Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
File:                     4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft (raw, json)
Hash identifier:          GBS3rx07cDF6cOHYjz0dhlPsodiPscEo9bhPC8u9I0U=
Subject key identifier:   6F:39:34:4D:DC:7A:8C:8A:D0:A7:C0:AB:6A:CB:F9:FF:5E:81:4A:83
Authority key identifier: E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
Certificate issuer:       /CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Certificate serial:       01976C98A227360A1965640B8D74E5B38DFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
Manifest number:          12DF
Signing time:             Sat 14 Jun 2025 04:00:31 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:31 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:31 +0000
Files and hashes:         1: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl (hash: bPwVAD6RgBqIxjBmUU56kQApdgMIKIOtkMrQfQPMNcs=)
                          2: wo2zdFr365giMD5GmJjbyQ_qVBY.roa (hash: Sf7Mc4QUihOBo0PCO1f1MqbHphMDfRs2qmYoA4b7koM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:a2:27:36:0a:19:65:64:0b:8d:74:e5:b3:8d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
        Validity
            Not Before: Jun 14 04:00:31 2025 GMT
            Not After : Jun 15 04:00:31 2025 GMT
        Subject: CN=6f39344ddc7a8c8ad0a7c0ab6acbf9ff5e814a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ef:34:90:1c:b1:ca:ca:fa:3f:2e:fb:e6:d7:
                    0c:69:92:0a:27:e9:70:d2:12:63:c6:87:9b:8a:20:
                    d4:9c:88:10:13:3c:59:58:04:a7:78:a0:23:d7:86:
                    5c:b9:93:0d:ab:03:e2:7f:85:1e:33:ac:e1:55:21:
                    6e:51:cb:17:1a:a6:1d:b8:a1:1a:50:72:b3:86:38:
                    9f:db:1d:6f:ca:fe:71:c1:a4:84:65:82:21:19:b5:
                    c2:bd:c0:57:c0:57:46:fc:a0:c8:cd:10:d4:03:f7:
                    b0:00:30:00:e2:be:52:47:f4:db:21:ba:22:b8:95:
                    e3:d9:f7:46:b3:0a:00:db:75:d1:4f:bc:8e:e4:ab:
                    41:12:09:a3:c9:f8:ef:80:91:2c:dd:8f:a7:e3:7f:
                    28:45:08:7d:a6:a1:fd:a9:49:ef:a4:e7:32:8e:59:
                    17:66:79:de:5a:45:c4:47:83:c5:a5:0f:10:8b:10:
                    de:a8:61:8c:bb:39:dc:d5:0a:84:64:dc:e9:23:05:
                    ea:cc:ba:a8:ef:b4:a1:53:ca:ca:9f:6f:6a:14:7b:
                    ce:44:97:47:d4:66:cf:28:ef:1e:d4:c9:e9:c1:bd:
                    6e:ef:19:af:c9:b9:ea:69:12:ec:04:34:2f:a2:51:
                    8d:de:60:e9:4f:39:7c:3b:3d:8f:d9:20:76:b7:4d:
                    53:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:39:34:4D:DC:7A:8C:8A:D0:A7:C0:AB:6A:CB:F9:FF:5E:81:4A:83
            X509v3 Authority Key Identifier:
                keyid:E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:29:6d:f3:ad:2e:17:28:e1:43:71:a8:11:5a:2f:71:0d:84:
         80:0c:92:0b:a8:72:67:78:bd:b0:e9:58:69:5f:08:ec:56:13:
         0e:21:11:31:30:be:a2:a5:30:ce:06:47:ad:7d:82:3a:d4:97:
         48:39:c4:20:08:9e:11:67:c0:4d:14:c5:d9:7f:d8:fe:ae:c3:
         0e:ed:17:05:c5:41:4d:1e:aa:5f:f9:ad:81:90:c6:4c:78:46:
         6f:ac:32:2f:0d:36:d2:10:e0:d2:0c:d2:2c:ab:49:ba:af:7a:
         b5:a4:ca:f3:e4:7c:90:84:5e:10:26:c0:4e:80:60:a1:b9:47:
         b8:78:14:8f:52:84:2d:bf:02:79:00:bb:0b:38:a7:65:08:98:
         f0:4b:4d:69:28:2f:cd:03:ff:4d:44:04:30:81:68:17:11:07:
         f8:59:ce:e4:a9:77:60:3d:f3:9b:56:a8:c6:f5:96:08:59:e6:
         89:c7:f5:8c:99:42:6c:88:04:6e:eb:8b:e9:8a:d4:18:83:e0:
         ac:69:e6:2b:57:29:ec:a1:2b:1e:7d:ea:eb:87:ce:6d:1d:be:
         c2:68:7b:c0:c8:d3:22:5f:57:c6:df:60:b8:b9:96:43:70:13:
         56:76:b5:75:0a:f3:96:6d:1d:e0:b0:ac:69:de:2c:bf:08:32:
         a7:6f:20:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 07:31:08 2025 by rpki-client