Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
File:                     4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft (raw, json)
Hash identifier:          W4outxqu4o72rsynPgeywNbstBCdZKKYMeo+KSJWq1w=
Subject key identifier:   EB:B0:73:48:20:2A:AF:0B:1C:C2:6C:B7:74:95:78:36:80:D8:3B:D3
Authority key identifier: E1:20:2E:2E:4B:65:DB:3B:1F:E5:81:CD:B1:99:01:0B:2E:90:CF:78
Certificate issuer:       /CN=e1202e2e4b65db3b1fe581cdb199010b2e90cf78
Certificate serial:       0197470BDB35EDFA8C360184DC25C8AF7684
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
Manifest number:          0CFC
Signing time:             Fri 06 Jun 2025 21:00:48 +0000
Manifest this update:     Fri 06 Jun 2025 21:00:48 +0000
Manifest next update:     Sat 07 Jun 2025 21:00:48 +0000
Files and hashes:         1: 4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl (hash: 7Wp4HaiCSFAalsoEnX0b2CRc0QBxLr5CqW5oNDfzTRc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0b:db:35:ed:fa:8c:36:01:84:dc:25:c8:af:76:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1202e2e4b65db3b1fe581cdb199010b2e90cf78
        Validity
            Not Before: Jun  6 21:00:48 2025 GMT
            Not After : Jun  7 21:00:48 2025 GMT
        Subject: CN=ebb07348202aaf0b1cc26cb77495783680d83bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:57:e2:1d:0b:a6:e3:74:ae:6f:46:b2:ed:f8:
                    54:12:0d:6b:c7:83:bc:7e:46:19:a6:fa:d0:ae:23:
                    a1:ce:66:14:ae:f6:e0:54:fb:80:97:96:a7:68:2f:
                    2a:a6:bf:26:19:63:fd:1b:91:41:52:1a:3a:7f:01:
                    73:8a:e2:e6:47:62:69:04:9f:5f:42:c7:38:17:b2:
                    35:2c:d3:91:d6:c3:f7:35:6f:32:66:fb:b2:89:4a:
                    28:e0:2f:11:0f:46:11:f4:59:14:84:b3:ce:ae:8b:
                    bb:ec:54:77:77:c6:65:78:ce:6c:e1:a9:86:35:48:
                    49:72:48:fe:da:d0:6c:c9:5e:b8:d0:c2:e6:f4:7a:
                    57:39:b0:88:7c:64:8e:98:00:6d:a9:0c:10:4b:07:
                    93:01:95:3f:df:82:8e:3b:90:f3:c9:78:f7:bd:15:
                    97:b5:e5:06:77:f2:9f:08:67:42:b7:82:d1:96:fd:
                    1e:a8:35:4d:73:86:9a:fd:12:84:d1:60:d7:33:dd:
                    8f:9d:a6:70:c6:ff:92:6f:66:b0:0f:d3:a2:80:f5:
                    36:4b:c3:c3:02:c0:96:51:ec:a4:a6:d1:0a:29:f3:
                    42:68:9b:eb:32:af:30:d1:ba:8b:79:5d:d4:1d:99:
                    60:7b:ba:3d:59:41:fa:fc:8e:ff:6b:4b:cf:96:fd:
                    d0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B0:73:48:20:2A:AF:0B:1C:C2:6C:B7:74:95:78:36:80:D8:3B:D3
            X509v3 Authority Key Identifier:
                keyid:E1:20:2E:2E:4B:65:DB:3B:1F:E5:81:CD:B1:99:01:0B:2E:90:CF:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:75:50:63:42:07:8e:35:f0:a9:e2:63:2e:6c:35:86:1b:2a:
         35:92:d2:bf:2a:27:08:45:d6:88:4a:41:ca:1c:a8:d5:b0:b0:
         16:81:42:db:5c:ae:93:ee:fb:c9:25:05:02:e2:e4:29:71:74:
         24:6c:2d:34:02:83:7d:ba:ac:ea:d6:21:80:43:df:a0:45:44:
         b1:8f:24:bd:c2:7e:9f:6a:b4:5c:98:9f:57:6f:93:d6:0f:c1:
         a2:44:b5:89:ef:01:cf:59:dc:d1:f2:eb:5d:5b:cd:32:8b:d7:
         e4:53:5a:d4:4e:ce:42:64:34:7c:f4:43:73:c9:b2:ca:ed:1b:
         f4:8d:c0:fc:b6:b3:c6:64:83:22:78:c4:29:ae:7b:da:33:c8:
         91:31:5f:f1:be:41:42:43:aa:d4:27:85:73:13:38:d5:21:f3:
         96:da:42:cf:8e:cd:49:01:07:7d:32:c2:26:a5:e4:1c:56:c6:
         9d:ed:05:79:9d:51:44:f3:8a:6c:91:9c:47:06:4f:30:57:e8:
         a9:9c:91:c4:2c:e7:5a:f4:a7:2d:e0:40:ef:69:b7:55:b1:29:
         8d:08:fb:a2:77:96:12:0e:f5:7b:cb:40:a3:e0:11:26:5e:f5:
         6d:b6:b5:c1:fb:2a:f2:d1:51:f8:e7:dc:8f:5a:ad:aa:e3:17:
         d5:bc:a7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:11:41 2025 by rpki-client