Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
File:                     4T43FhOUZeaoz59r2LW492M68ig.mft (raw, json)
Hash identifier:          1xAjWyRBzpHcE1rFHy72BCMIlinLxCZNGOXo2mYEth0=
Subject key identifier:   CF:30:DC:CA:DC:75:4A:CF:BE:67:8C:86:79:FA:8A:C4:BC:C3:5B:F9
Authority key identifier: E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
Certificate issuer:       /CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Certificate serial:       0197673B2F9A3CF7B8098AC89B3B033115DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
Manifest number:          158B
Signing time:             Fri 13 Jun 2025 03:00:21 +0000
Manifest this update:     Fri 13 Jun 2025 03:00:21 +0000
Manifest next update:     Sat 14 Jun 2025 03:00:21 +0000
Files and hashes:         1: 4T43FhOUZeaoz59r2LW492M68ig.crl (hash: 3SguAJTJmmttS38sLtHxHecjnO0pxgSXqR03VFNIilM=)
                          2: VbNrPWQYTWo9s0J6s8AxjamlwvI.roa (hash: /mWvYY88JMhRPBUym5HOiq9hJe5sysSC0ACyBbQ58No=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 03:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:67:3b:2f:9a:3c:f7:b8:09:8a:c8:9b:3b:03:31:15:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
        Validity
            Not Before: Jun 13 03:00:21 2025 GMT
            Not After : Jun 14 03:00:21 2025 GMT
        Subject: CN=cf30dccadc754acfbe678c8679fa8ac4bcc35bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c2:5c:bc:b6:39:5c:bf:7a:e8:ef:8e:b9:59:
                    0f:f7:fb:a8:21:7c:5b:ac:ee:15:61:e9:25:39:16:
                    31:4b:e2:44:73:1d:ec:70:44:13:45:7b:71:0e:7f:
                    48:89:0f:a5:98:e9:0a:e9:0b:48:a8:4f:68:40:ec:
                    73:4a:05:8e:6a:17:1a:f7:f6:6f:28:55:c6:9f:44:
                    96:2a:84:9f:ec:f0:3b:70:44:8a:5f:4f:6b:d1:51:
                    8d:fa:af:d3:5b:8a:39:a2:6e:ef:f8:d5:b0:26:22:
                    8f:6f:0d:a8:63:a2:7e:25:f5:85:29:19:14:f4:9a:
                    0b:00:cb:a4:31:ae:8d:ea:33:b3:b5:5f:e4:0d:96:
                    04:9e:5a:9b:e5:66:ff:d1:a8:15:f2:96:a4:0e:22:
                    fd:95:61:b9:a4:db:fb:ac:e9:63:9c:99:3f:99:e1:
                    74:28:c6:26:95:1a:e1:c9:34:31:18:1c:eb:9f:e4:
                    34:e2:8b:46:7c:52:c4:0c:b3:f1:a9:cb:76:89:80:
                    f3:ec:43:7e:78:d9:86:39:b8:f3:f6:1c:5b:cd:d8:
                    27:a1:d4:b9:d7:bf:06:69:dc:30:6f:91:1f:d1:81:
                    d8:42:7d:71:23:f5:93:09:45:36:1e:6f:d6:ff:f1:
                    35:db:85:6a:5f:00:0b:b3:d0:7b:a0:12:a3:69:f9:
                    34:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:30:DC:CA:DC:75:4A:CF:BE:67:8C:86:79:FA:8A:C4:BC:C3:5B:F9
            X509v3 Authority Key Identifier:
                keyid:E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:b5:b6:d0:f9:63:c5:cb:52:9f:2e:60:32:93:a5:24:8f:de:
         4f:35:e0:b9:1f:1a:ae:cf:84:df:d1:ed:02:d7:9f:27:9b:f7:
         fd:60:b5:5d:c9:48:86:ae:32:5f:24:cc:10:72:f5:49:71:07:
         cb:fd:08:fc:db:b2:4a:c9:ba:25:f4:e8:d2:8f:9e:b4:55:38:
         ae:77:3b:e4:14:67:30:5e:84:7e:3d:99:36:a9:f3:0c:87:2e:
         bd:45:51:9a:c6:27:01:8a:4d:90:8d:94:1f:d5:62:4e:ec:23:
         11:2c:3d:d1:b6:53:7f:0c:ec:0b:59:f1:9c:57:37:5d:36:00:
         6c:6d:17:22:15:9e:6c:23:f7:1b:84:14:7b:9c:3e:9d:fe:4c:
         30:d6:68:ed:d7:de:64:cb:35:33:78:25:9b:71:85:12:70:11:
         55:b1:88:71:39:cc:95:21:ca:5e:17:76:da:5b:30:76:1e:84:
         cb:9c:c9:4c:4c:c3:04:a4:a3:ed:13:b7:bf:76:ee:3a:cd:a5:
         f1:b7:44:30:a1:fd:0e:0b:7f:2d:b3:81:85:02:45:1b:16:65:
         9a:a6:37:cf:34:07:d4:4b:08:40:65:a8:46:18:0f:1a:0a:ec:
         e9:29:46:a5:8f:e7:1f:76:cd:86:30:74:8e:6d:15:73:6b:0d:
         11:3a:22:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 11:06:18 2025 by rpki-client