Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
File:                     4uevc8B6V4KvJINOvdt0qciXxP8.mft (raw, json)
Hash identifier:          +jUjxaZnViV6AlCTzXawsW62Ix5XkjHB2WkgW9eIPAE=
Subject key identifier:   51:F8:13:2E:E8:2C:9A:A1:CD:E9:92:4C:D0:A3:2F:69:A8:9B:AE:0E
Authority key identifier: E2:E7:AF:73:C0:7A:57:82:AF:24:83:4E:BD:DB:74:A9:C8:97:C4:FF
Certificate issuer:       /CN=e2e7af73c07a5782af24834ebddb74a9c897c4ff
Certificate serial:       0197778A819B48820142CC95BC51D1995A33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
Manifest number:          01EF
Signing time:             Mon 16 Jun 2025 07:00:55 +0000
Manifest this update:     Mon 16 Jun 2025 07:00:55 +0000
Manifest next update:     Tue 17 Jun 2025 07:00:55 +0000
Files and hashes:         1: 4uevc8B6V4KvJINOvdt0qciXxP8.crl (hash: xDCwP/A6TqdjkSsl/Kd/4sd8njcIB9Tu6WU32Ow3jlY=)
                          2: k33f_PMIoHn5FXjWs9o_hAagQPU.roa (hash: CQN6YPAgrfc6UnCswx4tiN7JfnanWIcuyP1dM7rzekg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:77:8a:81:9b:48:82:01:42:cc:95:bc:51:d1:99:5a:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e7af73c07a5782af24834ebddb74a9c897c4ff
        Validity
            Not Before: Jun 16 07:00:55 2025 GMT
            Not After : Jun 17 07:00:55 2025 GMT
        Subject: CN=51f8132ee82c9aa1cde9924cd0a32f69a89bae0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f3:ad:02:4b:be:88:e6:37:74:c2:fe:81:86:
                    cc:bb:38:a4:a8:28:cc:fd:c5:82:f9:79:89:e2:94:
                    c4:79:3d:d8:bc:a9:85:5f:ef:79:95:9a:8b:04:12:
                    9e:ff:da:42:4a:b6:93:b6:e1:72:f4:34:15:0b:49:
                    0c:a0:dc:ae:9c:3c:17:f2:44:f8:3e:a7:c7:d3:7a:
                    55:5c:b0:71:45:da:65:93:27:a7:cf:d4:22:ac:61:
                    e0:6a:e8:39:c5:9d:5f:ba:41:ff:8e:e3:e2:03:ba:
                    a1:38:d2:7e:f8:80:54:78:9a:4e:6e:e7:d7:a8:41:
                    05:40:f8:d4:f8:bf:e2:8c:8e:70:ae:13:ec:7a:57:
                    3d:35:84:8c:d8:ce:49:82:32:64:6a:94:70:8f:68:
                    52:db:1e:52:94:d7:9b:a9:7e:33:fd:f3:b3:47:66:
                    d3:3a:fc:05:3c:78:f4:90:f1:ab:66:38:67:40:f2:
                    6c:ec:2e:f7:fc:68:ad:ad:ec:3d:2b:01:42:c1:60:
                    b3:f3:08:eb:30:35:66:57:ac:28:98:8f:43:11:47:
                    ae:83:41:f0:79:d3:63:16:d8:17:a9:cd:07:54:5b:
                    a4:9b:3b:bc:71:dd:65:14:2f:98:40:7b:68:83:13:
                    cc:25:c1:f4:8e:19:ad:22:e0:22:76:b1:f0:08:97:
                    a5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F8:13:2E:E8:2C:9A:A1:CD:E9:92:4C:D0:A3:2F:69:A8:9B:AE:0E
            X509v3 Authority Key Identifier:
                keyid:E2:E7:AF:73:C0:7A:57:82:AF:24:83:4E:BD:DB:74:A9:C8:97:C4:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:32:4b:c6:d2:14:b2:2d:68:e2:9e:4c:04:54:d9:6e:ab:80:
         64:a2:e2:39:91:1b:78:22:61:43:74:c6:62:1d:42:6f:bb:f1:
         7b:1c:e4:d2:61:68:87:04:48:01:9b:b2:60:ab:96:3f:f0:86:
         fd:e7:37:88:52:b3:c1:35:e2:ce:c1:03:af:8b:dc:20:76:a9:
         91:1f:c6:19:c3:01:ef:dd:4e:f0:77:3e:68:c3:c2:51:4f:47:
         8d:7a:50:d6:ae:29:1d:1e:33:f0:7a:dc:af:d2:3c:05:95:d6:
         ed:a5:71:5c:98:04:a0:78:b0:db:4d:06:cf:18:8d:70:4c:0b:
         48:d6:e6:d4:ef:68:e0:35:28:54:87:7c:2c:ae:50:8e:cb:75:
         65:a8:b5:a3:e9:02:16:f2:1b:65:99:a4:64:60:0f:c2:d3:c7:
         e0:6f:f8:b6:18:19:7a:94:12:cc:76:ed:b3:75:95:a0:3b:06:
         82:ae:aa:0a:f0:ca:d0:72:6f:00:6b:4c:1a:13:9e:cc:08:ee:
         f1:6c:5e:ad:52:a2:16:c7:33:55:d7:d8:91:ae:45:0f:29:85:
         cf:0a:4a:c2:fd:db:62:c3:57:56:17:f5:50:34:ea:c1:85:e2:
         c4:ee:e6:d2:21:e8:2f:35:34:b7:fa:39:c5:bc:fe:e7:46:bc:
         c1:68:ae:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:13:52 2025 by rpki-client