Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
File:                     4Sz8faj6dKFt04wXwgoBksuy0_4.mft (raw, json)
Hash identifier:          bnTBI2rlLm6QoXuysDPnSFGEDtwZ9heC4rTaax1c6QE=
Subject key identifier:   B0:D7:D6:AA:1F:8F:C6:D8:99:6E:FB:C0:EB:F4:B3:AB:70:07:D6:37
Authority key identifier: E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE
Certificate issuer:       /CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
Certificate serial:       019752D8EBCE26B84F2F45874134F862A960
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
Manifest number:          0C51
Signing time:             Mon 09 Jun 2025 04:00:37 +0000
Manifest this update:     Mon 09 Jun 2025 04:00:37 +0000
Manifest next update:     Tue 10 Jun 2025 04:00:37 +0000
Files and hashes:         1: 4Sz8faj6dKFt04wXwgoBksuy0_4.crl (hash: BEOTef2eDuCEzB/tETbiYMahV9FQUgI8KMjPzDDB0Qw=)
                          2: CzgWRo2OrtBEMKgJ83rtq5Y3g98.roa (hash: 2xTrIXSTjNXzltKj7q0eYjRCvrpmaN3vPbRoQNYjpK8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:52:d8:eb:ce:26:b8:4f:2f:45:87:41:34:f8:62:a9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
        Validity
            Not Before: Jun  9 04:00:37 2025 GMT
            Not After : Jun 10 04:00:37 2025 GMT
        Subject: CN=b0d7d6aa1f8fc6d8996efbc0ebf4b3ab7007d637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2c:f3:6c:d4:68:eb:24:b1:70:97:d7:0c:21:
                    bc:3c:16:ed:26:25:e2:0f:19:ed:96:46:58:c1:ac:
                    e3:31:9a:29:21:4a:06:e5:a3:3f:79:fe:be:3b:99:
                    53:a2:a3:3c:08:27:79:94:11:e4:8d:34:36:97:14:
                    6e:e0:95:ff:0c:9a:20:53:5a:f3:64:e2:f4:77:d1:
                    e2:ad:95:b5:45:fc:a9:24:bd:36:bb:21:dd:30:d6:
                    a9:41:85:6a:e3:f0:50:de:c0:90:c1:29:d4:12:73:
                    1c:45:dc:11:7b:a5:a8:f6:5d:3c:5e:44:8c:5a:c0:
                    11:ea:69:eb:f9:d3:5f:fb:42:71:fe:fc:96:cd:68:
                    26:d0:55:50:b5:85:b2:e2:ee:64:e3:7c:35:87:bd:
                    b1:54:db:25:09:e0:27:16:af:61:a3:18:36:89:fd:
                    cc:69:eb:a7:37:d6:97:78:94:70:a9:09:4a:31:9f:
                    20:a9:dd:04:23:25:56:7f:bd:34:38:29:5a:d6:28:
                    2f:91:cd:d2:39:4c:87:f1:df:bc:30:f9:23:96:9d:
                    3f:f5:df:73:8d:27:9e:3c:0d:0e:bd:0c:df:a1:37:
                    54:6f:44:a3:82:08:4f:20:36:d7:a2:03:d2:d2:74:
                    f5:86:cb:15:22:e8:d1:f6:f4:63:4b:02:ff:e6:3c:
                    f6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D7:D6:AA:1F:8F:C6:D8:99:6E:FB:C0:EB:F4:B3:AB:70:07:D6:37
            X509v3 Authority Key Identifier:
                keyid:E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:90:06:75:b2:38:ab:3f:14:de:e7:4a:ac:b0:3b:d4:eb:67:
         90:68:fd:e8:18:73:01:39:8b:28:e0:5d:0c:fb:52:54:56:7c:
         f8:b2:32:a2:a5:43:0f:6f:10:15:b1:1c:5c:ef:75:56:1c:8d:
         a9:05:3c:a2:fb:78:0c:5f:ff:51:f5:ce:b9:88:76:07:54:88:
         76:b7:5e:56:53:bd:90:79:fd:fe:48:22:d8:c0:1d:69:5e:bf:
         91:39:b5:a4:cf:23:e5:ea:54:58:f8:e5:77:f1:ff:7f:37:7d:
         1f:9d:25:c7:a6:ac:52:c1:d2:1f:51:2f:eb:d3:3b:9c:3b:df:
         e9:92:f8:cb:b6:aa:73:d5:4a:f8:05:ec:8a:f3:d4:c7:ac:8c:
         cd:79:e2:ca:46:f3:1d:5c:12:1f:40:d9:ca:5f:ae:f9:70:30:
         d2:85:ea:18:c2:3c:12:e1:1b:15:3c:81:88:8d:91:f3:21:9f:
         bb:fc:f0:0f:c6:44:a7:a5:c5:e4:90:cb:38:80:29:38:d0:4e:
         8d:2c:15:be:f6:02:ee:72:c2:9c:8f:62:7e:84:7a:71:92:a0:
         97:09:4a:8b:26:bf:76:2f:d2:78:d8:01:e8:4d:3d:47:fb:2b:
         0e:17:0d:1b:87:d7:cc:52:3b:c3:ea:90:56:ce:61:ae:6b:ab:
         9b:14:f9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:49:39 2025 by rpki-client