Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft
File:                     e4mF-uoIWYwFzDC4LigjBq95MxY.mft (raw, json)
Hash identifier:          XMQCOBE6Ggp72RLocqA9xKxm+3ebBjQ9YZ8Ip4W4I0c=
Subject key identifier:   C4:D1:34:A8:FF:38:9F:DD:38:5A:37:20:1C:66:F5:F6:81:93:F0:D6
Authority key identifier: 7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16
Certificate issuer:       /CN=7b8985faea08598c05cc30b82e282306af793316
Certificate serial:       01974D0DD7BFF859C2365731974DDD27E1F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft
Manifest number:          0E19
Signing time:             Sun 08 Jun 2025 01:00:42 +0000
Manifest this update:     Sun 08 Jun 2025 01:00:42 +0000
Manifest next update:     Mon 09 Jun 2025 01:00:42 +0000
Files and hashes:         1: e4mF-uoIWYwFzDC4LigjBq95MxY.crl (hash: 7/HeLLAk0lEVnD4Ee7kHhWV8cE0pHt/K3EH9MU/6wik=)
                          2: wezzDoLmoG44JNaFHHcOefdwrnE.roa (hash: feMtqmKbJF8l19fJuaMh5zzlgwe36jwzuX192DfrtQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:0d:d7:bf:f8:59:c2:36:57:31:97:4d:dd:27:e1:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b8985faea08598c05cc30b82e282306af793316
        Validity
            Not Before: Jun  8 01:00:42 2025 GMT
            Not After : Jun  9 01:00:42 2025 GMT
        Subject: CN=c4d134a8ff389fdd385a37201c66f5f68193f0d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:dd:3b:44:e3:e0:fd:33:b6:91:79:39:52:7b:
                    ac:48:30:b1:1e:f8:be:90:c7:5a:4a:cd:13:db:e1:
                    44:3e:1d:96:cd:2c:eb:f1:53:4b:1b:21:51:32:42:
                    3b:7f:8f:37:1e:71:51:c7:fd:92:27:dc:9d:d1:f1:
                    73:ee:53:1f:e6:00:7d:77:c3:45:aa:d6:6f:44:db:
                    f3:fd:56:81:f9:77:7f:99:23:cb:d8:1b:16:49:03:
                    d9:75:4a:56:4d:a3:84:73:6a:fc:c2:50:98:a6:a0:
                    10:b8:64:bc:c5:b8:75:e0:65:40:c4:e3:81:72:de:
                    3f:a5:c8:7a:1f:88:89:aa:2a:7f:5e:39:c1:51:a6:
                    c3:54:78:f6:39:5a:3e:6a:8e:39:55:45:da:28:92:
                    cc:04:74:12:ac:be:58:d8:91:68:95:d6:96:b9:f5:
                    e5:87:4c:63:ca:ad:97:14:7b:bb:2b:72:d3:e3:31:
                    4b:cd:b7:76:aa:10:a9:d0:15:9d:76:59:2d:f4:1c:
                    4f:0c:72:4e:00:c3:e8:ce:93:b8:ef:3f:45:c2:c8:
                    40:e1:b7:15:4d:cc:bc:39:a2:cc:b9:51:ca:44:2f:
                    03:6e:da:45:d9:34:1b:94:f1:6a:ca:27:00:59:ea:
                    7e:fe:02:79:33:c8:1b:0a:c7:82:00:bf:48:bd:25:
                    c9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D1:34:A8:FF:38:9F:DD:38:5A:37:20:1C:66:F5:F6:81:93:F0:D6
            X509v3 Authority Key Identifier:
                keyid:7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:2c:f6:38:8a:40:0f:82:9e:92:a6:b9:9a:3e:9f:71:58:ad:
         be:e5:50:4e:c7:2c:93:eb:62:95:d1:f5:5c:8e:9a:4a:ad:ca:
         33:d9:82:49:10:43:83:4b:4b:76:66:eb:70:2c:4a:e8:dc:b1:
         22:5c:84:d5:3a:04:8c:c7:cf:0d:ea:62:94:d6:dd:7e:ec:f3:
         0e:8e:0a:4b:7b:d1:e6:fb:ee:af:87:a8:32:09:4c:49:9f:26:
         9d:e3:ee:74:c7:0d:e8:ff:94:ef:13:91:87:b3:41:5c:21:34:
         72:eb:41:ff:a1:da:04:11:3a:67:ed:ee:a3:9a:94:d8:fa:51:
         9b:72:c2:3c:9f:27:97:ca:22:e3:3d:6c:46:ef:24:c6:bf:46:
         81:e2:08:ee:3a:86:83:bc:96:04:f6:5f:e6:04:5c:c0:c4:5a:
         8b:02:d5:ac:b6:17:3d:e7:72:5d:b8:c2:f2:e7:f2:71:95:d1:
         3f:5c:e1:43:bb:66:87:fd:60:a5:a8:2b:46:e8:ae:b7:21:cb:
         9e:bf:8e:cd:0e:56:26:64:41:74:2e:e0:26:a1:8a:2a:de:e5:
         ef:25:b5:4f:29:43:be:2c:93:67:4f:f0:dc:21:8f:e3:19:73:
         2f:ad:60:df:5a:d6:35:72:ab:de:e3:09:0c:64:61:bc:b4:bd:
         7a:9f:0f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:21:49 2025 by rpki-client