Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
File:                     4Pi55HhWy7oIK3r0KXobcj2vxAI.mft (raw, json)
Hash identifier:          ACtV+8w9iRN2RqNGNRWeu0gCNFAgHNocuC8FfToB6Tk=
Subject key identifier:   EF:1C:9E:A5:88:82:27:83:9D:43:13:31:4A:A3:5B:3C:34:A5:71:7C
Authority key identifier: E0:F8:B9:E4:78:56:CB:BA:08:2B:7A:F4:29:7A:1B:72:3D:AF:C4:02
Certificate issuer:       /CN=e0f8b9e47856cbba082b7af4297a1b723dafc402
Certificate serial:       01976884CBBDB7C3C224E0B50386950135C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
Manifest number:          0E3E
Signing time:             Fri 13 Jun 2025 09:00:22 +0000
Manifest this update:     Fri 13 Jun 2025 09:00:22 +0000
Manifest next update:     Sat 14 Jun 2025 09:00:22 +0000
Files and hashes:         1: 4Pi55HhWy7oIK3r0KXobcj2vxAI.crl (hash: D7ncIoIW8j0Ol7HKdSlohXb6+WbFWpeo0nzamDdiUiI=)
                          2: Mz3zdOLpdrQGVZtJncItYpvPliE.roa (hash: 6F2PNmZ9ECufEFXZhtjXXLlbHL0vIzCdtjQEK5a/NJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 09:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:84:cb:bd:b7:c3:c2:24:e0:b5:03:86:95:01:35:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f8b9e47856cbba082b7af4297a1b723dafc402
        Validity
            Not Before: Jun 13 09:00:22 2025 GMT
            Not After : Jun 14 09:00:22 2025 GMT
        Subject: CN=ef1c9ea5888227839d4313314aa35b3c34a5717c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:11:85:44:84:f7:9f:b2:04:6f:eb:7b:84:1a:
                    61:cb:5b:34:5b:1e:c8:fc:33:ff:3e:e7:16:3e:a2:
                    7b:51:a2:2d:92:6c:96:dc:9f:e7:88:76:8b:f6:4c:
                    e2:66:50:8e:91:d2:86:a3:77:40:b7:e2:9b:60:d9:
                    34:31:c7:86:4c:4d:1a:98:bd:13:d0:2c:ee:84:42:
                    84:ee:99:01:b1:37:ff:84:82:bd:82:7e:fd:c7:e2:
                    26:7f:a2:86:6b:dd:dc:44:42:3b:a6:17:9e:46:d0:
                    55:76:77:c8:0a:7e:91:57:b6:7c:4f:7a:05:a0:73:
                    18:cf:28:95:f6:2d:eb:87:74:62:56:35:20:91:fa:
                    2f:13:f5:18:04:75:77:26:65:59:11:4a:98:9a:a7:
                    e4:d5:74:3d:b5:ab:05:09:6a:75:14:11:2c:22:d2:
                    97:9d:bd:2b:9a:5d:ca:b7:2c:0f:02:94:c2:a4:f2:
                    00:a1:04:0a:30:cc:3f:28:ab:fb:c9:8b:c6:fc:fb:
                    5b:68:63:ec:5c:55:5f:0f:49:15:e2:86:6a:e7:3f:
                    a4:1a:2f:8e:83:1c:61:ce:ea:89:3f:1f:a7:be:79:
                    0f:2f:a6:ce:46:a9:ee:95:36:21:40:e0:18:2c:1f:
                    65:ea:11:62:00:45:64:74:99:de:41:56:c5:93:43:
                    95:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1C:9E:A5:88:82:27:83:9D:43:13:31:4A:A3:5B:3C:34:A5:71:7C
            X509v3 Authority Key Identifier:
                keyid:E0:F8:B9:E4:78:56:CB:BA:08:2B:7A:F4:29:7A:1B:72:3D:AF:C4:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:13:cd:14:a6:01:0e:30:95:24:aa:0c:7b:93:d9:5d:f1:b5:
         3c:ec:ac:00:a2:35:59:17:b2:0d:e1:e2:6c:bc:d1:89:bf:8b:
         54:0d:03:19:fd:62:28:2c:bb:ba:29:1c:9d:ae:81:8f:2d:ea:
         a4:ad:57:0a:98:73:49:18:6c:7f:4a:ea:ab:63:ef:8c:bc:1d:
         f0:f8:42:99:af:d8:8a:07:db:c7:3a:42:57:1a:ec:5d:8a:ed:
         9c:27:60:1a:9b:cc:08:9a:29:f3:3b:84:bc:7c:b6:34:77:42:
         75:f0:63:ae:b8:01:02:74:61:8a:36:1a:e4:17:9a:80:d0:ae:
         ee:12:a0:ce:40:8b:9b:bf:11:1a:eb:14:71:41:52:63:1a:cf:
         cb:e9:62:05:50:a4:c9:c2:cd:c0:9d:ea:a7:62:52:c7:33:07:
         48:25:1f:70:1c:9e:9e:c2:e5:5d:00:e5:09:b5:4d:5a:ce:b2:
         a8:da:14:33:34:9d:b7:f9:8e:4a:47:e7:6b:8f:41:3a:59:58:
         ff:fd:d0:ba:bc:9b:7c:98:e3:d5:44:65:2b:5a:c5:21:12:15:
         fd:1a:2c:48:45:8b:11:9e:55:4e:4b:fe:a2:94:90:79:ac:f7:
         ba:f0:d2:5c:aa:34:c1:71:5d:fa:99:dc:bf:a9:85:aa:a6:58:
         ec:64:11:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:19:25 2025 by rpki-client