Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
File:                     F42BIe9wTXqXcMPs4eIFYUeQrDk.mft (raw, json)
Hash identifier:          lBZNjzNd/EiowHCUEtulopKCE2rXkr5aMtrj15pUdUc=
Subject key identifier:   DC:26:4D:1E:2B:3B:99:6D:E4:CA:A3:C9:23:0D:A2:17:DE:7C:53:59
Authority key identifier: 17:8D:81:21:EF:70:4D:7A:97:70:C3:EC:E1:E2:05:61:47:90:AC:39
Certificate issuer:       /CN=178d8121ef704d7a9770c3ece1e205614790ac39
Certificate serial:       019769CF210951A402E8EFDFBC62B7F98C17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
Manifest number:          04E5
Signing time:             Fri 13 Jun 2025 15:01:11 +0000
Manifest this update:     Fri 13 Jun 2025 15:01:11 +0000
Manifest next update:     Sat 14 Jun 2025 15:01:11 +0000
Files and hashes:         1: F42BIe9wTXqXcMPs4eIFYUeQrDk.crl (hash: xSElkaFfaKyplqRL8dd7gvRMKPNDqDPY8F9E9KRDapA=)
                          2: tQhQQED_2rbtgmsDxQqfycOcoj4.roa (hash: 7QkytynjV9fTl5bHPu2TPRokrjL3zXWtRN7glg7QEBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 15:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:cf:21:09:51:a4:02:e8:ef:df:bc:62:b7:f9:8c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=178d8121ef704d7a9770c3ece1e205614790ac39
        Validity
            Not Before: Jun 13 15:01:11 2025 GMT
            Not After : Jun 14 15:01:11 2025 GMT
        Subject: CN=dc264d1e2b3b996de4caa3c9230da217de7c5359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:18:af:79:58:e6:28:e0:7e:2c:d7:a6:e2:85:
                    d0:89:e4:97:9e:ca:2e:13:1f:76:9c:b8:a6:1b:96:
                    6c:90:b0:5b:fa:8c:df:ab:8e:b7:64:12:26:67:42:
                    bc:fc:54:13:25:11:63:4c:1f:18:67:2d:81:30:63:
                    55:b5:ec:a5:33:9f:fc:44:9a:7e:59:75:71:32:e8:
                    98:24:05:c4:d3:f1:0a:5d:f8:a3:ed:c0:b4:3b:a5:
                    3c:e6:96:52:5f:bc:90:af:b5:a1:11:f4:8f:c3:3b:
                    e3:97:df:6a:1c:7e:c0:42:a2:82:65:80:21:c2:33:
                    23:fb:68:d0:b2:13:44:f2:36:01:c0:72:98:3a:05:
                    a1:77:ca:36:61:bd:c2:2d:39:0a:a6:66:99:ef:91:
                    ee:1c:cc:8f:d4:63:33:17:ad:18:af:a9:50:f7:02:
                    2b:f4:a9:56:a8:d5:aa:02:4e:c8:dc:96:05:9e:03:
                    0a:59:5a:1d:94:20:e3:09:05:ac:dc:54:db:00:71:
                    14:f9:b4:aa:01:da:6e:26:bb:f9:3a:c1:61:e7:9c:
                    cf:bf:c7:27:4b:5e:6e:27:92:5f:50:a6:26:b9:52:
                    fb:9f:1e:5f:4d:30:83:bf:ed:16:32:f8:c5:5d:b7:
                    e8:ab:65:14:d0:4e:7b:1c:10:b9:5e:ac:78:73:d1:
                    81:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:26:4D:1E:2B:3B:99:6D:E4:CA:A3:C9:23:0D:A2:17:DE:7C:53:59
            X509v3 Authority Key Identifier:
                keyid:17:8D:81:21:EF:70:4D:7A:97:70:C3:EC:E1:E2:05:61:47:90:AC:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:c8:32:90:22:8c:52:13:e5:3c:e4:6a:fa:8a:62:a8:5a:44:
         17:b3:f5:c9:00:65:16:c0:ed:92:31:09:28:ea:e2:36:37:a1:
         93:d6:a9:99:da:09:eb:c8:65:e7:79:93:72:5f:b3:62:2e:b5:
         71:1c:d9:d9:ae:f3:ae:7d:82:8b:84:ec:e4:ce:36:f7:65:73:
         38:53:85:47:dc:fc:3e:81:a1:13:b2:59:92:9a:eb:e6:ff:8c:
         ce:33:3f:d0:5c:20:7a:41:e6:31:73:98:f0:35:31:2d:60:e5:
         2c:b9:f4:ff:22:f6:fe:c7:f6:2a:f2:05:4a:15:b6:c6:d2:f5:
         f1:bf:b0:3e:0b:3e:ca:7e:53:d2:f5:51:3c:0c:e5:cd:28:e8:
         7d:59:51:b3:80:1b:f6:a3:aa:79:a1:fd:c4:8f:79:6c:82:ba:
         38:32:22:4b:24:da:82:23:66:c4:85:3a:13:0c:fb:12:cf:db:
         6c:7f:44:83:30:98:96:8d:63:8d:40:f0:78:9d:89:b9:5c:a4:
         3b:17:7f:7e:66:e6:8c:c3:27:29:2a:1b:82:b5:4c:eb:37:59:
         06:24:0c:80:ef:7b:34:08:cb:74:6c:d6:0a:97:b4:d4:9d:2c:
         bf:34:ca:b6:e6:74:49:f0:44:d1:55:11:7a:ec:92:e0:d2:63:
         57:2c:42:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 00:34:45 2025 by rpki-client