Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
File:                     t4Z4vWVMprEKXHc7wml1TcI0z9U.mft (raw, json)
Hash identifier:          8eVSgRcH5TkHtr/O3+qk1rqqABbMzpYRJymmvbWs5zw=
Subject key identifier:   18:0B:5D:A8:0F:87:2C:D6:9A:02:61:AD:1B:FF:EB:99:96:C9:EB:9B
Authority key identifier: B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5
Certificate issuer:       /CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
Certificate serial:       019746671EAC7BA2C5736F8FD84E91A043E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
Manifest number:          04F9
Signing time:             Fri 06 Jun 2025 18:00:52 +0000
Manifest this update:     Fri 06 Jun 2025 18:00:52 +0000
Manifest next update:     Sat 07 Jun 2025 18:00:52 +0000
Files and hashes:         1: P0UPsrwwEpdQwdedOlBN_0JW76s.roa (hash: XTTIfgwtO/hFYhC4hGvqLqbBL3XWX9y/VAMeHabMSVo=)
                          2: Pw9RBJHk-6VJkZDkzezuuvzuMDc.roa (hash: KTrqAB2f6AG6ZEjHFsNbuwHsaF5ZAPbnL9PTp9QHu7g=)
                          3: YtQ9-mlElYwUpXvtTBFXExjq8_8.roa (hash: wqv6+ikYWOEh+dOT8PJAZxp/xzYOpnhQ7lDZyj0SG6U=)
                          4: nKXRC9NUlEgavRczr20Fd3QUFbg.roa (hash: OalBK1MOuAYl+k92ndjaYk1jljs83aLhrbEyE88Tedc=)
                          5: t4Z4vWVMprEKXHc7wml1TcI0z9U.crl (hash: yA6ecP6x8vCXbp+vmpKCcdeWMshmFLdm61w1QY6t+CA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 18:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:67:1e:ac:7b:a2:c5:73:6f:8f:d8:4e:91:a0:43:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
        Validity
            Not Before: Jun  6 18:00:52 2025 GMT
            Not After : Jun  7 18:00:52 2025 GMT
        Subject: CN=180b5da80f872cd69a0261ad1bffeb9996c9eb9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:60:3d:f5:d3:da:23:26:97:9b:c2:77:5f:b8:
                    26:e7:fd:6e:43:d2:5a:96:5b:2f:01:7e:3d:f6:87:
                    9b:6d:6b:00:58:33:42:09:24:54:3e:8c:e0:f4:8b:
                    26:41:bb:b4:1e:d9:20:5c:e1:da:03:84:91:0a:25:
                    3c:58:fc:af:fe:23:d2:97:82:8c:ae:41:b9:94:74:
                    c5:f8:c1:f7:83:3e:76:34:22:26:9b:ea:69:bd:ec:
                    fb:36:27:b9:cc:0c:a5:9d:82:db:84:55:55:ce:ec:
                    ca:82:b2:39:ff:d9:56:62:e3:66:47:8d:3f:de:1b:
                    ee:d8:54:39:ad:d5:a5:a7:f6:8b:16:dc:0c:b5:4b:
                    1d:d0:b4:51:db:98:c6:84:7a:15:65:d3:96:cf:8b:
                    a2:07:a1:21:94:78:9a:98:41:b5:b0:64:63:5d:98:
                    4f:e7:29:3a:5c:15:87:89:27:f3:83:3c:f5:36:df:
                    0a:f1:16:03:96:0b:90:6e:80:d6:69:f3:0f:29:a7:
                    ad:8e:28:26:d5:95:29:18:ee:af:cc:5c:3a:00:3c:
                    2e:a2:6b:fa:12:89:4e:f4:f5:8c:c9:d4:05:22:55:
                    50:87:93:af:f0:27:2e:69:4f:b8:6c:e2:93:59:11:
                    50:4e:fe:2a:6d:5f:56:32:a7:25:76:a5:0a:6b:f4:
                    e2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0B:5D:A8:0F:87:2C:D6:9A:02:61:AD:1B:FF:EB:99:96:C9:EB:9B
            X509v3 Authority Key Identifier:
                keyid:B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:18:b8:ea:27:5b:a9:6b:66:87:b5:d0:d5:a2:31:e6:74:12:
         90:d8:ff:ea:25:4a:fa:44:45:94:f5:b5:ff:39:36:0a:b9:7c:
         7a:68:68:c1:15:dd:c6:b6:0f:03:73:ae:3a:18:c5:07:34:03:
         45:6d:24:7b:1e:e5:1a:d1:b5:37:ae:cd:54:b6:02:12:bc:99:
         76:34:b6:70:00:f6:b3:a4:5c:d5:c9:46:b5:e5:a0:43:ca:b4:
         4e:5a:10:6e:2e:b7:80:f4:78:ee:2d:eb:e5:88:ff:6d:3f:a5:
         81:dc:b4:5a:a9:61:c8:89:44:bd:2d:11:df:ba:a7:a2:c0:77:
         40:bb:f9:96:c2:fa:f1:6f:4c:4c:e4:52:8a:49:7d:5c:af:03:
         26:81:f7:76:01:30:d5:e9:fd:18:32:1c:c7:85:e7:ce:9f:9b:
         1e:cb:db:1e:be:4b:99:5e:2a:14:e4:b4:b2:aa:c8:f6:78:31:
         9d:d3:96:ff:01:e0:7d:b4:1a:84:e5:7a:40:72:82:72:17:8a:
         a1:13:0b:e2:56:c2:40:43:93:f2:84:98:e9:6f:81:9a:1a:a7:
         69:a3:f1:94:fa:06:11:e2:48:42:5a:ef:59:ac:c1:57:0a:61:
         86:56:7d:41:ac:64:5f:ae:e1:d7:0d:ea:8c:29:ec:5d:6a:02:
         84:3d:27:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:41:15 2025 by rpki-client