Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
File:                     4cg4iRtR4GfqLr-aRNloAUhWLpY.mft (raw, json)
Hash identifier:          J8ki6Mfhk0gUXG+1p076u0PGN1/Le6LacKFGfp0rb+M=
Subject key identifier:   B6:86:3E:C5:98:B3:1B:A2:87:D2:56:28:1B:C3:A4:41:00:41:B4:A5
Authority key identifier: E1:C8:38:89:1B:51:E0:67:EA:2E:BF:9A:44:D9:68:01:48:56:2E:96
Certificate issuer:       /CN=e1c838891b51e067ea2ebf9a44d9680148562e96
Certificate serial:       01962BCEDC177642C9999A4081AFF515BB9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
Manifest number:          0E10
Signing time:             Sat 12 Apr 2025 21:01:39 +0000
Manifest this update:     Sat 12 Apr 2025 21:01:39 +0000
Manifest next update:     Sun 13 Apr 2025 21:01:39 +0000
Files and hashes:         1: 4cg4iRtR4GfqLr-aRNloAUhWLpY.crl (hash: f12lyn5oLpU3eUEX39wUq0PZZnNF9RVkVLINlFW1490=)
                          2: bmdi-xlLqO-hV5jpMLaaLmUh0MY.roa (hash: fx7rUOLjdEuqg3ZsveozXFH6Izun+R1RWfyBZEftQT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 18:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2b:ce:dc:17:76:42:c9:99:9a:40:81:af:f5:15:bb:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1c838891b51e067ea2ebf9a44d9680148562e96
        Validity
            Not Before: Apr 12 21:01:39 2025 GMT
            Not After : Apr 13 21:01:39 2025 GMT
        Subject: CN=b6863ec598b31ba287d256281bc3a4410041b4a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:96:b8:d0:05:9c:cd:97:2c:01:c2:13:8d:7a:
                    94:c6:ad:12:0d:85:b1:45:83:a7:54:e6:35:ac:db:
                    ba:c6:bd:fc:39:c1:9a:33:a4:7c:75:fc:23:91:5e:
                    84:e2:22:f8:0f:f9:8c:52:fc:70:a9:db:8b:1a:ed:
                    14:c7:10:d7:c1:fa:12:11:7b:03:c9:99:3c:65:2d:
                    0c:a9:84:27:30:d9:8a:f0:f4:a9:3f:fc:6a:05:58:
                    b6:f3:d9:76:bd:c7:3c:c1:79:f1:2b:5a:54:37:3c:
                    64:59:40:47:6a:e9:cb:c8:dc:b9:7d:4b:44:e0:7a:
                    19:9f:cc:13:49:00:03:10:a7:bb:e6:2f:59:cf:60:
                    68:ad:4b:7c:46:a2:ca:25:8d:94:cb:54:13:43:81:
                    2a:cb:25:37:1e:5d:6e:ba:ac:0b:4c:16:92:ac:31:
                    fb:cc:d8:cf:03:87:91:f0:88:3f:3e:5b:41:0d:e2:
                    43:ca:8d:b9:6b:dc:19:c8:0f:ce:ab:11:05:90:46:
                    5f:0a:b5:75:91:67:52:14:dc:cc:1f:39:b1:49:9e:
                    de:5b:e1:e1:82:c7:58:15:3b:9a:bf:6c:10:b4:1e:
                    06:b9:09:c0:b9:3f:b3:97:d7:eb:c4:52:b1:33:a9:
                    a0:63:0f:6d:48:d8:a1:18:b5:d7:41:7e:a0:8d:7a:
                    77:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:86:3E:C5:98:B3:1B:A2:87:D2:56:28:1B:C3:A4:41:00:41:B4:A5
            X509v3 Authority Key Identifier:
                keyid:E1:C8:38:89:1B:51:E0:67:EA:2E:BF:9A:44:D9:68:01:48:56:2E:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:e3:5e:c3:55:a7:3d:88:7c:fe:34:7e:64:db:50:79:3b:bc:
         3b:0a:66:f2:96:36:19:a5:fc:63:41:41:69:c8:a7:5d:e2:12:
         12:97:28:fc:c2:39:16:f8:21:7b:1c:6f:65:90:19:c0:22:54:
         15:ce:ff:23:34:6e:29:b3:22:6d:10:83:26:1b:46:a5:50:1c:
         2d:cc:cd:a2:b7:3a:9d:e8:4c:f6:23:85:66:01:11:5d:b6:28:
         a3:5b:11:51:36:ba:85:50:52:79:78:0f:f1:4a:72:79:ae:95:
         5f:b7:a6:ff:de:db:6f:62:98:75:ef:a4:e5:f7:9d:27:36:96:
         ea:23:4c:a3:da:23:33:5c:c0:79:7d:ef:82:21:a1:38:8c:74:
         32:b2:cd:68:7e:1f:e5:87:84:02:44:35:e7:da:82:29:46:44:
         78:69:70:2a:c4:3a:5c:85:3b:9f:d4:aa:81:cf:eb:f1:bf:29:
         be:dc:98:10:43:92:33:40:45:8c:84:d4:94:13:5f:ec:d9:8c:
         7f:ff:91:d7:04:39:30:ef:4d:7b:8f:74:6e:76:e0:45:01:99:
         7e:aa:30:22:94:34:77:3f:8c:50:19:b2:f4:cf:bd:54:0a:0c:
         e3:b2:26:f5:9c:af:a9:69:37:8e:62:45:04:2d:a9:ed:5f:2f:
         1c:6f:ac:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:34:00 2025 by rpki-client