Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
File:                     4Wjja6V37UfmkocpaRmR5OfyNdo.mft (raw, json)
Hash identifier:          9QBNKRFgKxig/evjRoe21Id4v6wXH2Z3J2iiXzI0x+Y=
Subject key identifier:   D0:DA:68:5B:09:A8:D7:5B:AA:AD:F9:FB:DF:16:B6:EF:99:27:C9:CA
Authority key identifier: E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA
Certificate issuer:       /CN=e168e36ba577ed47e6928729691991e4e7f235da
Certificate serial:       0197469D8D1DD88D46F580D3EFE83B7284F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
Manifest number:          0C11
Signing time:             Fri 06 Jun 2025 19:00:19 +0000
Manifest this update:     Fri 06 Jun 2025 19:00:19 +0000
Manifest next update:     Sat 07 Jun 2025 19:00:19 +0000
Files and hashes:         1: 4Wjja6V37UfmkocpaRmR5OfyNdo.crl (hash: /6/KcJVxc9J3oC6iOSEIodEFbzVSDr0is+CMZlROjq4=)
                          2: AUxf95vk-o1Gt_wrf6UPvy-h7OA.roa (hash: wvFv9nzKIVnXA7Zw/hu/kaD5HOZlQJgT9zV6+OcXJBw=)
                          3: HKDlTUsL1fmB-oiAZcWxWBPpDcU.roa (hash: PObhBDwRkZyevOSM5huA6knnfjTYj1bgluiflgFLp/c=)
                          4: vuTwV8s3dn69U4Rqa-5cKrrJqjA.roa (hash: rpsPpW15eqZG/XbbOl1/Yv+x/+71Dg60CplH4I4uv0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 19:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9d:8d:1d:d8:8d:46:f5:80:d3:ef:e8:3b:72:84:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e168e36ba577ed47e6928729691991e4e7f235da
        Validity
            Not Before: Jun  6 19:00:19 2025 GMT
            Not After : Jun  7 19:00:19 2025 GMT
        Subject: CN=d0da685b09a8d75baaadf9fbdf16b6ef9927c9ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:62:9f:63:98:ea:59:11:72:34:87:c1:66:6c:
                    d6:ab:10:85:7a:14:72:44:d0:7e:d9:c4:90:a1:5e:
                    fb:89:66:58:3d:e1:30:f4:49:64:bb:37:97:fe:ff:
                    54:ba:61:4c:cc:a2:cf:85:5c:a3:00:47:aa:34:ad:
                    d9:06:9b:57:93:ce:35:de:78:ee:34:3d:8c:65:1b:
                    ad:03:08:2f:3e:ac:36:69:73:a1:a4:9e:0e:ae:44:
                    de:2c:a4:bd:79:f8:d7:57:b7:17:e2:9a:fd:7c:9c:
                    de:8a:dc:06:ab:a1:b5:d8:8d:ec:a1:89:64:2a:39:
                    48:6b:3f:e8:cd:6a:8a:90:64:e2:19:83:14:ec:8e:
                    7a:e6:12:00:68:81:7b:78:85:9b:2d:65:0f:7a:ca:
                    a8:46:a1:97:87:7f:38:ce:36:ad:f8:4f:37:b1:f4:
                    2b:8c:a2:25:f2:07:4a:be:ac:48:fd:8e:33:3d:b6:
                    db:ac:f8:7d:2e:08:5b:3a:37:ed:bf:f5:cd:a4:8d:
                    f3:75:78:54:45:c0:b2:84:2b:1e:42:9b:8f:59:db:
                    5c:d7:42:bf:cd:e3:5f:27:5b:7b:ff:0b:6e:3f:66:
                    1d:f4:97:02:ef:1f:1c:8b:cb:80:4d:d1:24:ad:82:
                    8a:22:90:d8:b3:36:99:57:2c:3d:d8:e3:55:ba:2e:
                    b4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:DA:68:5B:09:A8:D7:5B:AA:AD:F9:FB:DF:16:B6:EF:99:27:C9:CA
            X509v3 Authority Key Identifier:
                keyid:E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:9e:d9:1f:06:1e:84:14:3c:c3:64:8e:e6:b8:c1:04:e4:1e:
         16:22:c8:56:2f:d0:c2:98:7c:31:e5:64:11:4a:22:60:d8:89:
         c6:13:25:a1:fb:91:f7:77:2e:4e:93:81:d7:a6:98:90:d0:ad:
         1b:d4:c4:6d:0c:56:15:f5:b0:8a:ea:70:0b:b9:33:80:1b:c9:
         88:99:ee:47:bc:e7:ee:cf:54:3a:ec:4e:07:3a:c2:a6:45:5a:
         9c:82:82:ed:c1:da:5c:92:5e:57:19:72:25:de:45:3a:18:a5:
         a9:8a:62:2a:24:63:50:c0:2b:62:df:19:33:49:48:5e:60:38:
         c3:f4:d6:58:85:69:ec:f9:f5:9e:de:2e:eb:98:4a:af:ee:55:
         f9:c9:ad:59:39:ee:fc:99:1c:c8:1b:9a:6a:b9:1c:59:05:1a:
         c3:71:00:b1:0d:66:ff:49:c8:72:0f:fe:e1:a2:dc:0e:26:6f:
         76:14:ff:fb:1d:31:f9:32:c9:62:f7:95:9e:da:b8:23:95:15:
         8e:1c:15:00:1f:a7:09:76:e3:57:03:bb:63:d9:7e:ec:37:f7:
         85:f1:06:71:8e:ee:a9:ed:d9:b8:6a:74:cf:bd:b2:d9:36:71:
         68:87:90:ed:c4:22:ec:77:2a:ad:cd:4f:47:43:cf:84:bc:1e:
         cc:9e:d8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:45:17 2025 by rpki-client