Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.mft
File:                     4te3649H5Sd5Ev8FjP7X2Jn8abk.mft (raw, json)
Hash identifier:          aTpnY4SfDMA9BIwongbXySxrWq9oaQjY/J8vyugeKU4=
Subject key identifier:   C2:40:2A:51:9C:44:1E:E1:40:7C:F3:46:C7:F9:C0:F2:C5:13:35:7C
Authority key identifier: E2:D7:B7:EB:8F:47:E5:27:79:12:FF:05:8C:FE:D7:D8:99:FC:69:B9
Certificate issuer:       /CN=e2d7b7eb8f47e5277912ff058cfed7d899fc69b9
Certificate serial:       0197469EC86C4ED7119CD39891F5EEF50476
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4te3649H5Sd5Ev8FjP7X2Jn8abk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.mft
Manifest number:          150A
Signing time:             Fri 06 Jun 2025 19:01:40 +0000
Manifest this update:     Fri 06 Jun 2025 19:01:40 +0000
Manifest next update:     Sat 07 Jun 2025 19:01:40 +0000
Files and hashes:         1: 4te3649H5Sd5Ev8FjP7X2Jn8abk.crl (hash: uyWITpuEoWpTUC00FREGaWVZRTyV430PJAASXEp9mqQ=)
                          2: T7HJ2-tjdriOGAxfth6N3m1dxyY.roa (hash: llPCQsjAeQDplZsfiLoaF630T6RziIZ2ZPKVofqV5Fw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4te3649H5Sd5Ev8FjP7X2Jn8abk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:c8:6c:4e:d7:11:9c:d3:98:91:f5:ee:f5:04:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d7b7eb8f47e5277912ff058cfed7d899fc69b9
        Validity
            Not Before: Jun  6 19:01:40 2025 GMT
            Not After : Jun  7 19:01:40 2025 GMT
        Subject: CN=c2402a519c441ee1407cf346c7f9c0f2c513357c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a9:dd:68:e7:60:d5:3d:e3:90:f3:ea:91:9a:
                    40:7c:39:b6:92:9e:49:e4:c7:f4:a2:dd:21:03:11:
                    0f:66:cb:01:99:bd:c3:03:c4:78:4d:48:a4:21:6c:
                    95:8d:c2:0d:41:77:74:c3:cb:72:55:a7:a3:6c:f9:
                    cb:6d:38:75:27:64:34:32:6c:95:da:6e:27:ff:c9:
                    e1:ab:5b:3d:da:94:6c:5d:80:42:df:ad:11:1c:23:
                    95:c7:6c:18:e5:7d:00:da:d6:bb:df:ae:a8:aa:3d:
                    90:d0:37:10:63:f4:59:67:e8:1b:f5:a5:60:3d:6e:
                    62:d8:a4:8e:e6:d6:0e:33:11:16:97:a0:a9:f0:ed:
                    f6:7e:dd:61:a7:a7:c7:a9:3b:31:40:4a:6d:e7:b0:
                    87:80:a8:8f:87:04:fa:3a:87:f6:53:36:cf:63:1d:
                    53:8a:1e:6d:84:eb:74:db:ea:ad:3a:7f:b2:89:81:
                    f5:dd:0c:01:3e:f9:f0:88:84:87:a9:e4:91:67:3a:
                    9b:1e:81:c0:0b:5c:79:18:b9:78:41:c7:08:7b:6b:
                    9d:62:d0:d8:55:21:f3:98:ef:48:d3:f0:09:a2:78:
                    b1:09:cc:01:a3:bb:5e:2d:40:ae:ec:7f:30:e7:61:
                    ac:22:90:9b:39:5f:87:e1:59:65:c3:1c:b7:9b:ce:
                    ce:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:40:2A:51:9C:44:1E:E1:40:7C:F3:46:C7:F9:C0:F2:C5:13:35:7C
            X509v3 Authority Key Identifier:
                keyid:E2:D7:B7:EB:8F:47:E5:27:79:12:FF:05:8C:FE:D7:D8:99:FC:69:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4te3649H5Sd5Ev8FjP7X2Jn8abk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:39:2d:60:df:96:97:ca:ef:11:be:80:77:57:d9:4c:20:bf:
         39:41:3a:b4:4a:c2:48:c9:df:ad:5e:85:80:3f:b0:96:66:69:
         2e:f5:9a:7b:10:24:73:89:ec:1d:31:5d:6b:4d:80:12:04:22:
         a8:b4:3f:8e:3e:68:3c:c6:0f:b4:07:7e:2b:a9:25:1e:19:7e:
         bc:41:50:54:93:fa:b3:79:a6:53:4e:b5:7b:49:93:53:c8:4f:
         5b:25:1a:82:20:cb:8b:b2:a9:4d:d7:da:1c:8b:09:3b:0d:d8:
         e5:9d:0f:a8:7f:e8:d9:45:e0:48:02:5e:47:0b:53:2f:4f:4f:
         ea:95:d7:89:f9:b9:2f:de:c9:2a:d9:ba:f5:c1:c1:58:a6:49:
         0d:ab:32:fc:cb:ef:22:7f:7a:5b:9b:ce:35:a9:93:62:ba:22:
         e0:36:38:05:fc:98:11:ef:2a:8a:6e:b8:ca:b0:c5:12:2b:84:
         b1:dd:9d:c8:e8:06:09:88:d1:32:13:71:e7:87:0b:cf:02:e8:
         4e:01:9b:5a:6e:17:43:01:d5:ea:75:ac:68:da:75:41:46:0f:
         d6:45:1a:d1:49:f7:1d:19:59:c3:49:76:a4:29:b1:f9:8f:78:
         33:0b:dc:81:76:ff:83:35:19:4f:68:d4:ba:9a:5a:d0:8e:29:
         24:e9:03:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:02:15 2025 by rpki-client