Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.mft
File:                     4gjsufNMH7w_NYlxCrPjSfxilcw.mft (raw, json)
Hash identifier:          obtF/msCQOSYvwWJpMZ1bZ1J0Z9rHEYjy97Xq/WDK7A=
Subject key identifier:   99:D5:3A:4C:AB:8B:41:C9:15:9D:99:12:DE:96:61:84:24:13:C3:A4
Authority key identifier: E2:08:EC:B9:F3:4C:1F:BC:3F:35:89:71:0A:B3:E3:49:FC:62:95:CC
Certificate issuer:       /CN=e208ecb9f34c1fbc3f3589710ab3e349fc6295cc
Certificate serial:       0197458B13CE93A0010226936759977E8B23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.mft
Manifest number:          110E
Signing time:             Fri 06 Jun 2025 14:00:31 +0000
Manifest this update:     Fri 06 Jun 2025 14:00:31 +0000
Manifest next update:     Sat 07 Jun 2025 14:00:31 +0000
Files and hashes:         1: 39GioKK3WEGVHUJnnBWLgIR7aNY.roa (hash: 3gqoQOG5P9GOvXCGTNdrghx/0+bSTD9OjFYFlfXtSYU=)
                          2: 4gjsufNMH7w_NYlxCrPjSfxilcw.crl (hash: TtvePnR5Jbu7iWJD9OqFQ0W7gvp9xefpJADwSITAE60=)
                          3: TAZ0gc-5c5t3h8t0iwa-eHM3o3c.roa (hash: Xr3qy5kR4VkDonVYgHy7lT3Fh2h3GWbp6XrLzLyjUKY=)
                          4: kPsQz3rZGj0NaY5zaOwAOAGfhzw.roa (hash: t4mIO0DzkdS2UrnCzo5GKYBcHXxNS07JIm04JWEYKII=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:8b:13:ce:93:a0:01:02:26:93:67:59:97:7e:8b:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e208ecb9f34c1fbc3f3589710ab3e349fc6295cc
        Validity
            Not Before: Jun  6 14:00:31 2025 GMT
            Not After : Jun  7 14:00:31 2025 GMT
        Subject: CN=99d53a4cab8b41c9159d9912de9661842413c3a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:31:96:d4:42:2a:7e:6f:57:b1:1b:23:5d:b6:
                    e2:09:0b:f4:b3:2a:af:1c:15:f6:04:60:e2:31:47:
                    ad:29:91:1f:4e:0c:f1:58:74:cf:02:8f:71:c2:f1:
                    3a:8a:86:92:f7:03:d7:bf:13:94:16:1b:67:22:7c:
                    ba:05:18:53:5c:2e:f1:7e:c9:d1:b1:61:f6:4e:7a:
                    9e:91:18:19:c7:4f:12:51:93:c0:a5:04:fe:9e:34:
                    1b:45:64:b1:35:84:17:03:30:13:e9:ce:93:16:82:
                    85:1a:8e:1a:71:1e:d9:49:4d:34:db:9a:ad:f7:a7:
                    80:27:13:20:d1:b5:c2:2f:09:2b:ee:dd:07:c0:dc:
                    74:e0:be:68:b1:05:57:54:70:3e:ea:c8:57:fa:35:
                    35:1a:4e:54:2c:3e:5b:a2:9d:0a:55:46:2f:49:44:
                    6d:5e:50:c0:d4:49:94:1a:b7:14:4f:88:5c:6c:b3:
                    af:57:e9:d7:38:3f:5e:59:5b:48:2f:d1:c9:30:0e:
                    af:a6:e9:84:de:82:5f:03:81:e7:d9:6b:77:6d:9c:
                    b1:a4:f7:b7:c5:40:86:c6:70:46:d8:c7:89:55:c8:
                    3b:93:8d:68:c0:0f:53:e5:54:cf:bb:f4:cd:74:ef:
                    3c:3d:c8:f8:d9:cf:f0:a1:b8:70:bd:17:be:94:4f:
                    b1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D5:3A:4C:AB:8B:41:C9:15:9D:99:12:DE:96:61:84:24:13:C3:A4
            X509v3 Authority Key Identifier:
                keyid:E2:08:EC:B9:F3:4C:1F:BC:3F:35:89:71:0A:B3:E3:49:FC:62:95:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:03:60:01:ba:74:f0:01:d6:91:6a:d1:53:17:fc:9f:e7:cb:
         5d:e8:e8:b5:27:eb:2f:bb:e4:b4:82:76:50:bc:9d:fe:e8:d6:
         df:bb:79:a0:9e:63:6a:04:cf:1a:5f:2c:77:8f:6e:40:b7:e9:
         08:1a:f7:dd:1a:5c:c3:91:c2:b0:27:98:5c:a2:ed:21:9b:01:
         da:3f:e0:3b:b2:66:8e:45:6b:72:f8:00:f5:39:79:3f:45:6f:
         34:56:cc:b0:d9:4b:9a:68:b8:b0:2f:46:53:af:e9:df:a6:b5:
         df:71:c5:24:4e:71:4b:a0:d9:42:f1:5b:3f:b2:81:ab:6e:7d:
         b4:d3:0a:b8:bd:13:5f:31:15:a1:33:df:a3:c1:c7:7e:8a:10:
         e3:c3:09:e3:15:46:30:83:13:da:fa:7f:93:78:e4:7e:c0:7e:
         c0:9d:8b:a6:e1:ed:e6:f1:75:fc:8c:56:21:2a:89:1a:16:8e:
         8e:6b:d1:51:04:d7:9d:a2:b3:20:c1:a4:aa:fc:b9:5a:a5:4a:
         a3:ef:74:c8:c6:fa:00:79:83:ba:5f:a7:14:c8:77:50:8e:35:
         4b:fa:84:9b:2d:f1:29:e2:63:ca:bb:a9:0f:af:09:cc:fa:b8:
         02:00:89:4d:0f:ad:c7:8d:3a:f5:a1:63:37:d9:91:9c:d4:a0:
         8e:95:17:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:10:43 2025 by rpki-client