Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
File:                     r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft (raw, json)
Hash identifier:          my0bSE6OZ5tny7J4VGb9875Yo0n8M9EdMX9ugdcyA5M=
Subject key identifier:   C4:4C:FA:71:E3:3D:D0:F0:B5:28:A7:4F:78:AD:24:67:F5:C2:E4:14
Authority key identifier: AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
Certificate issuer:       /CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Certificate serial:       0197387450128412DAE7F577CEDC194CEBFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
Manifest number:          15D2
Signing time:             Wed 04 Jun 2025 01:00:36 +0000
Manifest this update:     Wed 04 Jun 2025 01:00:36 +0000
Manifest next update:     Thu 05 Jun 2025 01:00:36 +0000
Files and hashes:         1: G4Jxn_aqBgyU9_YGlRiE9ULjWaU.roa (hash: RbL+vfgJwT99KSNM/1Fv+iOzh78qncOg1wBYg2kVVuA=)
                          2: IoD5gau8ca33bX7P3LRLuiKbRZM.roa (hash: j9p5Da+/+Yzr/MRz0NAUAXr0JoA15rp7WE5vGQVI32s=)
                          3: TkJi6MAHiQpNj2Oyk40aOzqLJ7Y.roa (hash: I/uwWwVqDGThqp+KA/qqLKY8rR+9iLdzyQtCR4yZvrA=)
                          4: dloKOBWhD03M_kraHOqHku83sEM.roa (hash: iTKdGVzolVyeN+BFAw6tpWp/3mRhoL6QqBxrLBSJzEE=)
                          5: r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl (hash: vQv/+08PQD+1u0ztXcAP/86+VJUEbtMBulNVd8VIedM=)
                          6: yNtguhxLlGFfI9XOFYXxQMQLlUo.roa (hash: CRlX9/2P79xJ+8xnxa+t5w4SEHZe79te4oGn3OoZ39E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:38:74:50:12:84:12:da:e7:f5:77:ce:dc:19:4c:eb:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
        Validity
            Not Before: Jun  4 01:00:36 2025 GMT
            Not After : Jun  5 01:00:36 2025 GMT
        Subject: CN=c44cfa71e33dd0f0b528a74f78ad2467f5c2e414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9f:5e:8d:eb:78:c5:d7:ac:2a:a8:9d:08:d0:
                    60:b4:2b:56:be:a8:c0:b7:03:92:b9:f8:84:b1:30:
                    15:ce:e7:66:1a:f7:5f:a7:b0:a8:c2:18:5b:74:b2:
                    e7:14:e7:1d:f5:91:4f:6b:ee:d2:48:2e:62:97:b1:
                    96:ab:31:da:aa:66:de:e4:52:d6:10:a5:b5:0a:f8:
                    78:9c:f4:3a:e0:75:f2:2d:72:a4:2f:a2:fe:58:28:
                    3a:33:d5:ba:7f:47:a9:06:b9:95:06:99:c2:23:e7:
                    be:79:05:0a:57:df:12:36:98:8a:3c:b7:84:1d:c4:
                    88:e6:a9:ae:f4:0f:ae:92:c9:90:95:a3:8c:91:5a:
                    be:ad:3c:ae:23:a2:e3:63:f6:6f:b8:1e:a7:10:39:
                    ef:3a:96:2a:d6:1a:9d:a6:f9:03:89:65:53:dd:a9:
                    5d:8f:ca:a4:58:4a:28:37:cc:a4:c4:2f:b0:9a:cc:
                    9e:80:77:6d:85:33:7d:fa:cd:dd:16:db:ba:a7:6e:
                    d7:ac:5d:08:a0:5b:2a:f7:89:60:20:9c:45:39:61:
                    27:08:c1:50:c0:da:42:b0:6d:93:44:88:18:f0:81:
                    ab:fc:93:13:18:36:85:bd:aa:6a:b4:bd:0f:06:1a:
                    e7:c3:dd:d3:47:d7:08:69:99:50:e4:36:c6:5b:bb:
                    0e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:4C:FA:71:E3:3D:D0:F0:B5:28:A7:4F:78:AD:24:67:F5:C2:E4:14
            X509v3 Authority Key Identifier:
                keyid:AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:77:5a:1a:b3:56:54:79:ff:fd:bc:4a:98:77:7e:da:ba:f6:
         9c:e9:b9:cb:57:2a:46:c3:c6:77:3e:20:2c:e9:70:c6:2b:cc:
         e0:18:8e:58:ef:68:82:f7:b7:12:a6:ec:ea:f9:ce:59:cf:9a:
         5a:46:0a:71:44:ef:34:32:35:43:94:2a:f9:3c:d8:de:c9:f0:
         1a:7d:af:f1:f5:cc:1f:ab:df:69:aa:89:2e:1f:32:7b:ed:96:
         bc:21:e8:ac:46:e2:08:79:37:ed:a0:48:28:88:f5:51:0b:62:
         ed:98:c1:4b:43:e6:a4:05:c2:d3:56:c9:e8:17:40:ee:f0:49:
         35:cc:58:b0:5a:2f:36:89:05:d6:80:02:0c:4c:0b:d1:7d:36:
         77:cb:55:d7:35:f4:aa:49:d1:e1:b5:15:d7:a0:3d:41:41:58:
         77:ad:11:c3:a6:e2:d1:0e:39:fc:d0:cc:c7:39:c8:e4:4d:f4:
         34:36:25:af:94:4a:ee:b9:c6:13:74:65:06:21:3e:11:3e:db:
         fc:c9:e3:9e:83:60:2d:81:56:16:8c:7d:3b:70:74:d1:f7:fc:
         c6:5f:96:e9:eb:11:f8:6f:01:02:69:cb:ce:6f:57:f2:c8:6c:
         04:8d:38:bd:f2:b4:c3:48:77:9e:b1:f6:c0:8c:5d:07:cc:ca:
         bc:dc:7b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:20:10 2025 by rpki-client