Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
File:                     4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft (raw, json)
Hash identifier:          8Xiu9uAM1j2Hp0nSXSC8NlrRyB8V0w48GkIWfxeehEE=
Subject key identifier:   77:30:F6:F2:B3:B9:33:14:E6:04:1D:43:7A:FC:58:C5:09:A5:7B:03
Authority key identifier: E2:3F:8F:5C:52:42:5D:F6:2B:44:45:43:3A:AC:FD:8C:A5:BF:2E:9D
Certificate issuer:       /CN=e23f8f5c52425df62b4445433aacfd8ca5bf2e9d
Certificate serial:       01975D9364C2100E06172021EA92F6A4F985
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
Manifest number:          0206
Signing time:             Wed 11 Jun 2025 06:00:29 +0000
Manifest this update:     Wed 11 Jun 2025 06:00:29 +0000
Manifest next update:     Thu 12 Jun 2025 06:00:29 +0000
Files and hashes:         1: 4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl (hash: AvbYepAREI2iwMphl0+TmWc6IuSAL6C8i181WJjtE6Y=)
                          2: 6ppH0TTYhzfLzHV3xSzl4LSdV6c.roa (hash: OehC5Yx+JGVn7qI8wxptwUUS4CQUtx99kzGyWmtybhI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5d:93:64:c2:10:0e:06:17:20:21:ea:92:f6:a4:f9:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e23f8f5c52425df62b4445433aacfd8ca5bf2e9d
        Validity
            Not Before: Jun 11 06:00:29 2025 GMT
            Not After : Jun 12 06:00:29 2025 GMT
        Subject: CN=7730f6f2b3b93314e6041d437afc58c509a57b03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:42:62:95:fe:8f:bc:67:43:02:ee:3e:69:33:
                    c9:d0:e8:55:f6:76:ee:8d:b1:9e:0e:22:b5:72:51:
                    fc:68:45:97:b3:a1:4d:d4:b8:c9:03:dc:e1:9a:81:
                    0f:de:0e:36:6d:1e:5a:d2:51:25:c8:d0:11:87:4c:
                    3f:72:9b:42:7b:15:05:ad:70:4e:02:47:48:f2:19:
                    2d:73:22:8c:99:f7:18:6f:e6:0b:a1:cb:77:1f:d3:
                    95:7e:d3:e5:c6:35:80:7e:cb:fd:ad:74:d7:de:eb:
                    5d:db:91:92:44:5c:e1:b2:76:93:d9:46:7b:c7:9d:
                    9f:09:ca:06:44:43:3f:68:fa:43:61:85:1d:20:38:
                    3b:20:d6:87:b4:84:1c:14:8e:4b:04:70:7b:d4:c8:
                    9c:c5:f4:9a:72:12:60:5b:61:28:9a:05:e1:91:83:
                    f8:cf:ca:ae:22:46:5f:c6:88:f1:2c:a0:68:de:75:
                    00:ad:f9:87:0d:72:3e:4a:22:24:41:cf:fd:34:d3:
                    42:ff:56:db:32:9c:03:88:37:f0:80:ec:bc:f7:1a:
                    3b:7f:7d:ee:db:69:14:b1:62:37:fa:6a:65:fd:9c:
                    ad:70:cd:ac:22:c5:15:b4:c6:d7:71:df:a7:60:f3:
                    11:99:9b:76:04:c7:38:62:e5:b6:8c:6d:ce:c7:65:
                    a5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:30:F6:F2:B3:B9:33:14:E6:04:1D:43:7A:FC:58:C5:09:A5:7B:03
            X509v3 Authority Key Identifier:
                keyid:E2:3F:8F:5C:52:42:5D:F6:2B:44:45:43:3A:AC:FD:8C:A5:BF:2E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:02:5c:08:4f:6f:6d:24:ab:54:1a:fe:05:19:e1:6c:03:be:
         dc:0e:4f:3b:4d:b6:16:f8:8a:3a:0e:94:d6:09:55:8a:9d:b1:
         ea:f0:4f:24:ef:16:fb:89:37:5b:a7:60:11:e7:bd:3d:4b:63:
         7b:3f:40:fa:d1:5f:f8:70:af:5a:b1:17:c7:24:b4:c5:aa:4d:
         c7:23:dc:73:c1:b4:cd:21:8c:f4:dd:50:bc:af:7f:85:f3:13:
         d5:0f:91:a2:a7:72:96:b8:1e:6e:6a:bf:df:95:4f:d8:81:4c:
         49:32:c3:ac:23:66:59:5b:51:c1:db:e2:7d:e6:fe:6f:ce:f2:
         2c:81:2c:ff:6e:0c:ab:fb:55:cf:19:7c:d6:14:04:5a:60:c2:
         27:58:1c:cd:ac:26:26:d7:05:77:fa:08:9b:70:95:42:b1:3d:
         24:41:f9:64:6f:ad:97:d3:60:e6:d0:6e:d5:7a:6e:c6:45:8f:
         67:c6:a5:45:5d:53:17:c0:09:5a:67:46:ef:85:fd:3e:95:fc:
         64:f5:b0:ff:45:62:6f:9b:5f:9e:63:33:59:a0:bf:24:6e:0c:
         f1:e8:93:e8:55:24:43:87:7e:ae:66:99:42:b6:a3:0a:e7:b7:
         d9:cb:92:0b:8d:0e:d0:4a:c2:a5:83:f3:a3:ca:69:16:53:bf:
         e1:83:2b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:39:46 2025 by rpki-client