Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
File:                     4KWDmEmtO4v_oBSbsOEeZhycPX8.mft (raw, json)
Hash identifier:          dAjIVzI8kGxLV3wPqkfqfXyk8ZObwm+S5sq0q2N5CT4=
Subject key identifier:   FE:DA:EE:A6:01:73:F1:75:A5:9F:79:A7:C7:03:D7:F2:4A:3A:28:6B
Authority key identifier: E0:A5:83:98:49:AD:3B:8B:FF:A0:14:9B:B0:E1:1E:66:1C:9C:3D:7F
Certificate issuer:       /CN=e0a5839849ad3b8bffa0149bb0e11e661c9c3d7f
Certificate serial:       0197470BCCA43C6E2E6EC178E7F3E64451BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
Manifest number:          1577
Signing time:             Fri 06 Jun 2025 21:00:45 +0000
Manifest this update:     Fri 06 Jun 2025 21:00:45 +0000
Manifest next update:     Sat 07 Jun 2025 21:00:45 +0000
Files and hashes:         1: 4KWDmEmtO4v_oBSbsOEeZhycPX8.crl (hash: E9/NZuOBJg7kYMDkBtIn/P80uNlFR2shFUboKzeLfMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 21:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0b:cc:a4:3c:6e:2e:6e:c1:78:e7:f3:e6:44:51:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0a5839849ad3b8bffa0149bb0e11e661c9c3d7f
        Validity
            Not Before: Jun  6 21:00:45 2025 GMT
            Not After : Jun  7 21:00:45 2025 GMT
        Subject: CN=fedaeea60173f175a59f79a7c703d7f24a3a286b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c5:ad:82:71:3e:d5:d5:c0:c0:fd:2d:4e:a9:
                    c2:38:cf:8c:67:f6:44:8c:a5:89:64:92:8d:3e:a5:
                    31:db:b9:b1:d4:5a:ff:5e:17:51:b9:88:05:dc:7b:
                    21:8f:79:3b:b5:0a:ef:ad:c8:a7:77:0d:98:b1:19:
                    79:ac:da:8b:4d:0a:c3:2b:cc:2b:97:9d:86:29:83:
                    bd:a7:d8:cd:31:5d:af:bc:62:3e:e4:f6:ad:bd:44:
                    e9:18:b9:ae:f9:13:fe:6a:00:be:d8:ec:07:8f:a1:
                    84:e9:80:25:89:ef:f2:c5:dd:6c:6d:b2:48:0b:fb:
                    18:6a:6f:47:7e:bc:2d:04:ce:fe:fd:1a:73:3a:69:
                    61:1b:66:62:b5:e5:81:8e:8c:96:eb:76:2c:f6:25:
                    4d:c6:77:ea:7e:6a:16:e1:79:43:ce:84:6e:f9:f9:
                    c9:48:7e:7b:dc:fe:1f:27:93:b8:d6:79:48:d3:26:
                    51:e4:4c:f8:b3:91:91:f5:a6:92:c3:98:71:8c:7d:
                    7c:0f:19:76:0d:9a:5a:bc:29:d4:a3:2a:e3:c0:1a:
                    60:b8:d7:84:61:4b:02:cc:2e:56:c4:16:12:97:ca:
                    16:00:6c:0f:fe:0b:a5:61:64:4b:7c:6a:23:45:7b:
                    9e:de:fa:f2:86:af:79:7d:42:ba:3f:3b:fb:ff:76:
                    a5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DA:EE:A6:01:73:F1:75:A5:9F:79:A7:C7:03:D7:F2:4A:3A:28:6B
            X509v3 Authority Key Identifier:
                keyid:E0:A5:83:98:49:AD:3B:8B:FF:A0:14:9B:B0:E1:1E:66:1C:9C:3D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:98:6f:d4:80:6c:c8:85:82:c4:5d:2b:eb:e2:f9:60:a6:1f:
         7a:06:56:be:d3:5a:30:19:54:d0:75:79:a0:9f:12:82:82:1d:
         dc:9c:d3:74:65:e1:02:27:3f:d0:f6:c1:01:ea:a9:41:88:da:
         4b:35:7b:b4:f0:73:2d:33:bf:3f:fe:68:25:06:99:86:65:5d:
         55:b7:ca:9d:89:93:05:d3:bc:cf:9c:20:ef:9f:7e:c0:c6:4f:
         5b:19:da:f0:02:de:e5:b4:82:c5:d6:cf:0e:75:f3:14:17:52:
         c8:46:99:68:9a:db:1e:a0:2e:62:58:16:e7:a4:62:43:62:26:
         4d:e9:7b:6f:57:c9:50:87:9f:86:4a:99:11:2a:c0:f4:cf:fe:
         a2:4d:b5:85:91:d5:24:a0:fd:ef:8d:88:7c:c7:dc:9d:49:8a:
         e5:ec:d2:99:96:c3:79:2d:79:1c:3f:84:17:21:21:b4:2f:80:
         1a:4d:f5:3d:56:2f:d6:c7:c1:54:ed:ea:38:50:f8:58:c7:ca:
         13:c6:cb:24:da:97:5f:6f:8d:e3:a9:20:6a:c8:0b:a6:63:ea:
         21:42:b6:f8:98:62:b5:e9:4e:43:80:16:0a:a8:33:0e:f1:c9:
         4b:03:c7:82:2b:0f:ef:ab:62:cb:76:f5:f9:ed:b4:b8:ca:3d:
         b8:e9:dc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:50:12 2025 by rpki-client