Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
File:                     4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft (raw, json)
Hash identifier:          6Voa5+BGhvfaj2kh+P8HFMUH3t4JqC9nQFeAa7VfBuY=
Subject key identifier:   2F:CA:AE:F8:9C:31:1D:F8:6B:92:E3:65:F0:C5:6F:3D:CB:23:CA:C9
Authority key identifier: E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
Certificate issuer:       /CN=e1900e5596c0837497f1189410b1ed22acdb7e13
Certificate serial:       0197586D9B93E7B7573358541CBFB3558281
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
Manifest number:          0A9E
Signing time:             Tue 10 Jun 2025 06:01:07 +0000
Manifest this update:     Tue 10 Jun 2025 06:01:07 +0000
Manifest next update:     Wed 11 Jun 2025 06:01:07 +0000
Files and hashes:         1: 4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl (hash: Lfp8XNPyD5pJl67ojqT2wJPmhhl0+jFK5iA+IVawU2I=)
                          2: 8jfWRZ1NLj1bjkrxzRMG9yYupLo.roa (hash: 89HNIKxmIWfFBZvw0N2AfHWlUXDjHZG4VVH2GueEE+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 06:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:6d:9b:93:e7:b7:57:33:58:54:1c:bf:b3:55:82:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1900e5596c0837497f1189410b1ed22acdb7e13
        Validity
            Not Before: Jun 10 06:01:07 2025 GMT
            Not After : Jun 11 06:01:07 2025 GMT
        Subject: CN=2fcaaef89c311df86b92e365f0c56f3dcb23cac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b9:d3:45:2b:12:84:31:21:3e:b2:88:19:2a:
                    cc:31:fc:29:05:5e:0c:08:e9:d8:f0:0c:d6:48:16:
                    ff:0c:03:5c:75:14:90:b0:72:3f:7c:c3:47:9c:14:
                    56:61:25:df:32:43:b0:c8:11:b9:49:05:16:5c:6f:
                    8f:3c:40:8b:b9:ee:fb:10:88:90:87:9b:39:d3:7c:
                    38:5c:07:48:34:db:88:d4:f0:14:1f:6b:95:e7:08:
                    42:83:c3:ba:14:49:34:0e:d3:99:35:72:52:cc:cf:
                    04:2a:71:b1:2f:10:8c:7a:24:49:7a:5a:f3:f1:3c:
                    5b:bd:d7:35:de:ad:9f:cf:d0:41:55:a8:b5:8a:66:
                    49:ca:26:df:d8:72:05:19:de:f2:70:cd:46:62:78:
                    7f:ac:3e:59:b1:de:fb:9d:42:e5:1f:39:1d:7c:bc:
                    b7:c8:8d:a1:e7:6d:ec:f1:ec:fd:76:48:cd:f8:7f:
                    7f:ed:36:96:55:ad:e0:de:70:01:1f:aa:52:d4:24:
                    22:49:67:d4:45:5e:95:fe:0a:74:91:65:bd:cd:db:
                    b6:9d:2b:84:70:6e:12:8b:39:93:4c:df:17:07:c2:
                    68:3c:d5:3b:17:2c:32:65:13:c6:93:11:a0:ce:85:
                    81:4e:5d:58:da:61:ec:33:43:27:17:9d:03:ab:75:
                    17:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CA:AE:F8:9C:31:1D:F8:6B:92:E3:65:F0:C5:6F:3D:CB:23:CA:C9
            X509v3 Authority Key Identifier:
                keyid:E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:9e:fd:41:11:d4:70:19:4b:d7:c2:3a:06:5f:ce:27:dd:43:
         bd:18:6b:09:1f:6d:03:fe:8d:27:cf:b3:ba:d4:e9:0a:8f:3b:
         94:73:92:72:e6:5e:46:91:d3:ff:4c:77:50:8c:34:23:cd:5f:
         7a:e8:50:3a:e2:30:48:9e:0d:9a:b7:a1:5a:11:ec:20:2b:22:
         f2:2f:d0:68:4d:27:af:88:32:57:b4:c0:1d:14:64:43:61:5c:
         51:05:8c:f0:dd:03:2a:1e:f9:f8:ab:13:ff:15:92:01:a7:77:
         9a:2e:79:e4:27:ae:0d:5f:1b:8b:62:53:d4:28:11:a8:90:c0:
         11:e9:22:1e:05:c6:6c:22:af:c7:bd:2a:99:7d:c9:ea:76:a2:
         0b:c3:5e:ae:89:de:c9:65:41:0f:9d:f0:b4:29:fb:5d:ac:db:
         78:90:71:c4:af:d8:7a:36:bd:f9:eb:89:3b:cd:96:33:cb:fb:
         c6:54:4d:88:70:3a:73:83:c0:61:3b:66:07:02:5f:f9:ae:d5:
         0a:8c:52:89:40:25:73:5b:85:bf:e0:b8:5b:e4:c7:d8:2e:50:
         eb:22:e9:95:68:29:6b:d1:37:99:07:74:67:78:db:87:60:8a:
         c4:43:ab:d0:9a:a8:d2:fc:58:36:c4:56:f7:de:c2:42:9c:f6:
         a6:89:87:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:03:30 2025 by rpki-client