Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
File:                     4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft (raw, json)
Hash identifier:          7r08o4hSfm9vgvPzkhlb/DIW8FoMa6pzEyHlSSTK/qU=
Subject key identifier:   CB:FA:52:3D:24:11:7B:61:6B:54:98:55:CF:0D:6A:55:C7:20:B6:D8
Authority key identifier: E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9
Certificate issuer:       /CN=e0d1a8366c21159f079478a9030843fbf60631b9
Certificate serial:       01976929DD79E5E004DE3266BE44FA9CEB2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
Manifest number:          151F
Signing time:             Fri 13 Jun 2025 12:00:40 +0000
Manifest this update:     Fri 13 Jun 2025 12:00:40 +0000
Manifest next update:     Sat 14 Jun 2025 12:00:40 +0000
Files and hashes:         1: 4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl (hash: rFNF+//O90QwVDXpIGqN6uPYHOfnmJ7X8D7GTcG8EQE=)
                          2: X6zK_zIJEJ4ZvUFy-bZ0YYb3PXk.roa (hash: 73bfs58Aeh5k14l65MP0sPTsNd9XJmQVqU0en4/SkEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 12:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:29:dd:79:e5:e0:04:de:32:66:be:44:fa:9c:eb:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0d1a8366c21159f079478a9030843fbf60631b9
        Validity
            Not Before: Jun 13 12:00:40 2025 GMT
            Not After : Jun 14 12:00:40 2025 GMT
        Subject: CN=cbfa523d24117b616b549855cf0d6a55c720b6d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b3:3d:af:ab:b6:d5:2b:ce:e1:89:63:29:65:
                    43:69:08:f7:54:19:51:10:d7:0c:b1:f0:f7:38:f7:
                    56:f9:52:96:e7:95:03:07:f6:c1:09:e1:72:38:fe:
                    4d:c1:53:b7:bd:6a:fb:2b:8c:ad:6c:de:90:17:35:
                    84:14:e2:39:92:a0:3b:89:4f:ad:23:10:fa:97:35:
                    8d:1c:bd:0f:fd:da:b7:65:a1:e3:ba:fa:9d:32:27:
                    97:7a:6f:21:4c:c5:f8:a8:67:19:bb:ed:9f:95:7f:
                    ea:57:05:8a:d5:4d:8c:dc:82:ea:19:cb:e6:6b:2e:
                    ee:e4:36:4e:b2:76:05:54:14:d3:4f:6d:3a:c3:a1:
                    0e:3d:37:6b:ca:76:38:a5:e6:ed:7f:8d:37:64:00:
                    4d:6a:c8:7a:20:26:96:9a:cc:df:6a:4d:47:56:0c:
                    9c:6d:ab:43:b2:2a:5c:7d:f4:17:e0:ce:15:f7:34:
                    e1:d3:8f:1c:3e:7a:6e:4e:56:71:82:e6:15:65:83:
                    90:f8:66:36:3c:59:25:20:53:07:0e:df:91:96:cc:
                    27:01:12:13:4c:2d:29:63:59:af:4e:e7:a3:d2:63:
                    e5:8a:b3:5e:fc:33:f5:a5:2c:fd:55:6e:78:ba:92:
                    bc:ed:41:11:2c:10:c3:3a:51:d9:c2:df:b2:71:a6:
                    d1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FA:52:3D:24:11:7B:61:6B:54:98:55:CF:0D:6A:55:C7:20:B6:D8
            X509v3 Authority Key Identifier:
                keyid:E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:69:5e:d7:96:07:30:84:75:87:39:b2:f8:90:a3:a5:a5:03:
         60:e7:7a:35:ab:c7:52:1d:71:ba:ce:90:47:e8:2e:26:5f:66:
         20:5a:eb:21:73:66:6d:82:92:a9:3f:59:eb:49:e2:aa:aa:8e:
         b5:2a:e8:da:66:d4:e3:4b:00:2c:b5:4a:42:2c:62:1a:25:ef:
         6c:93:75:4f:37:fc:e1:f4:82:3f:15:a9:bf:55:bb:8b:a2:b0:
         59:72:ad:bd:f5:d6:4e:18:6f:19:a6:c7:c8:6b:c0:85:36:b4:
         f2:80:ea:2c:f3:f1:fe:64:21:41:4d:4c:19:27:22:93:35:82:
         b0:e4:73:55:1d:9f:58:57:0c:c6:ef:35:de:bf:17:38:2b:85:
         31:8c:7a:e6:c8:71:95:6e:d1:f0:d2:ed:32:1e:00:8f:3b:32:
         0e:dd:b2:05:f2:f9:b7:d8:06:44:df:15:85:b3:0a:25:32:4f:
         be:90:54:2c:20:ec:d3:05:0a:59:60:aa:bc:f6:cc:fd:4a:bb:
         48:ce:1c:ee:0a:97:37:49:07:82:a3:8f:67:b6:44:7e:48:ba:
         82:ce:2c:7e:63:ec:59:98:48:b5:fa:2d:9e:ff:dc:51:ab:da:
         3c:5b:e3:9a:1d:cc:52:d7:9b:e5:01:d4:09:5b:c8:8f:07:52:
         d8:70:f4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:06 2025 by rpki-client