Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft
File:                     4oPErS_YckqMfV6vQxgUyz0VEn4.mft (raw, json)
Hash identifier:          v9WsYadAXWzQDDwrLbARv9yxVpE6JoGCn2e/NM+qHCU=
Subject key identifier:   25:CB:1A:A1:87:A3:2B:E4:8C:B1:80:A6:92:D2:5E:31:09:2F:A9:5B
Authority key identifier: E2:83:C4:AD:2F:D8:72:4A:8C:7D:5E:AF:43:18:14:CB:3D:15:12:7E
Certificate issuer:       /CN=e283c4ad2fd8724a8c7d5eaf431814cb3d15127e
Certificate serial:       01977FE97900258EE6F3659B7872AA83B5DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft
Manifest number:          03DD
Signing time:             Tue 17 Jun 2025 22:01:36 +0000
Manifest this update:     Tue 17 Jun 2025 22:01:36 +0000
Manifest next update:     Wed 18 Jun 2025 22:01:36 +0000
Files and hashes:         1: 4oPErS_YckqMfV6vQxgUyz0VEn4.crl (hash: 8AXFxZ6sv0vmJy80g/2Bxtha/QSp4XCACp6wy+WWBZg=)
                          2: f-egB3l-EDxvsW6G_3sHcV0KHX4.roa (hash: JtBE12d9bxExTSrRbQgShdNCUpSoJH+tA4uA0zrPLYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7f:e9:79:00:25:8e:e6:f3:65:9b:78:72:aa:83:b5:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e283c4ad2fd8724a8c7d5eaf431814cb3d15127e
        Validity
            Not Before: Jun 17 22:01:36 2025 GMT
            Not After : Jun 18 22:01:36 2025 GMT
        Subject: CN=25cb1aa187a32be48cb180a692d25e31092fa95b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f9:6e:48:bc:b2:1e:b7:31:c0:da:1d:f8:83:
                    11:1c:3d:51:ea:8c:f3:c3:79:ff:22:37:5c:0f:4c:
                    00:07:83:88:89:cd:00:36:1c:5e:97:df:6b:e4:10:
                    e2:44:65:a5:0f:8e:06:bd:61:5e:af:e6:92:2e:25:
                    ac:55:0a:c2:84:99:05:92:cd:1e:ee:43:c3:27:22:
                    11:56:67:c3:ad:49:bd:72:b9:9b:3b:c3:d4:e9:fb:
                    b8:d6:cf:cf:ed:8a:5f:eb:c2:4f:5c:aa:cf:7f:98:
                    eb:9e:e8:2e:3e:91:4d:27:07:2f:6b:1e:88:c2:bd:
                    03:b7:a2:d3:f4:51:9b:ad:78:4d:2e:ec:5a:75:dd:
                    01:9e:91:f9:4b:9c:8d:f6:1d:99:d5:66:fe:11:3a:
                    f7:61:50:db:5e:ff:42:09:4f:92:9f:2f:78:f2:08:
                    1e:98:0b:69:ac:b3:1e:60:d0:80:c7:2e:b8:9f:8b:
                    ad:41:b3:b4:4a:d5:42:11:6a:94:15:96:dd:cd:7f:
                    dc:82:0e:08:a0:24:dd:3f:cd:9b:2f:29:64:08:40:
                    d2:de:00:aa:86:10:76:2f:12:43:cc:3f:16:bf:06:
                    8a:6d:97:e2:53:f7:f0:55:2d:45:eb:f1:5f:44:54:
                    d5:95:b7:17:43:d6:e2:00:09:89:9c:ee:1d:39:98:
                    20:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:CB:1A:A1:87:A3:2B:E4:8C:B1:80:A6:92:D2:5E:31:09:2F:A9:5B
            X509v3 Authority Key Identifier:
                keyid:E2:83:C4:AD:2F:D8:72:4A:8C:7D:5E:AF:43:18:14:CB:3D:15:12:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:ac:62:be:31:87:04:21:b5:0d:ea:aa:f6:d0:e3:90:5b:f2:
         a0:ea:0f:78:1b:b4:3d:26:4a:a9:a3:43:37:d3:a0:2f:ac:32:
         6e:29:5f:02:93:8d:f0:d5:af:7c:28:e0:f6:38:dd:f5:c1:57:
         e2:02:bf:98:68:f9:be:51:11:31:b7:ed:74:d5:f3:3c:26:3c:
         1f:73:e7:f5:3d:bc:4f:19:cf:f8:2c:2c:6a:d6:15:7e:b4:15:
         9b:66:02:94:36:92:ef:20:fb:cc:d2:a9:ad:8d:b4:9c:6b:1e:
         a9:e3:a1:13:fc:c2:cb:19:2e:05:68:9a:af:d6:dc:49:b2:cc:
         22:a9:e4:ff:cd:88:d8:65:0d:66:92:85:1e:04:3b:c8:ad:26:
         08:48:c9:12:d1:0d:37:d5:cd:f7:7e:d0:c0:c7:f4:da:78:51:
         28:6b:d4:2a:3c:4f:d1:11:7c:6f:3c:d1:ae:85:0a:75:0d:1f:
         94:75:d2:6a:1e:f1:cb:b2:14:75:84:b6:5c:f8:69:55:10:24:
         d1:55:63:79:f6:d3:4c:0f:01:ee:f8:f0:58:d6:89:9d:d6:b4:
         c6:2f:f6:46:2e:96:ff:06:50:67:7c:ae:17:35:07:a7:e4:f9:
         0e:be:d0:09:d5:16:12:48:9a:e4:b6:62:b4:f8:94:3a:9c:4d:
         62:eb:df:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:05:08 2025 by rpki-client