Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
File:                     4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft (raw, json)
Hash identifier:          0J/GVGsSyupBWzfxzYwK5AF2u1YEuDKDg/KmeyV1fMw=
Subject key identifier:   79:47:26:11:B3:C1:8F:B0:4F:EA:FF:45:F6:C0:2B:3F:67:D7:FD:ED
Authority key identifier: E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3
Certificate issuer:       /CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
Certificate serial:       019768BBEC769556ECE8CA924001F2709BCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
Manifest number:          129A
Signing time:             Fri 13 Jun 2025 10:00:35 +0000
Manifest this update:     Fri 13 Jun 2025 10:00:35 +0000
Manifest next update:     Sat 14 Jun 2025 10:00:35 +0000
Files and hashes:         1: 0vfqJp8CAa8Wb2tMkMFK4NfB1iI.roa (hash: Fq32OdyGPsi3kvuTM0d8dbHXJU1ZVYcji5eWBETIXTQ=)
                          2: 4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl (hash: 0GdGfNxiJxDDV22DrfmQVw8jNgAqYeS6ECK8aJURGcY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 10:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:bb:ec:76:95:56:ec:e8:ca:92:40:01:f2:70:9b:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
        Validity
            Not Before: Jun 13 10:00:35 2025 GMT
            Not After : Jun 14 10:00:35 2025 GMT
        Subject: CN=79472611b3c18fb04feaff45f6c02b3f67d7fded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2a:32:2b:e2:a7:e2:a8:40:10:f1:3a:1c:66:
                    a1:54:8a:ce:ac:2d:6c:0f:6e:2c:f3:a5:8b:40:ba:
                    63:15:d2:bb:a9:30:0b:5f:c3:e3:33:cb:df:1d:ff:
                    c0:d6:e1:fc:b1:3a:e7:b2:19:95:ad:64:f4:80:60:
                    02:0f:4c:b3:b5:23:af:a4:ae:7c:d4:ad:39:87:0d:
                    ed:1c:61:db:33:fd:a3:60:6c:e6:e8:22:a9:d4:32:
                    9f:c0:b4:db:07:12:34:81:31:54:ae:1d:c9:98:01:
                    86:de:f1:61:92:31:a0:24:37:39:f1:3b:78:9e:2a:
                    59:8d:f7:f7:b5:17:1a:47:de:f2:2d:47:f9:6b:50:
                    42:84:ce:5f:30:0d:f2:54:b0:3d:55:93:56:ac:50:
                    8b:6a:54:a5:44:bd:bf:45:25:1a:82:4e:06:1f:ae:
                    bb:aa:fe:87:96:eb:04:01:36:00:85:dc:e5:cb:4e:
                    2e:ed:2b:e6:f8:50:0d:1c:39:15:8f:7a:97:32:1a:
                    ae:9c:3b:c0:da:58:b9:c0:2c:0b:5d:38:f0:55:69:
                    bc:0f:d5:52:b4:44:da:d2:e1:85:07:12:ca:c1:9d:
                    1d:87:ca:d9:b6:d8:fc:81:10:15:c2:60:96:d5:ca:
                    0b:a2:b2:8d:d8:39:bf:5c:b7:cb:88:4c:d3:f4:1c:
                    79:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:47:26:11:B3:C1:8F:B0:4F:EA:FF:45:F6:C0:2B:3F:67:D7:FD:ED
            X509v3 Authority Key Identifier:
                keyid:E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:38:6b:ee:f1:4b:96:f8:32:30:f0:64:c9:25:cd:da:20:58:
         46:4c:a6:28:4c:49:40:d1:cb:02:73:d5:58:b7:bc:b9:36:1d:
         05:c0:97:90:dc:94:29:be:52:eb:be:04:09:a7:32:d8:0f:92:
         34:f3:08:04:30:67:ea:ee:bd:43:b3:9a:a8:de:70:ce:cf:87:
         60:91:bf:87:72:4e:97:ee:f1:5f:c2:08:71:ac:d4:31:5f:f6:
         16:08:1e:df:fe:1a:3c:0d:17:99:0e:6d:cb:da:ef:8d:99:44:
         3c:b2:6c:f2:08:c8:0b:c6:5f:e1:37:4e:03:db:b2:7b:42:e6:
         ae:fb:1b:fb:62:62:c1:a2:b6:e7:4b:db:03:9b:59:7f:6f:d8:
         b0:11:77:2a:de:86:e8:7b:1c:46:21:0c:40:1e:6b:77:5f:0d:
         df:50:bb:7d:2a:2d:56:2b:92:e6:30:c3:e9:c8:51:e6:ff:eb:
         91:33:4c:61:e3:2d:2f:a5:3e:cc:09:c9:4c:2f:f5:39:9b:02:
         f5:c4:3f:4e:fd:54:a2:d1:f2:22:be:e5:08:62:ee:e3:ea:31:
         a7:73:60:3c:a7:d4:7b:72:a0:d0:c3:be:69:02:0d:8a:db:4e:
         e5:87:54:a8:83:54:e5:fd:d1:44:55:96:8b:5b:a5:d2:39:68:
         cd:e2:b9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:26:36 2025 by rpki-client