Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
File:                     s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft (raw, json)
Hash identifier:          D9ZY4wUy+XtMQBTRPYmruLiCqSVpF3MSyxQGVvtYuio=
Subject key identifier:   F8:D9:E6:E3:79:CB:DB:51:EB:10:77:A2:8C:09:37:B8:94:C1:08:A5
Authority key identifier: B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73
Certificate issuer:       /CN=b3e064e17335fdeb83a09862a735a6e97762d973
Certificate serial:       019770E3529023B782EBCA7BF4EEEA810BCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
Manifest number:          10FE
Signing time:             Sun 15 Jun 2025 00:00:35 +0000
Manifest this update:     Sun 15 Jun 2025 00:00:35 +0000
Manifest next update:     Mon 16 Jun 2025 00:00:35 +0000
Files and hashes:         1: AWpLE7spKuCZAaiwcgrEYb9HbDE.roa (hash: HqSrJdcOFCUWqqNPEe+PAqwdq/X6tR+SRGcYc+ZwSvI=)
                          2: s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl (hash: cIpwqTVdUrjldZ6yfWQ/D7drfBiUvncXwjFdIrsxnwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:e3:52:90:23:b7:82:eb:ca:7b:f4:ee:ea:81:0b:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3e064e17335fdeb83a09862a735a6e97762d973
        Validity
            Not Before: Jun 15 00:00:35 2025 GMT
            Not After : Jun 16 00:00:35 2025 GMT
        Subject: CN=f8d9e6e379cbdb51eb1077a28c0937b894c108a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9e:5f:f5:9f:bf:96:da:44:ac:22:1f:b3:f7:
                    c6:d3:c3:a1:39:1e:83:c4:66:6f:59:e8:3d:ea:6d:
                    65:d6:9a:44:cb:a3:49:b8:5e:57:72:d6:e7:91:3c:
                    12:13:da:cc:48:b5:6a:86:60:b3:f0:95:91:b9:da:
                    e5:37:59:07:85:6c:bd:d6:9c:73:c8:f7:79:76:c0:
                    af:84:a3:fc:0b:af:e3:e1:9a:ea:0c:b5:e1:d9:56:
                    5c:70:fd:c7:7a:09:ff:64:95:4d:6a:d4:41:25:e9:
                    33:f7:df:99:7a:b9:b1:ef:9a:23:74:14:e7:cb:2f:
                    f8:97:7c:8e:f8:dd:9d:ff:e3:a2:0a:c8:2e:a7:72:
                    0a:7c:6a:e2:92:17:f0:58:8c:2f:a3:4a:6d:3a:5e:
                    66:93:20:01:a4:cb:53:b2:c7:29:22:0f:16:ee:11:
                    3a:c3:e4:c7:8f:86:46:60:fe:65:a2:73:52:8f:87:
                    e7:8d:96:9e:5d:e1:8a:13:76:ed:b4:d3:12:1a:1e:
                    e2:59:24:3e:7d:e7:02:bd:ea:3a:3e:ab:e6:84:9b:
                    f3:06:25:2b:ac:cb:05:27:9f:fa:6d:e4:5c:bb:ba:
                    72:26:9d:ca:24:c0:6b:fd:2c:6d:2d:c1:86:20:83:
                    ae:10:da:65:ee:fa:9f:32:f2:83:83:45:d9:f8:e9:
                    71:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D9:E6:E3:79:CB:DB:51:EB:10:77:A2:8C:09:37:B8:94:C1:08:A5
            X509v3 Authority Key Identifier:
                keyid:B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:a5:a7:1c:67:7d:e2:76:4b:8f:da:7d:89:a5:0e:93:89:db:
         db:42:2c:86:00:78:89:a4:8a:d1:f4:d7:fd:e6:5c:18:5a:85:
         6e:48:34:e8:d5:67:f2:f3:5f:b5:b8:87:27:83:b0:ff:a8:09:
         94:8e:ed:7b:9a:d9:f4:0d:2a:65:78:e7:14:2a:1e:31:25:f1:
         48:33:d8:4b:c7:98:93:c9:14:ad:f5:b3:46:a4:a7:a8:db:e4:
         8d:37:79:6c:80:69:4e:da:74:1b:93:46:67:24:d9:ec:0a:41:
         cf:0a:ef:c7:9c:78:0b:96:bf:a8:fc:b2:28:f4:3a:6a:e6:94:
         2a:b9:b1:56:82:e2:42:79:ad:de:b9:bc:34:61:6a:88:d4:ca:
         4d:10:24:95:54:44:b7:77:74:e8:27:57:58:ad:12:11:12:be:
         a3:e9:38:1b:f9:9d:3a:93:15:21:b2:a1:1f:66:b2:5e:2b:62:
         dc:fb:54:03:56:d3:f5:26:61:93:ab:47:03:da:5f:ee:8a:9d:
         86:5a:17:c3:12:80:4f:e7:83:b8:f5:8c:65:10:f5:0b:27:5e:
         02:d6:cf:8c:4f:de:17:03:2e:8e:80:62:34:9a:4b:d9:83:fa:
         1d:da:88:d9:d4:70:c5:1a:c1:51:a9:53:16:ea:30:43:48:94:
         55:4a:77:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:36:59 2025 by rpki-client