Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
File:                     4Uk5uDWV4u-2lFa83yOGalB59vU.mft (raw, json)
Hash identifier:          307YyShFexLrhNO2nWw1ryjlvecDc2Y0cLMN0IeBRRs=
Subject key identifier:   FB:0F:EE:7A:B3:7D:45:21:8F:E4:C2:98:DC:2C:8B:0A:A4:D2:82:CB
Authority key identifier: E1:49:39:B8:35:95:E2:EF:B6:94:56:BC:DF:23:86:6A:50:79:F6:F5
Certificate issuer:       /CN=e14939b83595e2efb69456bcdf23866a5079f6f5
Certificate serial:       01976A061B6F307EB196B3DF3D9F9A374A6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
Manifest number:          1590
Signing time:             Fri 13 Jun 2025 16:01:14 +0000
Manifest this update:     Fri 13 Jun 2025 16:01:14 +0000
Manifest next update:     Sat 14 Jun 2025 16:01:14 +0000
Files and hashes:         1: 4Uk5uDWV4u-2lFa83yOGalB59vU.crl (hash: t+w/lwsUHFoidMc4rLS8VW6xyRCaL0T/A4+NHpVB5rA=)
                          2: 9DOz_U29J25pYyeM86YxHr4X6eI.roa (hash: m1/Q7PpupEiNgQObdS35HK/CHkZPlsg/AOIPZ9fZoyU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:06:1b:6f:30:7e:b1:96:b3:df:3d:9f:9a:37:4a:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14939b83595e2efb69456bcdf23866a5079f6f5
        Validity
            Not Before: Jun 13 16:01:14 2025 GMT
            Not After : Jun 14 16:01:14 2025 GMT
        Subject: CN=fb0fee7ab37d45218fe4c298dc2c8b0aa4d282cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6d:34:42:0f:eb:ad:77:86:29:df:74:2c:62:
                    5e:f9:72:5d:c3:59:84:c0:49:40:f6:79:c9:3c:1d:
                    46:5c:17:b9:64:75:e4:d4:ba:e9:0b:60:18:7c:3c:
                    b1:c6:ef:02:f4:46:5e:01:bc:74:70:ed:eb:26:03:
                    82:e6:ae:74:66:42:9c:f5:81:12:ef:23:08:57:83:
                    32:05:c4:ba:1f:9d:54:85:e3:8f:03:84:67:d2:6e:
                    3b:f2:de:2a:7e:57:92:9e:18:36:b5:01:2b:91:c7:
                    ea:f5:2c:e0:7b:73:1e:5d:e2:57:7d:04:5f:4b:4e:
                    a2:9b:eb:5f:ca:3d:6c:27:3c:73:99:8f:fa:62:f9:
                    8c:06:82:89:ab:2e:b4:ce:99:13:59:e6:c2:6e:56:
                    b0:7e:7d:fa:a5:4e:84:3f:ea:73:14:88:bb:5e:6e:
                    20:f5:4b:59:e2:e7:a5:95:38:ce:07:6c:55:8e:77:
                    1e:88:95:bb:b1:f4:22:13:26:97:e8:9b:7e:96:03:
                    25:ed:fb:94:79:f5:6e:66:b3:4c:29:d0:d3:da:10:
                    57:59:fb:87:5f:5a:be:25:00:b0:bc:0c:d1:3f:51:
                    3b:79:da:b4:f1:ab:7c:d5:2d:56:5a:f5:16:63:99:
                    e8:05:00:70:d4:29:01:ae:00:7d:16:50:a6:b2:1f:
                    82:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:0F:EE:7A:B3:7D:45:21:8F:E4:C2:98:DC:2C:8B:0A:A4:D2:82:CB
            X509v3 Authority Key Identifier:
                keyid:E1:49:39:B8:35:95:E2:EF:B6:94:56:BC:DF:23:86:6A:50:79:F6:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:17:0a:6c:9c:bb:36:86:92:4c:ec:7d:bd:a6:7b:01:4a:4b:
         09:86:16:45:d6:b3:c7:f6:81:98:f6:33:c6:7f:b5:c0:4b:94:
         a7:f6:77:fc:d8:b8:cc:dc:f9:80:d5:4d:d9:54:9c:f2:01:6a:
         01:5a:b7:2a:ee:a1:8c:50:7c:2c:b4:c3:cb:6c:36:23:67:31:
         b9:28:3a:cf:8d:fe:4c:6b:40:af:fb:f9:3c:da:f5:23:48:3d:
         59:50:09:d9:d7:e1:71:ff:4e:ec:bf:60:62:0d:27:6f:6f:66:
         48:e1:88:22:b1:e2:ff:0c:e3:7d:f7:a7:e0:13:53:d8:b2:c1:
         12:4d:7f:26:cc:a1:28:b9:b8:97:bb:75:f5:9f:15:b1:81:d7:
         76:3b:db:3d:24:17:13:dc:da:1b:6a:b4:a3:9f:0f:f7:29:c9:
         e2:36:03:66:66:9a:bb:ba:29:ea:5e:ff:23:98:83:3e:d7:3e:
         83:10:81:d5:05:78:ff:70:5a:8e:65:e1:16:cb:12:8d:aa:30:
         53:cf:79:b3:d4:cc:bf:a0:c5:39:28:39:6f:41:28:37:50:b3:
         b8:37:04:d0:98:00:30:fa:e0:b6:ef:12:cd:41:38:65:d0:5e:
         9c:f7:57:82:9d:3e:7e:2b:b9:2c:0b:c6:ae:b2:ab:4b:76:4f:
         7b:03:ec:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:14:41 2025 by rpki-client