Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
File:                     4gThwgEU13MWlN3E8nfE3xv_xPg.mft (raw, json)
Hash identifier:          YjRRLKTwlDGRHjiFfxXnDajN4P2obUj7mNyj+CNy/ns=
Subject key identifier:   3C:D3:5D:E7:C5:1B:9C:69:75:92:F3:35:0D:31:7E:89:96:80:17:D4
Authority key identifier: E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8
Certificate issuer:       /CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8
Certificate serial:       0197504602842F2C9897BF1834882F793CCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
Manifest number:          1582
Signing time:             Sun 08 Jun 2025 16:00:54 +0000
Manifest this update:     Sun 08 Jun 2025 16:00:54 +0000
Manifest next update:     Mon 09 Jun 2025 16:00:54 +0000
Files and hashes:         1: 4gThwgEU13MWlN3E8nfE3xv_xPg.crl (hash: HXLW5Jz1Vyx5q3kLxyicFXCw3gC7fkx6K1zx/0JiuP8=)
                          2: BDxLMkKnaceqpe6Gqca_PK3aI0Q.roa (hash: g477khgykIY2Mcl6yKjre2phFpHAMbTwNboQthw3CVw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:46:02:84:2f:2c:98:97:bf:18:34:88:2f:79:3c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8
        Validity
            Not Before: Jun  8 16:00:54 2025 GMT
            Not After : Jun  9 16:00:54 2025 GMT
        Subject: CN=3cd35de7c51b9c697592f3350d317e89968017d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:07:72:2d:9a:60:c7:cf:19:ec:2c:66:fb:2c:
                    7c:1a:b2:48:a4:52:26:e3:e2:6f:48:a3:9f:28:49:
                    e8:32:0c:1a:fc:eb:1f:b6:fb:e4:e0:2a:6d:8b:0b:
                    a0:63:80:51:f1:48:a8:02:ef:b0:46:24:f1:9f:0d:
                    43:68:e0:6f:49:fe:34:24:ab:15:38:ac:13:b1:45:
                    2b:a2:b1:5c:88:ce:c2:75:1b:75:42:20:45:e8:17:
                    02:95:38:47:5a:e9:dd:0a:8b:b6:5c:35:81:49:09:
                    fc:34:fe:45:a2:70:4f:15:8b:e1:63:24:b0:0b:a1:
                    b6:d3:6e:c3:2c:81:cd:94:df:83:cd:52:ee:28:f8:
                    0b:c2:61:29:99:fc:e1:8a:53:00:5c:1c:e8:76:3b:
                    ab:b7:2a:26:f0:61:c0:98:5a:bd:29:a0:b3:e0:49:
                    a5:ba:87:31:f2:65:43:d0:af:e4:51:7c:e2:29:e5:
                    bc:d9:dd:15:ab:a8:4f:ea:54:01:f9:46:2d:49:7b:
                    9e:56:f2:2a:ff:8b:a5:46:8e:6b:d5:17:12:b1:c3:
                    88:7b:33:a1:e8:7f:19:eb:2f:14:be:2d:53:bf:20:
                    5e:a1:7b:ec:2b:f4:7b:eb:f0:31:ce:2b:46:72:41:
                    b4:f7:d1:12:8a:78:77:55:16:c3:75:6e:06:6b:ff:
                    d4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D3:5D:E7:C5:1B:9C:69:75:92:F3:35:0D:31:7E:89:96:80:17:D4
            X509v3 Authority Key Identifier:
                keyid:E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:ce:20:2f:16:6e:96:9d:11:15:e8:8d:e6:59:a1:ba:36:20:
         1a:50:75:ad:56:f0:a8:12:7b:2b:51:cb:3e:fb:47:ab:11:a2:
         db:f3:16:b8:7f:39:2f:ec:c9:e9:ec:84:40:9a:39:d6:f9:e6:
         46:ff:9f:14:b8:e2:c1:81:a6:af:b3:7b:64:fe:32:37:14:14:
         d3:66:47:25:64:d0:e4:3a:03:c4:72:19:64:d9:10:ea:ce:98:
         b9:ae:55:3b:9f:0a:24:0c:5b:70:d0:91:b8:fc:01:47:ab:8f:
         89:c2:91:61:53:d4:c4:27:40:c6:42:25:95:17:c3:38:32:53:
         e8:25:d8:53:72:28:fe:dd:ea:15:56:96:ec:84:29:95:7a:14:
         d8:51:0f:0a:ae:19:81:d6:4f:e8:c6:e3:bd:6c:01:77:dc:39:
         9b:b9:f9:90:01:01:47:54:e2:20:fe:2a:7f:cf:da:1e:38:53:
         fc:3b:9f:d9:81:00:6f:b6:0d:f0:86:57:ec:c0:15:d6:db:a8:
         6c:84:bf:0b:33:57:0d:a5:fe:61:fc:33:0f:e8:43:59:b8:08:
         da:13:55:05:9e:08:bf:47:d3:da:22:08:e3:29:c3:ab:aa:ab:
         e8:e8:18:bb:3d:43:2a:bf:15:14:8a:fa:6a:6b:45:6e:97:a2:
         09:c1:af:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:49:24 2025 by rpki-client