Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
File:                     4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft (raw, json)
Hash identifier:          FnyDJV4BVUiDV7k6mPNnTacWmz3BPMicmJJVTGJ0js0=
Subject key identifier:   36:C0:6A:77:0E:33:D2:7B:9C:8D:9C:AD:43:91:54:1F:AF:BC:8C:E9
Authority key identifier: E2:3F:8F:5C:52:42:5D:F6:2B:44:45:43:3A:AC:FD:8C:A5:BF:2E:9D
Certificate issuer:       /CN=e23f8f5c52425df62b4445433aacfd8ca5bf2e9d
Certificate serial:       019770E3827EE99E335BFCF320B4F7F63D4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
Manifest number:          0210
Signing time:             Sun 15 Jun 2025 00:00:47 +0000
Manifest this update:     Sun 15 Jun 2025 00:00:47 +0000
Manifest next update:     Mon 16 Jun 2025 00:00:47 +0000
Files and hashes:         1: 4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl (hash: rai4U9SU28J42/JS5gi+i9SVD0CTm24xc8BrZmsmXrg=)
                          2: 6ppH0TTYhzfLzHV3xSzl4LSdV6c.roa (hash: OehC5Yx+JGVn7qI8wxptwUUS4CQUtx99kzGyWmtybhI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 00:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:e3:82:7e:e9:9e:33:5b:fc:f3:20:b4:f7:f6:3d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e23f8f5c52425df62b4445433aacfd8ca5bf2e9d
        Validity
            Not Before: Jun 15 00:00:47 2025 GMT
            Not After : Jun 16 00:00:47 2025 GMT
        Subject: CN=36c06a770e33d27b9c8d9cad4391541fafbc8ce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ec:e9:28:08:3a:99:18:92:cf:1a:fa:88:0d:
                    c9:23:ed:19:00:9b:6d:6e:f5:85:19:da:30:d5:d1:
                    86:11:28:65:b5:f2:b8:80:f2:1f:57:42:21:a5:b8:
                    bb:d3:c7:ae:ad:f7:e8:5d:86:bc:9e:4e:7c:c5:ab:
                    8b:2f:cb:71:9b:b0:3a:92:96:c2:10:51:f3:91:1d:
                    91:99:60:f3:5c:a7:cc:4c:1d:51:8d:5e:55:15:26:
                    b9:2e:c9:81:67:c8:2d:fc:b6:c3:4b:2b:2b:1b:cb:
                    f8:aa:fa:a3:3f:51:a5:b1:b4:80:d0:d7:0a:b9:d4:
                    62:86:bc:2a:28:20:60:06:8a:e3:1b:e0:e3:3f:f2:
                    64:d8:1b:4f:a6:72:18:f7:aa:66:06:4c:ef:d4:dc:
                    66:0f:fb:c8:55:e2:d7:35:b3:c5:d0:5b:af:45:df:
                    e7:36:45:ba:3e:b0:84:96:c8:d8:95:0e:39:10:8c:
                    42:0b:d5:ea:61:70:e1:33:46:bc:b1:ce:64:e9:46:
                    8c:e6:7f:fa:c4:42:7a:8c:e2:fb:d9:e1:1f:8f:e9:
                    a4:ed:2c:29:5d:24:42:a2:2a:96:68:f8:46:89:02:
                    d2:bd:31:51:d4:f7:6b:b9:8d:fb:14:b4:f4:52:1f:
                    ad:9a:7a:43:1c:05:37:25:36:cc:c2:a6:9c:28:29:
                    1e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C0:6A:77:0E:33:D2:7B:9C:8D:9C:AD:43:91:54:1F:AF:BC:8C:E9
            X509v3 Authority Key Identifier:
                keyid:E2:3F:8F:5C:52:42:5D:F6:2B:44:45:43:3A:AC:FD:8C:A5:BF:2E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:1a:a3:ec:dd:c5:28:6e:b3:0f:f5:c6:52:04:31:3b:bd:0e:
         c7:81:4b:55:d7:8f:0e:05:3c:ac:5c:fa:eb:7f:25:3d:db:ba:
         7e:df:31:1d:3b:1c:b8:94:67:01:a6:af:ba:02:62:d3:00:ee:
         82:96:57:ec:20:a6:a7:62:b3:30:3c:09:25:99:29:f8:46:70:
         93:fb:2b:29:5c:96:71:67:94:05:6d:5c:5b:f1:ff:4e:d8:0c:
         b1:4f:19:f0:03:f2:a3:dd:35:c2:ee:be:1e:b8:9f:24:df:3b:
         af:dc:10:35:7c:31:b2:4f:c8:4f:c3:10:90:ce:ab:a0:76:c1:
         17:f9:dd:0a:ec:e9:89:80:cc:92:ac:90:9b:f1:c0:7f:b3:3f:
         82:80:22:04:cd:ce:2d:92:ff:51:0a:75:9f:7a:15:af:f5:03:
         6c:bb:41:9f:60:51:f1:b7:aa:44:bb:3c:b3:92:ce:fd:d0:77:
         54:5f:44:d8:4f:f8:64:25:aa:5b:4d:06:67:ed:05:bd:f4:13:
         6e:10:a9:40:39:52:5a:f2:d7:f6:f9:8d:d8:9e:ad:3a:f5:fb:
         47:2b:6b:df:78:25:3d:89:3c:eb:c9:b3:b7:a8:a4:a7:d2:3a:
         e0:c8:99:f4:5d:37:11:8c:6c:ce:20:55:00:1e:fa:10:af:14:
         63:2c:9d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:30:35 2025 by rpki-client