Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
File:                     4Xa6TSueAPu_jsQzEekblUqqU24.mft (raw, json)
Hash identifier:          NIg4hf6pgI1JchC+9YKLuxEMZten6aAKmVXIRM7y3+Q=
Subject key identifier:   5D:4E:DF:84:EE:53:52:10:08:CC:8F:E4:B1:13:5A:E7:85:A4:B7:A8
Authority key identifier: E1:76:BA:4D:2B:9E:00:FB:BF:8E:C4:33:11:E9:1B:95:4A:AA:53:6E
Certificate issuer:       /CN=e176ba4d2b9e00fbbf8ec43311e91b954aaa536e
Certificate serial:       0197463007DADAF8AF3EF52141978A931FCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
Manifest number:          04DA
Signing time:             Fri 06 Jun 2025 17:00:42 +0000
Manifest this update:     Fri 06 Jun 2025 17:00:42 +0000
Manifest next update:     Sat 07 Jun 2025 17:00:42 +0000
Files and hashes:         1: 4Xa6TSueAPu_jsQzEekblUqqU24.crl (hash: NaruHYV3352pcD71VDuMkPe+kScZ6yz+uP29SYOPavk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:30:07:da:da:f8:af:3e:f5:21:41:97:8a:93:1f:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e176ba4d2b9e00fbbf8ec43311e91b954aaa536e
        Validity
            Not Before: Jun  6 17:00:42 2025 GMT
            Not After : Jun  7 17:00:42 2025 GMT
        Subject: CN=5d4edf84ee53521008cc8fe4b1135ae785a4b7a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:29:67:99:ce:be:b4:98:54:38:65:d8:36:17:
                    1f:2f:0a:9d:f1:a4:aa:0d:d9:f3:3b:9c:c7:62:04:
                    aa:b1:03:9e:bc:fc:81:19:69:5c:80:ce:71:d6:1d:
                    ba:f2:01:85:10:c7:0c:e8:f1:56:a7:c6:5e:04:7a:
                    22:f5:ee:86:85:ab:db:2a:ad:c7:34:51:a8:ea:4d:
                    fb:2c:72:5a:65:f6:a8:18:0e:90:2b:52:f7:54:86:
                    c2:8a:6e:47:61:fc:3f:b2:83:60:83:83:91:5b:5c:
                    b8:e9:51:26:b2:45:68:df:98:98:68:02:5c:01:7f:
                    8b:e3:2e:b7:30:a3:65:ce:cb:47:f6:29:06:e3:b5:
                    99:7d:1d:e2:d6:0a:52:60:9f:51:52:73:cf:5e:53:
                    63:da:09:26:39:8e:a3:b7:3d:25:ac:44:39:0a:d6:
                    bb:ba:dd:8a:aa:6f:ad:7a:38:3f:36:47:92:5f:da:
                    21:13:bd:02:ff:be:24:78:46:ba:f2:aa:55:9e:2c:
                    2f:96:7c:d4:a4:ab:55:4c:48:77:f0:bf:b9:ca:3a:
                    f6:32:ba:b9:3f:ce:9e:fd:7f:f3:4a:35:42:71:6c:
                    a6:85:0b:db:32:05:bd:9a:1b:2d:a1:bf:44:d7:be:
                    be:86:86:35:56:38:cb:08:15:79:87:ad:78:30:ad:
                    97:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:4E:DF:84:EE:53:52:10:08:CC:8F:E4:B1:13:5A:E7:85:A4:B7:A8
            X509v3 Authority Key Identifier:
                keyid:E1:76:BA:4D:2B:9E:00:FB:BF:8E:C4:33:11:E9:1B:95:4A:AA:53:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d8:16:a0:24:32:e1:c9:ec:17:e4:76:30:7a:28:74:3d:58:
         9a:3b:44:a6:b2:2d:9c:f7:6a:41:be:29:b9:52:6b:95:b2:4c:
         9a:da:df:07:d9:3b:ad:e4:31:7e:bc:39:78:51:e7:97:cd:2a:
         5d:35:63:9d:20:92:07:67:e6:b3:6e:d3:45:0c:44:49:ed:5d:
         cf:8f:bd:1a:55:e6:a7:e0:5e:36:2f:00:a9:7f:5f:ae:ee:7b:
         f9:1e:ff:65:3f:18:f3:52:a4:e1:b3:2a:a2:29:cd:61:d7:89:
         20:0d:7b:aa:52:96:64:05:29:5c:6f:05:95:03:96:c4:2f:67:
         c2:d3:9b:38:e3:f4:cd:b7:15:40:30:d3:e6:18:c9:5d:3f:22:
         71:53:fe:97:ea:d4:de:87:ad:48:c0:48:f9:96:df:12:f8:2b:
         8d:16:91:50:e6:5d:3a:5f:20:2b:69:4b:4e:53:2e:4b:bb:74:
         5e:eb:29:71:ca:ca:c3:0b:d3:e0:d5:97:52:b5:53:13:f7:9a:
         af:80:83:2d:8f:af:74:9e:d1:34:28:5f:b3:1e:8c:fb:38:42:
         f6:ce:2b:8d:a6:4b:11:ae:0a:29:61:fe:89:9c:2a:77:ad:fe:
         ae:6f:59:7a:77:2d:20:94:ca:6b:b6:0d:86:07:eb:30:51:aa:
         7e:39:c8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:38:41 2025 by rpki-client