Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
File:                     4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft (raw, json)
Hash identifier:          qhoOMXMnjdgrIDs/WSMNaynogwlFJfzTyNT0fbLyPuk=
Subject key identifier:   15:7F:27:9D:8C:A9:B1:C3:A0:FF:A6:9E:96:FF:5D:01:5A:D6:C3:40
Authority key identifier: E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
Certificate issuer:       /CN=e30f8894f308172ace92fbe6052eec23853eadad
Certificate serial:       019771BF4E7AD16A1319F985FC8F1E9CDF04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
Manifest number:          068D
Signing time:             Sun 15 Jun 2025 04:00:52 +0000
Manifest this update:     Sun 15 Jun 2025 04:00:52 +0000
Manifest next update:     Mon 16 Jun 2025 04:00:52 +0000
Files and hashes:         1: 4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl (hash: AOkOk9eqbv2RnN1Ov5OXDGVNBq4lbqmopotXpSOgeGM=)
                          2: c0fBmj5scO5bGyjJUPNEWoiJiz8.roa (hash: ysAxrF+4k0JvJ+yBQRYBZ/441fP/ZB0AQyNUuEBiB+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:bf:4e:7a:d1:6a:13:19:f9:85:fc:8f:1e:9c:df:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e30f8894f308172ace92fbe6052eec23853eadad
        Validity
            Not Before: Jun 15 04:00:52 2025 GMT
            Not After : Jun 16 04:00:52 2025 GMT
        Subject: CN=157f279d8ca9b1c3a0ffa69e96ff5d015ad6c340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:af:70:14:7b:09:2c:4e:49:bd:43:86:86:71:
                    b4:e9:0a:a1:6c:b6:f9:6d:bc:ad:0a:4d:8e:55:0b:
                    6e:0b:19:bd:5d:72:f1:c1:55:69:06:3e:6c:e9:4d:
                    a3:bf:4a:a4:5a:66:85:7c:4b:cc:aa:51:c4:1a:44:
                    46:68:81:53:35:c2:df:8f:a5:8b:4f:06:ad:f5:cb:
                    27:86:f0:08:9d:ca:6c:54:f0:6d:61:7b:84:d3:fc:
                    79:89:16:6d:97:b8:b1:7a:c4:d3:0a:bc:b7:22:bd:
                    c9:58:16:d0:49:50:e3:25:49:ea:af:94:ff:7b:70:
                    d2:28:3b:a2:18:06:31:c8:e6:44:14:60:94:d9:d5:
                    b7:33:36:11:e5:0b:c6:40:1a:a9:94:6e:fa:21:ef:
                    28:fe:ac:6d:c8:72:c4:cb:df:b6:ca:43:30:56:23:
                    2c:ca:9d:00:65:5b:94:63:5f:7f:c3:c1:92:c8:97:
                    79:68:10:3b:5a:df:ba:0f:ab:71:64:13:a5:ce:6d:
                    70:4a:e1:e6:33:8d:d6:00:9e:1c:fa:6a:78:87:80:
                    0e:47:c1:e2:3f:41:a9:0b:65:45:25:8a:44:2f:86:
                    ca:72:b9:43:41:82:99:ff:db:90:5c:60:5d:1f:72:
                    a2:75:bd:98:a1:c2:7f:60:cb:8b:69:b4:74:0f:dc:
                    a0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:7F:27:9D:8C:A9:B1:C3:A0:FF:A6:9E:96:FF:5D:01:5A:D6:C3:40
            X509v3 Authority Key Identifier:
                keyid:E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:76:14:3b:08:c9:97:47:72:fa:a9:fc:e5:31:71:ee:f8:ec:
         bd:e9:80:6c:20:3a:ac:eb:e7:d0:65:96:b3:1b:6f:79:b6:bf:
         38:fa:b6:d8:7d:f2:4c:ff:1d:ef:29:fa:75:e6:fb:b6:67:4c:
         b7:06:59:db:a7:47:5c:2f:7f:c4:d4:c2:1e:4d:84:a2:af:a8:
         1c:48:96:66:c8:b3:a9:02:a8:4f:56:f7:08:79:fa:7f:3a:69:
         4d:4a:8e:33:ae:59:a9:a9:92:d5:b4:04:38:3b:3b:cc:05:84:
         84:e6:05:05:92:aa:90:4c:37:25:df:02:b0:0a:4f:72:f0:2f:
         45:32:e8:6e:21:c0:76:db:4b:53:8f:7b:c7:78:55:30:ae:ca:
         ea:2a:c9:83:6d:ce:bd:4d:38:8c:68:ed:0d:89:c4:d3:c6:36:
         68:61:73:d7:5d:f7:a9:26:d5:66:ce:8a:f6:bd:21:2b:3a:31:
         b4:4e:ff:89:b9:cb:aa:4b:b1:0e:bd:73:88:c8:4f:71:98:10:
         be:e5:75:d3:7f:05:10:79:53:03:1d:c3:70:f1:c7:6b:76:14:
         4f:96:18:d3:67:7b:93:07:7e:16:2c:5c:dc:46:a9:4c:9e:4f:
         73:f7:20:55:51:b0:0b:21:46:48:7f:df:bf:00:25:2e:4a:54:
         c9:6a:31:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:48:22 2025 by rpki-client