Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
File:                     4i1-riHYuu6d5pQNjOaynZKpAx4.mft (raw, json)
Hash identifier:          jeWB1KN76OqBHe51WOJyDaISzqUICodYBq4CFwbNwUg=
Subject key identifier:   7E:54:99:96:74:2F:91:93:51:4A:25:CB:5F:16:50:8E:E4:ED:A9:0A
Authority key identifier: E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E
Certificate issuer:       /CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
Certificate serial:       0197395086BD5DF492E8BBA545B239BEB539
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
Manifest number:          04B3
Signing time:             Wed 04 Jun 2025 05:01:07 +0000
Manifest this update:     Wed 04 Jun 2025 05:01:07 +0000
Manifest next update:     Thu 05 Jun 2025 05:01:07 +0000
Files and hashes:         1: 4i1-riHYuu6d5pQNjOaynZKpAx4.crl (hash: 9G0nrjokCv1MdzcEf6PIetHIFVjdSt6qLAq0MBLbUyI=)
                          2: Ym4cY_1EuRnkCyF3T4bm70pYxjE.roa (hash: AkplZO86AEiMlgSJVWAGSBviunFDjdLnWUMhCPpbyQE=)
                          3: iIMfjrcM-EEaIrK48S4AaqdLSDc.roa (hash: kGHhJdo0yzn2T1RMM++JhdnOAbfrtsEDL/H5s4If3hE=)
                          4: kVLjxhxgFuqXEqXn9rCH2eEb9oA.roa (hash: QbtMbRiPhMHo4O/j41QZux+PuXLhM2M+5dr1jmr3fpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Jun 2025 05:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:39:50:86:bd:5d:f4:92:e8:bb:a5:45:b2:39:be:b5:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
        Validity
            Not Before: Jun  4 05:01:07 2025 GMT
            Not After : Jun  5 05:01:07 2025 GMT
        Subject: CN=7e549996742f9193514a25cb5f16508ee4eda90a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ef:ed:0a:15:4c:99:2a:7f:09:6f:2a:3a:e1:
                    94:72:38:a1:8c:a5:8d:d2:60:0d:c5:04:57:05:d7:
                    7b:43:9f:e9:6a:76:bc:af:32:74:61:d7:ba:a7:81:
                    ea:33:70:d9:55:4b:84:01:1c:a8:39:21:c7:37:6c:
                    63:fc:59:43:59:ef:1a:c6:50:7b:b3:c5:a9:a9:07:
                    e5:2b:05:96:96:fd:d8:58:78:dd:14:1d:86:89:41:
                    fe:bc:8e:dd:1e:30:6a:e4:2f:05:6e:31:76:20:75:
                    ed:ba:91:29:78:df:01:de:d0:36:94:01:00:71:2d:
                    f8:6c:e4:18:be:e0:75:aa:9d:26:54:c3:03:8d:53:
                    ae:03:2d:4c:8a:6c:62:8b:07:59:59:c6:4a:c0:b8:
                    42:5d:85:e1:11:5b:9c:c0:e7:99:85:72:bf:b9:b9:
                    33:de:d0:3b:b2:bc:08:a6:3e:f6:92:21:56:ab:d7:
                    5c:01:10:79:d6:e9:38:62:5a:36:7e:42:27:21:d4:
                    0c:25:7b:92:34:32:be:29:81:bb:f7:5a:fe:2f:71:
                    06:f2:0c:f3:0e:c5:35:f1:4f:47:06:56:7b:10:8f:
                    c9:21:33:eb:27:d5:f4:68:9c:ce:79:79:29:e8:80:
                    0c:aa:9f:25:bd:5f:69:85:16:5e:47:3d:94:e6:39:
                    c4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:54:99:96:74:2F:91:93:51:4A:25:CB:5F:16:50:8E:E4:ED:A9:0A
            X509v3 Authority Key Identifier:
                keyid:E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:a3:f9:19:f2:42:99:9a:f5:ec:7b:d7:0f:e1:0e:63:e9:53:
         66:f1:c4:4d:17:ab:b8:cb:5f:fe:e4:43:40:51:b5:87:7a:61:
         6a:7a:ed:87:84:74:72:04:1e:70:c2:47:af:0d:f3:6e:56:e3:
         c4:89:9b:d2:9a:a9:53:c4:ff:ad:7c:bb:d0:97:68:ae:1a:92:
         2b:b3:7d:a0:42:76:1a:06:f7:d0:32:65:60:cf:e3:44:59:0f:
         2e:e4:80:49:1c:86:07:bc:0b:77:65:8d:19:b6:34:7a:7d:33:
         47:ac:87:26:2c:a3:22:18:c5:f8:ad:69:2f:19:45:ce:07:ec:
         89:1c:8a:cd:c0:84:3b:24:48:74:34:5d:5e:fc:60:30:dd:5b:
         d4:67:34:e8:73:13:35:05:2c:d2:fb:ae:29:2e:f2:31:58:e1:
         86:7c:bd:e2:b4:fc:ea:6e:01:01:73:5a:a2:54:96:e7:5d:e2:
         9a:90:40:18:b1:96:0e:5c:2f:9c:d5:1e:6d:4b:b2:28:d2:2a:
         1f:ea:94:af:aa:83:e3:ac:d1:a0:e8:e1:1b:7d:e1:cd:73:1f:
         f1:e1:0d:c9:36:a5:54:74:85:b6:6b:b5:b1:d7:29:89:74:65:
         d8:e4:9f:d9:6a:b2:c6:5a:94:22:cf:9c:34:b0:16:e9:58:3c:
         d4:4a:4d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:21:18 2025 by rpki-client