Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
File:                     4br5DtE9F1RSz15aFjKnlL8fTJo.mft (raw, json)
Hash identifier:          TVpC6ZUmirNL6W5qxQX3q8EieY4GJTl6iarE/JCevWI=
Subject key identifier:   AB:63:EA:3B:BD:C4:F1:C1:3D:C1:BB:06:90:3F:40:5F:13:44:6B:03
Authority key identifier: E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
Certificate issuer:       /CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Certificate serial:       019776E55ED080D83DA36E2A4E92C3F20505
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
Manifest number:          1595
Signing time:             Mon 16 Jun 2025 04:00:32 +0000
Manifest this update:     Mon 16 Jun 2025 04:00:32 +0000
Manifest next update:     Tue 17 Jun 2025 04:00:32 +0000
Files and hashes:         1: 4br5DtE9F1RSz15aFjKnlL8fTJo.crl (hash: ux6N+BHFfmUIARtgRgXaFBf/w9XwxLvUUDrGwbCCyNI=)
                          2: Tli-MNBliT4GZ0SuL6-kYDFipSs.roa (hash: tAZBpKtmJpVB7wLzYFodx1oVBHeaFLGJGQEpb9KD5qs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 04:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:e5:5e:d0:80:d8:3d:a3:6e:2a:4e:92:c3:f2:05:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
        Validity
            Not Before: Jun 16 04:00:32 2025 GMT
            Not After : Jun 17 04:00:32 2025 GMT
        Subject: CN=ab63ea3bbdc4f1c13dc1bb06903f405f13446b03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4d:eb:f7:fe:53:9f:8b:a3:50:70:3f:17:de:
                    e0:e5:b4:09:e2:d0:cb:f5:8f:30:80:bc:a8:de:42:
                    3f:8d:2c:98:40:d8:14:13:a2:5c:69:8b:ba:f7:5f:
                    9b:b3:35:68:cb:46:31:d6:5c:fd:cc:36:26:99:40:
                    56:a1:2d:d6:dc:87:34:9e:be:b7:2f:bb:b9:2b:69:
                    0e:8f:7b:1a:7f:96:81:03:b1:d2:2a:7f:9a:f9:b6:
                    21:c3:c6:f2:e9:69:48:a0:b5:16:93:3d:76:c8:dc:
                    a1:1d:23:51:2d:b4:80:8f:28:35:f7:04:cb:a5:47:
                    fe:eb:a2:7f:4d:4d:d8:e9:0b:a2:cb:96:8b:58:1c:
                    b2:03:e7:c8:72:d0:29:4d:40:2d:d4:8d:16:53:4f:
                    66:db:4f:dc:70:31:f3:82:38:2a:ff:6c:f0:89:04:
                    77:ff:11:30:22:3d:24:93:a7:29:5e:66:5c:33:6c:
                    c1:73:45:f5:1f:b6:cf:96:fb:47:9e:b3:21:f8:f0:
                    e1:34:5d:11:ea:b9:eb:cf:2f:fb:db:0e:ce:ae:42:
                    58:a0:5a:9a:4f:b6:a3:5e:0c:e3:c7:4c:94:3f:48:
                    aa:88:7b:fc:a9:8a:1d:2b:47:9c:63:1b:30:8b:66:
                    11:99:e9:04:0f:77:8d:c3:6b:58:bb:db:bd:a0:01:
                    46:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:63:EA:3B:BD:C4:F1:C1:3D:C1:BB:06:90:3F:40:5F:13:44:6B:03
            X509v3 Authority Key Identifier:
                keyid:E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:18:ad:e1:b4:26:70:4d:43:65:e9:ff:99:6b:41:06:68:20:
         7f:83:2d:46:3e:a3:da:1f:ff:c9:3f:fc:fc:9a:88:17:f7:b0:
         df:ad:cb:dc:62:fc:8f:68:e4:20:47:93:fc:dc:7f:79:38:82:
         e6:ff:b1:8b:69:08:17:26:0a:5b:7d:a1:84:97:dc:33:01:70:
         d9:58:46:6f:c4:f1:bd:99:86:69:9c:f1:5a:29:10:d5:0d:01:
         2b:02:60:ac:29:2c:f5:b0:b6:fc:2a:82:ef:3d:99:01:14:80:
         de:09:99:0f:be:fb:83:7e:03:70:0d:d4:da:84:6e:1d:f0:2d:
         02:fe:4a:d1:c1:38:28:56:69:7f:6c:63:43:02:85:74:b7:c9:
         73:b9:bc:76:6a:01:4b:d4:33:01:c1:e1:0d:3b:f7:90:5b:ef:
         0e:0e:60:9b:ed:8b:60:a6:8d:ac:6d:55:8c:ef:16:67:ee:28:
         b3:c5:63:64:7e:4f:91:69:37:60:c7:7d:bf:5f:f6:53:72:a1:
         31:2e:ae:ab:55:c5:48:57:9f:98:b6:ed:24:e5:8b:af:54:58:
         32:0c:b7:d1:f0:91:20:7e:a8:53:cf:62:36:66:6f:97:90:5f:
         65:82:a1:c4:85:40:2f:cc:47:c6:d4:1b:2b:f5:00:e3:20:bd:
         40:dc:a2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:19:38 2025 by rpki-client