Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft
File:                     4YVsMIKrL8jdGzWaezmRNoU4tNA.mft (raw, json)
Hash identifier:          hVY0CH0tfsxErDjgAe0T6ea0CpjmdPWyF1jPbh11U1M=
Subject key identifier:   5E:BC:6F:F4:41:59:8E:4E:9B:39:14:7E:90:38:34:03:88:23:4C:99
Authority key identifier: E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0
Certificate issuer:       /CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0
Certificate serial:       01977A548E670FF06809D07A03C097DBD7E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft
Manifest number:          0A2A
Signing time:             Mon 16 Jun 2025 20:00:51 +0000
Manifest this update:     Mon 16 Jun 2025 20:00:51 +0000
Manifest next update:     Tue 17 Jun 2025 20:00:51 +0000
Files and hashes:         1: 4YVsMIKrL8jdGzWaezmRNoU4tNA.crl (hash: iAx25E0te0NltAVlUg7MIeaUts1Xb086oxRjaULjKpE=)
                          2: DubK0ajew1E_RURQjQNCAhLGbkc.roa (hash: o2iba58UUQFPb0v5v5MuvKEyUlVzhsgsqL1rMivQOXg=)
                          3: Kq9oy1uLDEVjPK7uo7CtOBtF3Fs.roa (hash: +hOcbW8T2Du+uljugS3IXJD+qzn/X9C29PD+zWkfcl4=)
                          4: hn2vtXI_FxI2fK5snrvER2liYkI.roa (hash: h1TFBwFQDb6c/MRMsjXSVpwRX890l+6Op+4syOnaFGY=)
                          5: hzE5LvcG1hl--6wBh1ojQ7tfIYE.roa (hash: 87OEa14cIeRPup2IlbeWtF8BT8tzrS9k5/ocOLGWxJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 20:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7a:54:8e:67:0f:f0:68:09:d0:7a:03:c0:97:db:d7:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0
        Validity
            Not Before: Jun 16 20:00:51 2025 GMT
            Not After : Jun 17 20:00:51 2025 GMT
        Subject: CN=5ebc6ff441598e4e9b39147e9038340388234c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b5:04:d1:2d:73:20:fa:4b:c3:29:1f:9e:99:
                    e0:30:89:a2:47:34:dc:46:c2:fe:38:52:c9:f4:33:
                    cd:7c:06:23:b6:10:d7:02:30:6f:92:e6:db:64:70:
                    34:91:15:fd:e9:f1:56:ca:a3:94:79:5d:a0:0d:aa:
                    a8:96:52:de:e0:15:df:b4:f5:1e:4a:b1:43:de:a8:
                    f7:7a:d3:70:b8:87:d1:50:e8:05:c5:c2:4f:59:7d:
                    9f:b9:33:05:b0:c9:2f:2e:be:75:a1:df:71:e4:d2:
                    8f:50:50:f2:a6:c1:c4:db:23:48:3d:57:88:94:9d:
                    2e:ef:d4:0f:dc:5f:f4:f1:3a:67:38:ed:86:de:89:
                    fd:0e:7d:20:8c:b9:79:18:26:73:d8:dd:6a:02:25:
                    bf:fe:5f:b5:b1:f1:21:79:9a:3d:84:aa:89:9a:97:
                    13:78:de:c4:3d:81:13:4f:0d:fd:ea:d8:b4:0b:4d:
                    72:eb:c4:2d:ad:94:53:96:5a:2a:92:63:76:13:6b:
                    b2:f6:f4:4a:fc:49:32:0b:14:4b:f9:a8:e6:55:38:
                    c6:7d:4f:d0:04:9d:72:aa:a7:d0:e0:8a:2a:2b:75:
                    6c:a2:99:fc:7c:2c:37:19:f8:48:44:96:ba:c1:77:
                    67:b8:7e:b4:eb:87:1b:48:95:d3:27:14:4b:d8:c1:
                    ea:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:BC:6F:F4:41:59:8E:4E:9B:39:14:7E:90:38:34:03:88:23:4C:99
            X509v3 Authority Key Identifier:
                keyid:E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:8b:11:0c:c3:ae:b3:24:f3:b3:06:60:a9:25:31:ac:cb:a0:
         d6:e6:1c:c5:41:2d:c7:6b:84:54:f7:07:49:2e:a6:ce:f0:55:
         f1:e0:2a:94:51:77:dc:95:cd:84:af:13:33:2a:9a:98:61:d0:
         de:9b:f4:08:6e:4b:30:cd:ed:92:12:ce:15:d8:69:13:6e:db:
         73:9d:b3:ec:54:ce:e8:1c:8b:00:f4:0c:47:5c:93:fc:6c:c6:
         89:5a:6b:ea:20:a4:7d:d1:45:12:81:fb:37:85:62:83:5e:51:
         30:12:f5:12:1d:05:75:86:bc:ef:06:b7:24:c8:33:f8:bc:4e:
         11:f4:e3:9b:a9:19:a2:97:6e:63:5d:25:5d:3f:3d:c4:87:50:
         2d:ba:74:49:09:76:f4:47:e2:96:e2:44:cf:0a:06:42:7a:eb:
         e9:a6:04:84:c9:dd:18:b0:0d:da:53:4a:2e:f8:a4:45:b4:59:
         18:54:24:7f:51:06:17:6d:56:ab:20:85:a9:3f:64:90:43:a3:
         a4:0b:83:13:16:01:e4:e6:7b:bc:f2:eb:f2:80:04:88:e5:ae:
         09:73:30:92:0b:21:ca:bb:b7:bc:0c:1a:e1:d5:8c:60:6c:cb:
         ba:4d:3e:34:05:e1:10:1b:63:05:9f:7c:86:64:e8:72:f0:9b:
         06:72:f3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:21:59 2025 by rpki-client