af:d6:
                    6a:e9:13:ff:cb:48:07:fe:1e:2d:ba:0d:05:3d:e7:
                    14:f5:55:54:1e:f2:2a:0a:2a:c6:97:37:8c:66:62:
                    62:b7:c6:11:a9:f4:b3:8e:75:ed:3b:ca:f4:0e:07:
                    ca:a5:23:56:28:b0:a2:86:a7:fc:ec:b4:90:94:c3:
                    f5:cd:81:95:c2:95:b9:5e:5b:d9:97:d6:3e:69:3e:
                    93:c6:7c:c3:2a:79:47:c7:f3:7d:4e:91:b7:e2:cc:
                    b3:62:10:06:4d:ba:c8:2a:83:58:b8:e4:6c:15:11:
                    4a:48:99:f5:26:ea:0b:3f:80:1d:c2:d2:6d:fb:39:
                    ca:f8:44:14:6c:aa:90:e8:fc:ab:10:77:0d:06:a8:
                    c8:aa:1c:15:ab:50:b8:ab:1c:f0:56:63:90:67:68:
                    df:7f:e0:78:f3:e3:bc:c5:b3:84:f6:73:cf:ee:0e:
                    5c:f8:e5:b4:c7:0e:13:dd:f7:d3:e6:7d:45:1b:8b:
                    8f:e8:73:52:31:a9:be:73:de:e2:72:b6:c2:65:6f:
                    cb:9d:02:76:02:b1:8f:e2:41:56:c6:c8:24:24:f5:
                    91:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B0:50:54:73:3C:6C:1E:C0:53:CA:78:29:F4:CE:FB:46:C0:EE:8F
            X509v3 Authority Key Identifier:
                keyid:E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:c1:fb:20:6d:eb:75:05:2c:e6:39:ac:e1:a3:15:57:78:c5:
         48:d4:d1:1c:2d:b9:cf:04:cd:0b:80:f0:73:f3:9e:bb:3c:ea:
         96:04:30:55:bc:79:a0:b9:2a:b3:0a:d8:32:e1:8b:ce:0d:12:
         af:89:9c:dc:b4:a1:19:9b:aa:ae:2e:55:67:c7:48:45:80:0b:
         23:e2:ea:d4:ae:a6:0a:66:44:47:66:5e:b2:8f:d9:73:e3:e2:
         a6:b5:14:47:f2:34:0b:b6:bf:c3:31:d2:1f:c2:cc:28:51:16:
         0c:77:c6:39:da:5e:44:24:6c:a6:1f:9a:0a:3e:7b:c3:2b:b0:
         45:be:35:4a:19:a2:87:83:3d:75:0a:ca:47:33:48:3f:f5:93:
         78:7b:df:af:35:2b:5c:b1:54:68:20:8a:6f:b6:cb:ef:07:0c:
         00:23:6f:02:24:13:0a:ec:8f:1b:81:8d:d1:03:46:47:e1:01:
         b7:0c:e4:41:d6:90:27:a8:d1:4c:1d:d4:db:6a:9f:05:43:1f:
         22:df:ad:d7:aa:01:ec:14:1d:08:71:d9:73:60:82:e0:88:55:
         3b:8d:78:9e:48:2a:07:b0:72:74:cf:0e:5f:9f:63:d1:f8:cc:
         9b:e1:9a:15:e0:76:60:93:d6:32:3a:b0:79:87:57:a0:02:e6:
         6f:8b:9d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 01:12:39 2025 by rpki-client