Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
File:                     1-J4in4YLBY0j_SiikmFhuHhjMMY.mft (raw, json)
Hash identifier:          eJKKHfK5obwr5r9OhEzjUvleY//Q8LS+zn2hrbOccS4=
Subject key identifier:   41:12:E2:33:C5:34:49:F5:AB:EE:1F:EB:A4:51:28:8E:CF:AC:56:96
Authority key identifier: F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6
Certificate issuer:       /CN=f89e229f860b058d23fd28a2926161b8786330c6
Certificate serial:       01976CCFA847FA00E2A8C238D854A1C5CAFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
Manifest number:          0E53
Signing time:             Sat 14 Jun 2025 05:00:37 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:37 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:37 +0000
Files and hashes:         1: 1-J4in4YLBY0j_SiikmFhuHhjMMY.crl (hash: BtOYgohZ+k6NfMyuaAK9L0LtCUVBpcQJCA3oqFNRi9I=)
                          2: Aa6sIwlX6_w5uXf2zsts3DwkhU4.roa (hash: LlENaZaigA7zDM+CDaj8xvJ6snfd5fy4W4jHwPOvoos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:a8:47:fa:00:e2:a8:c2:38:d8:54:a1:c5:ca:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f89e229f860b058d23fd28a2926161b8786330c6
        Validity
            Not Before: Jun 14 05:00:37 2025 GMT
            Not After : Jun 15 05:00:37 2025 GMT
        Subject: CN=4112e233c53449f5abee1feba451288ecfac5696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6a:10:8e:3e:93:91:0f:c8:f6:b5:aa:89:66:
                    a4:70:04:76:ba:93:57:63:53:3a:31:7f:be:dc:6e:
                    0d:2d:92:62:39:62:7c:39:b8:80:8c:01:8a:c2:d9:
                    ea:80:99:8c:ec:e1:2c:4c:e6:84:6a:f5:4c:97:35:
                    2a:43:b4:91:41:6a:6d:aa:07:1c:e4:39:a2:22:7e:
                    15:76:24:1e:fc:5b:5d:99:1a:44:c3:b7:a1:35:76:
                    c9:55:64:0e:6d:4a:28:4c:85:4b:50:5d:be:79:bf:
                    52:07:d5:ab:67:15:8c:d2:f9:30:e2:d6:12:cb:71:
                    bb:25:0c:5a:ee:48:83:31:d4:ee:a1:6d:dc:e7:12:
                    69:23:8c:37:fd:35:2a:46:b4:56:40:39:b4:0f:30:
                    bc:d0:71:94:b0:18:3e:bd:4c:4c:25:85:90:54:cb:
                    4d:86:a9:0c:68:ea:4c:db:61:a8:ca:34:28:d9:a4:
                    24:40:23:a9:47:38:7a:d1:cb:40:8b:ed:5a:10:33:
                    7d:73:b7:c4:9b:fe:68:e0:2a:d7:98:07:e5:29:f2:
                    51:56:a5:59:2c:0e:30:4a:cc:f5:a3:4e:1d:e2:78:
                    35:ad:8c:ef:47:9f:40:dd:5f:74:44:14:e4:c0:63:
                    db:79:a2:77:40:6b:09:1c:41:76:ea:3a:54:26:3e:
                    25:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:12:E2:33:C5:34:49:F5:AB:EE:1F:EB:A4:51:28:8E:CF:AC:56:96
            X509v3 Authority Key Identifier:
                keyid:F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:79:f7:ff:62:39:3b:44:3e:51:a1:cd:db:0e:37:b3:5e:4e:
         c1:a3:bf:5e:c8:c0:c4:24:a5:e1:45:86:8d:8d:a4:68:19:15:
         aa:0a:42:a8:56:08:f9:a5:2a:1e:99:21:57:c5:05:d3:68:1d:
         9d:8b:11:da:bd:25:bb:dc:e5:6e:2d:8d:53:cb:a9:1f:fd:f7:
         2c:9f:ab:57:96:8a:49:a4:b5:1c:11:f0:36:20:f3:50:ec:ab:
         9f:d9:33:31:68:e6:83:79:b6:ff:79:1e:53:ec:6c:f8:12:3d:
         9b:af:5e:27:07:46:af:18:6b:d6:28:56:bf:2d:b4:32:18:c7:
         fb:50:72:40:ec:ca:1b:c5:98:96:a6:ae:a2:66:9c:3e:1e:f6:
         80:41:99:b7:09:36:68:49:72:53:32:40:f1:a1:b7:50:4e:ea:
         0d:3a:f9:2d:9a:7c:78:cd:1c:d8:17:44:c3:da:9e:11:90:72:
         28:95:79:a5:6a:aa:cf:be:78:1a:87:a1:98:44:0f:7f:e5:19:
         92:10:73:9e:83:96:14:56:d9:ce:c9:e4:40:4f:9e:4a:0f:36:
         90:94:c0:70:50:f8:dc:ff:b2:b0:ff:7a:d7:d7:68:58:23:5e:
         80:f6:d9:df:21:4c:cd:cd:a2:3a:dc:d5:8e:7d:37:72:fe:48:
         86:5d:d4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:56:39 2025 by rpki-client