Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
File:                     4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft (raw, json)
Hash identifier:          Cwf0NUaAR9vQ6KGbmpvLh8JM12EAReWWBYG9Rnt7Q8w=
Subject key identifier:   E8:89:23:15:AD:2B:46:BA:48:6A:50:54:B1:D4:58:1C:E6:5F:53:2B
Authority key identifier: E3:E4:6E:2C:40:16:A8:D7:39:2C:85:74:13:4F:D4:79:3B:94:15:A4
Certificate issuer:       /CN=e3e46e2c4016a8d7392c8574134fd4793b9415a4
Certificate serial:       019759EDCE3D0A16754B83679040B3F46B7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
Manifest number:          10F3
Signing time:             Tue 10 Jun 2025 13:00:46 +0000
Manifest this update:     Tue 10 Jun 2025 13:00:46 +0000
Manifest next update:     Wed 11 Jun 2025 13:00:46 +0000
Files and hashes:         1: 4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl (hash: x52eSdZN6LbdC0S/HUq2umd0B2SHo2NAeHr7VH2tU0g=)
                          2: rxnNIrhG3QldlOPtvjeA2wvjFbs.roa (hash: 2BblVg4dCI71TgTK0hUX2laI8AdtzWYFSV42O2qiwl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 13:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:ed:ce:3d:0a:16:75:4b:83:67:90:40:b3:f4:6b:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3e46e2c4016a8d7392c8574134fd4793b9415a4
        Validity
            Not Before: Jun 10 13:00:46 2025 GMT
            Not After : Jun 11 13:00:46 2025 GMT
        Subject: CN=e8892315ad2b46ba486a5054b1d4581ce65f532b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:05:cf:62:2a:a3:64:09:ce:bf:96:b9:9b:43:
                    72:79:c6:ea:d9:3f:c4:9c:d1:18:c5:d1:e6:68:cd:
                    5f:10:73:19:97:0a:63:59:88:56:3b:34:d0:83:76:
                    be:50:44:87:75:ab:44:e3:52:ab:fd:98:fa:c4:41:
                    13:69:cf:4e:d3:b0:0d:04:e8:4e:b2:2b:c8:a0:87:
                    91:b5:67:d4:51:f4:3a:73:9a:da:e0:53:24:72:25:
                    65:eb:65:63:e2:45:e6:e0:12:37:2e:84:42:46:43:
                    d3:88:ca:c5:e0:33:2b:84:4b:f4:0f:67:b7:64:e2:
                    10:b0:4c:68:6e:93:5c:9f:17:b5:5b:a4:bc:aa:2a:
                    ef:d5:5d:bc:fe:a4:87:e1:5d:bb:4c:f0:a6:9d:eb:
                    c3:92:16:b0:48:db:d8:7b:bd:dd:1a:df:6c:0c:2d:
                    80:cb:f2:3f:1c:8b:4e:ed:b8:16:85:b3:d2:f1:18:
                    42:57:f1:be:28:97:3c:90:55:96:d7:1f:16:32:d0:
                    99:89:99:8c:98:3c:00:82:3e:89:d4:0f:61:bc:4b:
                    e3:0d:81:09:7a:87:09:c1:40:a1:f3:98:14:b8:d6:
                    66:99:02:92:df:96:1a:59:3c:b6:4b:ae:57:7b:24:
                    7f:e9:53:f8:d7:7c:28:de:a7:6c:95:a3:00:92:e6:
                    52:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:89:23:15:AD:2B:46:BA:48:6A:50:54:B1:D4:58:1C:E6:5F:53:2B
            X509v3 Authority Key Identifier:
                keyid:E3:E4:6E:2C:40:16:A8:D7:39:2C:85:74:13:4F:D4:79:3B:94:15:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:66:5b:e4:a2:73:cf:46:25:b2:7f:83:ff:fb:fc:53:0e:33:
         8f:07:b5:b5:c2:97:d1:63:db:a8:c4:41:37:9e:64:e5:bd:fe:
         cb:82:1a:21:33:f1:e9:eb:ba:ca:21:e9:e2:47:1c:80:70:11:
         d1:e5:97:21:ba:40:9a:fb:b9:a4:54:6b:d1:0d:ae:9f:29:e3:
         7a:a4:31:71:75:ff:df:f8:e6:75:69:0b:83:8a:7a:7e:e5:11:
         c4:a8:48:aa:fe:89:2c:55:39:49:3d:3d:3d:da:9e:d0:4e:f8:
         7f:45:ab:97:d8:18:88:69:11:77:d1:a0:a9:b6:3e:6f:bb:c0:
         2c:41:53:de:e9:08:9b:dd:74:51:84:e7:e0:df:1b:53:fb:02:
         ca:71:ec:ae:01:f3:90:71:eb:67:db:d1:a0:bc:82:11:2c:e1:
         5e:cc:b9:fb:d6:aa:cc:ec:23:42:14:dd:18:4c:b0:fe:4c:44:
         e2:67:e8:e2:5f:55:7e:9b:a6:1d:c1:7c:f9:1e:c8:05:5c:40:
         d5:76:5f:27:0d:e1:9d:1f:04:ad:98:5a:41:a2:ba:3a:60:5a:
         43:00:91:67:b5:71:ba:d2:5f:77:9a:27:d1:bd:d2:c0:b0:96:
         b4:6e:29:56:93:0b:a1:db:0d:7d:d1:9b:f1:9e:e9:f8:0d:50:
         07:67:b7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:51:17 2025 by rpki-client