Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8f597b-3928-4a4d-8325-73f1ab5cae96/1/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.mft
File:                     4q0bUDd9fAdcZNAJ9Aow_nKQaHw.mft (raw, json)
Hash identifier:          DTxOa8dydn0wknd63+yPek3p32PU2L4IXfRY4HShog4=
Subject key identifier:   FB:A1:46:D4:38:F4:38:3C:E7:B5:59:AB:62:D4:62:34:30:D1:51:4B
Authority key identifier: E2:AD:1B:50:37:7D:7C:07:5C:64:D0:09:F4:0A:30:FE:72:90:68:7C
Certificate issuer:       /CN=e2ad1b50377d7c075c64d009f40a30fe7290687c
Certificate serial:       019774F7CC5C73F115D1432DDDBC2DB3551E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/8f597b-3928-4a4d-8325-73f1ab5cae96/1/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.mft
Manifest number:          1338
Signing time:             Sun 15 Jun 2025 19:01:26 +0000
Manifest this update:     Sun 15 Jun 2025 19:01:26 +0000
Manifest next update:     Mon 16 Jun 2025 19:01:26 +0000
Files and hashes:         1: 4q0bUDd9fAdcZNAJ9Aow_nKQaHw.crl (hash: 3RlkfsN6QcWaezaC7dqS08bEOWw9grxXlal5Rzm7FyQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/8f597b-3928-4a4d-8325-73f1ab5cae96/1/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/8f597b-3928-4a4d-8325-73f1ab5cae96/1/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:74:f7:cc:5c:73:f1:15:d1:43:2d:dd:bc:2d:b3:55:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2ad1b50377d7c075c64d009f40a30fe7290687c
        Validity
            Not Before: Jun 15 19:01:26 2025 GMT
            Not After : Jun 16 19:01:26 2025 GMT
        Subject: CN=fba146d438f4383ce7b559ab62d4623430d1514b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:54:07:c4:3f:16:e0:94:08:cd:ee:70:70:0a:
                    36:50:de:66:99:93:9b:ae:13:05:fa:89:d6:96:4b:
                    85:fd:3a:7d:03:cb:7b:cd:03:16:a0:72:11:f0:3f:
                    56:f8:8e:4b:0f:a0:6a:f0:20:65:45:70:ab:2f:f8:
                    ae:3b:bb:c6:c4:65:c4:ba:ac:e9:1e:31:ba:3e:56:
                    c8:a8:84:ee:39:1f:94:3c:33:36:41:41:05:50:b8:
                    1e:00:77:42:70:cd:a5:fc:78:f6:74:4f:a0:7d:ab:
                    c9:7b:ff:c2:17:ad:cf:51:11:df:9d:e5:d4:66:b4:
                    ed:90:fb:09:fe:40:fa:47:6f:81:56:3a:b2:74:ac:
                    07:d7:ef:09:59:14:21:e0:e0:19:a3:c1:c7:e8:3b:
                    76:26:e1:47:f4:39:33:e6:3d:b1:77:ec:09:a6:e2:
                    ad:87:a2:96:19:fc:30:94:1c:1e:29:13:af:9e:c6:
                    68:ea:77:9b:1d:16:c3:ba:81:b6:8c:98:ef:fa:33:
                    59:f0:35:ba:6f:29:b2:94:1f:ae:07:a1:a5:63:79:
                    10:76:a3:b7:da:f1:11:9f:eb:2f:50:73:af:d0:59:
                    a9:65:a8:89:a2:ca:17:64:4d:12:8d:e1:5c:65:30:
                    a1:6b:e6:27:52:56:26:62:20:d1:ff:3f:8f:25:93:
                    37:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A1:46:D4:38:F4:38:3C:E7:B5:59:AB:62:D4:62:34:30:D1:51:4B
            X509v3 Authority Key Identifier:
                keyid:E2:AD:1B:50:37:7D:7C:07:5C:64:D0:09:F4:0A:30:FE:72:90:68:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8f597b-3928-4a4d-8325-73f1ab5cae96/1/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8f597b-3928-4a4d-8325-73f1ab5cae96/1/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:77:07:a6:00:77:18:d6:10:6c:b1:38:92:a4:b8:da:6e:3e:
         90:ce:ea:cf:28:93:b0:9a:43:f3:a3:4a:b9:10:61:29:97:63:
         de:9a:f7:d3:40:38:73:8b:82:47:6b:d9:fb:c4:61:f1:d9:1f:
         79:76:96:17:98:ef:52:d3:68:cc:b7:2e:b3:74:63:b4:0b:9a:
         91:61:97:40:1d:d5:14:91:7a:58:b1:1b:46:7e:98:d6:c4:cf:
         68:4c:51:57:de:b2:82:22:e0:8f:e2:68:ad:79:c7:0f:6b:5f:
         1a:06:06:b5:fd:0f:c1:3a:54:5e:85:f1:c5:14:f3:1f:cf:34:
         ad:d0:17:2a:20:7a:88:21:ba:de:0f:a5:7a:80:8c:8a:68:45:
         c4:a2:01:19:a5:b4:20:4f:9a:be:32:1c:9e:5d:bd:d6:a1:30:
         7a:e1:2a:8b:b1:fa:14:08:eb:18:14:c0:33:b2:de:c3:8d:0d:
         f0:02:fb:05:00:b2:ad:37:d0:ef:fb:bc:0c:ec:51:14:85:17:
         3c:e8:d4:3b:a4:db:ad:58:71:9f:fa:aa:57:97:3c:62:c5:02:
         9b:70:c6:46:78:7a:93:d0:50:a4:d7:a0:8e:f6:cf:31:9d:51:
         11:82:94:3d:a5:0e:94:37:02:5e:28:fa:9a:b6:2c:39:0b:ac:
         c1:85:fa:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:51:09 2025 by rpki-client