Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.mft
File:                     4BtODyogHPQwBI4kgWSzLt30Pa4.mft (raw, json)
Hash identifier:          hHPYHMaDR/I9WxJRBbsU1evaWedY1VkKkDmaUfi+v1o=
Subject key identifier:   B5:63:9E:2A:73:1A:C3:19:60:A4:23:1C:33:3F:47:A8:7E:00:80:C2
Authority key identifier: E0:1B:4E:0F:2A:20:1C:F4:30:04:8E:24:81:64:B3:2E:DD:F4:3D:AE
Certificate issuer:       /CN=e01b4e0f2a201cf430048e248164b32eddf43dae
Certificate serial:       01974AE849A6015464BCAEC4DD900CA23179
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4BtODyogHPQwBI4kgWSzLt30Pa4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.mft
Manifest number:          22
Signing time:             Sat 07 Jun 2025 15:00:26 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:26 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:26 +0000
Files and hashes:         1: 4BtODyogHPQwBI4kgWSzLt30Pa4.crl (hash: YVZQ9vYVAUUqX6zemQPj74hc6uEEm/zUBQHk1bLkzp8=)
                          2: KJS8V64pslKuMWFI7cvlulnThJM.roa (hash: TuhgricsSHQzRyANiX5wlopuZuXjn8vfdfEA+WHjVoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4BtODyogHPQwBI4kgWSzLt30Pa4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 15:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:49:a6:01:54:64:bc:ae:c4:dd:90:0c:a2:31:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e01b4e0f2a201cf430048e248164b32eddf43dae
        Validity
            Not Before: Jun  7 15:00:26 2025 GMT
            Not After : Jun  8 15:00:26 2025 GMT
        Subject: CN=b5639e2a731ac31960a4231c333f47a87e0080c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a0:ce:4e:db:75:96:8b:20:41:ee:50:46:74:
                    fb:a5:bf:9c:21:10:5a:99:46:05:93:49:50:e6:bc:
                    4a:e2:60:92:eb:3a:d7:5f:90:8a:79:a5:2d:0a:b1:
                    47:f2:6d:04:72:88:9e:66:97:8a:3d:58:e4:06:d5:
                    e3:29:6c:78:9c:82:08:14:97:f1:dd:b2:e9:4c:77:
                    93:2a:ee:f0:50:15:86:15:ff:00:b6:ce:9e:56:4d:
                    8e:42:90:1e:fa:98:bd:c6:7c:53:11:fa:66:3f:c0:
                    36:27:c8:4d:ad:96:ea:84:2b:f5:de:fb:13:fd:35:
                    5c:87:0b:dc:4d:4a:82:f6:f0:af:f7:bb:96:31:01:
                    90:0e:92:2c:5d:49:3a:d6:04:ee:91:bd:73:b1:d2:
                    e3:41:f8:de:59:64:76:91:ca:ff:c2:f8:c4:34:39:
                    6c:e2:43:2a:89:75:bc:87:30:c1:d8:d0:15:81:fd:
                    da:c3:2f:ea:97:92:10:b3:72:06:dd:2f:e8:4d:d9:
                    24:17:dc:4a:b3:1c:10:4c:31:8c:c5:e5:f0:34:01:
                    06:85:89:8c:0d:71:78:39:a8:d5:1a:97:24:37:41:
                    fc:1b:88:ec:1d:43:c2:f7:48:eb:af:56:8f:ab:08:
                    46:ec:55:69:7a:5e:56:00:3b:8a:f2:82:3d:ad:84:
                    d7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:63:9E:2A:73:1A:C3:19:60:A4:23:1C:33:3F:47:A8:7E:00:80:C2
            X509v3 Authority Key Identifier:
                keyid:E0:1B:4E:0F:2A:20:1C:F4:30:04:8E:24:81:64:B3:2E:DD:F4:3D:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BtODyogHPQwBI4kgWSzLt30Pa4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:80:9e:4d:14:06:a0:8c:d8:e5:22:4d:a2:9a:95:2e:c2:f6:
         2f:e6:23:b9:ff:27:d9:c3:6f:9c:2b:39:11:60:7b:4d:45:58:
         c2:cb:1f:84:c3:70:b8:24:8f:5e:35:f8:0b:04:60:8e:20:c1:
         1f:52:fe:90:ec:e2:63:4f:fd:9a:32:6b:a4:95:c9:3f:2d:48:
         5e:0b:72:8d:0f:a7:ee:b2:99:1f:f7:3b:7a:db:66:2a:cc:23:
         9c:ba:5b:9d:8f:55:75:00:1d:67:fe:8c:1b:06:35:44:6f:31:
         04:57:d5:fb:b0:5e:3d:31:d1:10:37:74:19:70:33:17:c4:4b:
         4a:2d:a8:18:d8:e6:21:a7:94:7b:f0:1f:06:9f:89:4d:a1:ab:
         04:06:12:6b:d0:28:c4:74:91:52:a9:7c:92:02:31:3f:b4:cc:
         96:14:6c:51:25:6b:bc:4a:d0:aa:d5:c9:20:6b:17:d1:e3:56:
         69:e7:9a:29:ee:3c:f1:23:52:ad:26:a4:a9:07:e6:b2:b8:b2:
         6d:cc:f6:7c:17:00:53:2d:04:d0:a6:d3:76:64:6d:3a:a8:63:
         ef:ee:f2:c2:57:08:4e:86:8a:3f:29:4d:38:1f:83:5e:10:66:
         18:bb:8e:6a:97:ca:c8:c5:b3:48:0a:56:40:e7:8a:88:18:fc:
         7e:f1:be:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:54:35 2025 by rpki-client