Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
File:                     4BEGBvUk26pTjmfhI8r7xt8zhsA.mft (raw, json)
Hash identifier:          dkOrztqXkMQxJnrRcwe+lWqOr+o0eiPQcqxHeppJS6Y=
Subject key identifier:   28:F6:CD:2D:0E:22:51:65:CA:4A:9C:8E:AF:3D:B1:5B:21:61:62:58
Authority key identifier: E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0
Certificate issuer:       /CN=e0110606f524dbaa538e67e123cafbc6df3386c0
Certificate serial:       019762BA48791BB178889CF15D9C15C48095
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
Manifest number:          02F0
Signing time:             Thu 12 Jun 2025 06:01:04 +0000
Manifest this update:     Thu 12 Jun 2025 06:01:04 +0000
Manifest next update:     Fri 13 Jun 2025 06:01:04 +0000
Files and hashes:         1: 4BEGBvUk26pTjmfhI8r7xt8zhsA.crl (hash: ZXXbI0v0fPrYRiM/Qi0U9K30wnK7Vnv1iKaLOYpdlvg=)
                          2: LKg2o2zlysSfcmScabBK3xapbdE.roa (hash: 1l6VyqJgKUuQ/XvxIU6XnLgEokzCKE4ghCBRoC85WGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 06:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:62:ba:48:79:1b:b1:78:88:9c:f1:5d:9c:15:c4:80:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0110606f524dbaa538e67e123cafbc6df3386c0
        Validity
            Not Before: Jun 12 06:01:04 2025 GMT
            Not After : Jun 13 06:01:04 2025 GMT
        Subject: CN=28f6cd2d0e225165ca4a9c8eaf3db15b21616258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d3:72:20:80:e8:b7:76:52:13:57:6f:fa:9f:
                    73:41:e0:a2:24:2e:7b:5c:b0:dd:f7:b5:c0:bf:4a:
                    c9:8d:48:7b:0e:95:f4:77:6a:d0:42:bf:85:27:a2:
                    c3:f2:f7:b2:99:a7:54:56:62:f0:6c:58:ca:3d:bb:
                    34:2e:2f:d1:c0:01:99:03:0b:d3:7f:f7:86:70:aa:
                    81:d4:59:a2:b0:9e:bb:03:ce:d7:6d:e0:5e:d7:35:
                    f9:a0:78:26:5d:81:b8:12:26:38:55:b5:69:e6:ca:
                    a5:13:9f:32:dc:40:1f:07:62:ca:d4:90:04:94:ad:
                    ee:d3:7a:93:4d:6d:30:86:72:7f:f9:40:3e:b1:95:
                    14:72:c0:cf:99:44:96:ba:cd:b7:cd:37:17:63:c4:
                    6c:c1:c4:c2:6d:9e:c9:01:36:5b:4d:80:1d:05:29:
                    01:a2:3f:ac:a4:4f:49:e0:83:7e:07:2d:17:ea:f8:
                    65:39:d4:b9:f7:8b:1c:c1:53:d0:e3:8c:e6:b1:f1:
                    af:90:24:14:6c:c4:3c:0d:01:dd:f7:3d:28:1a:23:
                    23:7d:41:0b:6b:9d:32:ac:08:51:4a:89:66:b7:0f:
                    03:a7:28:92:b2:c4:80:9f:7c:83:27:86:5d:d1:6c:
                    f8:01:ad:4a:bb:41:51:96:56:62:ec:3c:a9:f0:ac:
                    61:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F6:CD:2D:0E:22:51:65:CA:4A:9C:8E:AF:3D:B1:5B:21:61:62:58
            X509v3 Authority Key Identifier:
                keyid:E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:22:3a:ef:4c:fe:d8:b5:cd:3e:56:b8:b4:38:03:35:0c:9e:
         83:07:2c:96:ba:fa:ac:df:de:c8:0c:a2:33:05:23:72:f6:f0:
         60:2e:15:69:4a:fe:b1:97:61:af:56:1f:07:bd:23:05:a6:da:
         4a:62:5f:2c:83:e5:c0:66:fd:50:c0:3a:57:21:6e:6a:c9:89:
         c7:5b:21:42:c8:48:b3:cb:9e:6c:3c:10:82:57:97:76:42:4a:
         56:14:d0:a6:5d:29:04:ef:6a:f2:50:f3:2c:a9:a5:16:a3:69:
         08:87:5f:19:db:59:87:7f:8f:88:86:0b:00:74:d7:50:7e:52:
         a0:b1:71:61:57:ff:76:39:5d:f1:1c:5f:4f:f5:7e:cd:0e:be:
         c3:b4:d0:cd:89:d8:dd:10:be:0f:72:4b:6f:91:b6:bf:78:cc:
         64:aa:ac:25:3d:1e:de:ae:66:26:4c:86:0a:00:82:71:7d:74:
         23:08:0e:b6:c7:4c:95:7e:6a:57:e9:14:bb:3a:2d:30:ec:1b:
         0a:fc:28:a9:1e:ac:a8:25:e8:fa:2e:8c:c3:af:d5:a9:93:ff:
         3c:a8:c0:c9:df:d3:2d:9f:0b:f6:21:b4:85:e2:6d:2f:74:82:
         4d:f9:c9:e0:f7:c0:96:88:16:ca:17:43:b3:95:e5:ee:89:d6:
         5e:af:be:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdiukh5G7F4iJzxXZwVxICVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMTEwNjA2ZjUyNGRiYWE1MzhlNjdlMTIzY2FmYmM2ZGYz
Mzg2YzAwHhcNMjUwNjEyMDYwMTA0WhcNMjUwNjEzMDYwMTA0WjAzMTEwLwYDVQQD
EygyOGY2Y2QyZDBlMjI1MTY1Y2E0YTljOGVhZjNkYjE1YjIxNjE2MjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dNyIIDot3ZSE1dv+p9zQeCiJC57
XLDd97XAv0rJjUh7DpX0d2rQQr+FJ6LD8veymadUVmLwbFjKPbs0Li/RwAGZAwvT
f/eGcKqB1FmisJ67A87XbeBe1zX5oHgmXYG4EiY4VbVp5sqlE58y3EAfB2LK1JAE
lK3u03qTTW0whnJ/+UA+sZUUcsDPmUSWus23zTcXY8RswcTCbZ7JATZbTYAdBSkB
oj+spE9J4IN+By0X6vhlOdS594scwVPQ44zmsfGvkCQUbMQ8DQHd9z0oGiMjfUEL
a50yrAhRSolmtw8DpyiSssSAn3yDJ4Zd0Wz4Aa1Ku0FRllZi7Dyp8KxhewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCj2zS0OIlFlykqcjq89sVshYWJYMB8GA1UdIwQY
MBaAFOARBgb1JNuqU45n4SPK+8bfM4bAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEJFR0J2VWsyNnBUam1maEk4cjd4dDh6aHNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83M2Y3NDktNDU2MC00YWJlLThkMGIt
ZTJjMWFiYWZhYTZjLzEvNEJFR0J2VWsyNnBUam1maEk4cjd4dDh6aHNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS83M2Y3NDktNDU2MC00YWJlLThkMGItZTJjMWFiYWZhYTZj
LzEvNEJFR0J2VWsyNnBUam1maEk4cjd4dDh6aHNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqSI670z+
2LXNPla4tDgDNQyegwcslrr6rN/eyAyiMwUjcvbwYC4VaUr+sZdhr1YfB70jBaba
SmJfLIPlwGb9UMA6VyFuasmJx1shQshIs8uebDwQgleXdkJKVhTQpl0pBO9q8lDz
LKmlFqNpCIdfGdtZh3+PiIYLAHTXUH5SoLFxYVf/djld8RxfT/V+zQ6+w7TQzYnY
3RC+D3JLb5G2v3jMZKqsJT0e3q5mJkyGCgCCcX10IwgOtsdMlX5qV+kUuzotMOwb
CvwoqR6sqCXo+i6Mw6/VqZP/PKjAyd/TLZ8L9iG0heJtL3SCTfnJ4PfAlogWyhdD
s5Xl7onWXq++WQ==
-----END CERTIFICATE-----
Generated at Thu Jun 12 13:43:45 2025 by rpki-client