Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
File:                     4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft (raw, json)
Hash identifier:          ViRzdI+f6bM/2FSKxCouDldvRNUW/srBHu8J9lyo9T4=
Subject key identifier:   24:80:0B:4B:38:72:7E:AE:A8:02:EC:B5:42:E0:99:41:05:AC:BC:0E
Authority key identifier: E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4
Certificate issuer:       /CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4
Certificate serial:       01974A7B6C71B16A2834A5B6B01DC80EE1FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
Manifest number:          0FDF
Signing time:             Sat 07 Jun 2025 13:01:31 +0000
Manifest this update:     Sat 07 Jun 2025 13:01:31 +0000
Manifest next update:     Sun 08 Jun 2025 13:01:31 +0000
Files and hashes:         1: 4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl (hash: /J1ae1be7BWbHVszD433zS4zekBxeWzdM7bDXvGtYK8=)
                          2: lEkuEW8EviMetjsHoH1cfPquirw.roa (hash: a862beX9o/VH2MAJR1fguEQH5T+CIEuXUqOcrtZ0/zw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 13:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7b:6c:71:b1:6a:28:34:a5:b6:b0:1d:c8:0e:e1:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4
        Validity
            Not Before: Jun  7 13:01:31 2025 GMT
            Not After : Jun  8 13:01:31 2025 GMT
        Subject: CN=24800b4b38727eaea802ecb542e0994105acbc0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a7:3b:e1:c4:0d:c5:0b:12:46:5c:ac:e4:9e:
                    3a:13:56:fb:7c:2d:77:8f:cd:61:2a:94:96:73:2d:
                    7e:ea:0c:24:0a:0f:9a:42:26:bd:05:86:77:33:2f:
                    00:2f:b3:de:cf:1d:82:09:dc:eb:76:32:52:30:c4:
                    1c:19:2b:f7:82:c8:0a:ee:d1:51:30:e8:74:8e:2d:
                    da:95:d7:07:34:cd:90:59:f2:e7:48:be:43:27:0e:
                    c1:92:b4:c3:f2:80:07:07:a1:16:7f:db:9f:ab:02:
                    1e:ad:1c:ef:ad:41:44:e1:e8:79:c0:b5:f8:87:eb:
                    55:3e:d6:ce:96:9c:08:21:94:4b:6a:1a:39:bf:91:
                    b7:4f:db:8d:85:00:f2:4f:b2:89:42:6e:59:68:09:
                    5e:cf:d7:97:e9:a6:97:8c:d9:8a:49:c2:2c:ef:5b:
                    29:57:09:e8:9e:e6:05:7c:38:53:8a:2d:6b:66:61:
                    19:b4:fe:47:3a:af:db:4f:b2:30:bf:d4:b5:3b:d3:
                    97:7a:de:a8:0d:0c:72:fc:f1:55:6e:3d:34:11:e2:
                    9d:ee:c6:0d:66:4c:c3:70:34:83:37:9c:ec:65:ab:
                    44:0d:bc:e9:ca:50:f5:4b:7f:b7:9a:45:35:1b:40:
                    17:71:d9:81:5d:c1:01:22:2c:2e:39:d4:19:49:01:
                    4d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:80:0B:4B:38:72:7E:AE:A8:02:EC:B5:42:E0:99:41:05:AC:BC:0E
            X509v3 Authority Key Identifier:
                keyid:E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:34:e0:0c:9f:34:70:d3:e4:5e:a7:f3:bb:69:2e:cb:bf:49:
         d0:c8:7e:1f:29:a5:09:35:e4:ce:21:3f:47:31:39:1a:7d:5c:
         ea:94:34:70:13:06:4d:b8:2a:f8:05:51:33:f7:39:67:8c:5c:
         80:a1:d1:a9:88:cc:be:9a:11:0f:ed:96:45:9a:80:6e:56:b3:
         fa:5a:f9:2b:d3:61:a0:97:09:b5:84:cb:7f:0a:38:35:5b:7c:
         18:9a:96:d7:25:0b:a8:5b:02:65:fa:aa:20:e9:0c:a3:45:7d:
         40:d2:cf:90:1c:d7:0f:b1:4c:f2:56:9b:73:f9:7f:d5:7e:fc:
         87:55:55:26:45:fb:6d:fd:80:4c:f3:f8:0d:98:bb:cd:47:d7:
         59:26:8f:6a:fb:bb:5c:1c:93:ff:31:bb:f5:11:23:bc:00:d1:
         7e:4d:9b:cf:a9:b2:78:f3:2e:0c:68:78:7b:e3:ce:ab:b2:91:
         9e:1b:32:02:30:a7:2e:70:5f:ee:df:1a:26:89:c6:a5:e2:39:
         af:84:94:9e:4c:59:60:fd:1b:0a:4c:4d:47:8f:3e:87:a7:9e:
         df:27:fd:f0:d1:f8:11:13:6c:93:78:63:86:29:3c:41:67:1b:
         72:6e:e2:73:2f:01:17:ac:86:65:ed:03:21:e6:c2:d2:92:ad:
         80:dd:f3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:27:20 2025 by rpki-client