Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.mft
File:                     4GMUdXVI8HToT68_y7e4LYLe8-U.mft (raw, json)
Hash identifier:          lSK7mc4IRmNkeepur+e5JPCD3dH2elhHiF6pHcEyOZQ=
Subject key identifier:   B3:5A:BE:4D:67:68:DC:A5:95:DD:B7:6B:A4:B0:C5:09:AF:02:BD:99
Authority key identifier: E0:63:14:75:75:48:F0:74:E8:4F:AF:3F:CB:B7:B8:2D:82:DE:F3:E5
Certificate issuer:       /CN=e06314757548f074e84faf3fcbb7b82d82def3e5
Certificate serial:       01976C9904B808A56A210537F7E4749FF427
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4GMUdXVI8HToT68_y7e4LYLe8-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.mft
Manifest number:          1593
Signing time:             Sat 14 Jun 2025 04:00:56 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:56 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:56 +0000
Files and hashes:         1: 4GMUdXVI8HToT68_y7e4LYLe8-U.crl (hash: l1Vpn56Xpefdex0Dwo3sc/5RN1Ms3qq5I0WjCfhnLos=)
                          2: _uc6ePERzBPoPdpauMr-UXjyyZU.roa (hash: vCpgESgcY5qI/pPtl3hBvs20Co9NLRffYPoazf5J82E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4GMUdXVI8HToT68_y7e4LYLe8-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:99:04:b8:08:a5:6a:21:05:37:f7:e4:74:9f:f4:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e06314757548f074e84faf3fcbb7b82d82def3e5
        Validity
            Not Before: Jun 14 04:00:56 2025 GMT
            Not After : Jun 15 04:00:56 2025 GMT
        Subject: CN=b35abe4d6768dca595ddb76ba4b0c509af02bd99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f6:92:2e:08:76:ff:da:d0:3d:ff:f3:99:25:
                    39:a6:3d:84:7d:b2:16:7b:2f:fd:5c:6a:b2:25:e1:
                    47:6a:59:12:fb:f0:b0:a9:50:ac:4b:d7:a4:7a:4d:
                    87:b7:d7:bb:45:2c:27:db:d0:2e:f2:a3:f7:e0:d1:
                    d7:0a:eb:33:30:b2:a9:d8:8b:3f:31:fc:87:6a:ba:
                    5a:bb:78:ef:c0:ef:a0:6a:2b:e3:32:66:04:7e:c2:
                    4e:75:fa:c4:6a:a0:36:46:d7:a0:b5:1c:67:f7:13:
                    22:35:6c:09:1e:7c:21:02:9b:d0:1c:b7:b4:3a:04:
                    f0:eb:83:20:e2:3e:66:f2:47:33:9e:1f:72:ec:58:
                    18:fc:b5:3a:ab:9f:ae:af:45:74:26:b5:33:45:83:
                    99:8a:f7:fc:87:82:ae:1d:a9:bc:86:fd:e8:70:fa:
                    21:6d:fd:09:7e:f4:be:92:b3:83:34:d8:7c:44:e0:
                    19:62:81:1c:cf:8e:f0:92:6d:62:10:b6:09:77:cd:
                    3c:61:48:c3:9f:0a:fa:8e:1c:aa:8d:31:45:75:fa:
                    db:6c:ac:61:28:32:8a:3a:c7:cc:36:a6:d7:25:91:
                    7a:0d:0c:6f:af:05:fa:bb:2d:7a:8d:01:fd:c1:5b:
                    56:46:d3:46:a4:e6:f7:24:ff:3f:95:69:08:b4:44:
                    37:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5A:BE:4D:67:68:DC:A5:95:DD:B7:6B:A4:B0:C5:09:AF:02:BD:99
            X509v3 Authority Key Identifier:
                keyid:E0:63:14:75:75:48:F0:74:E8:4F:AF:3F:CB:B7:B8:2D:82:DE:F3:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GMUdXVI8HToT68_y7e4LYLe8-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:d8:16:d9:73:fd:ca:b2:64:71:4a:a9:cf:b0:a3:bf:ff:58:
         4a:cd:98:92:ca:80:7a:23:82:f4:95:7c:cf:d9:31:a3:1d:80:
         05:a0:52:cd:ed:93:68:5a:9f:87:9a:14:f9:b4:81:c2:23:23:
         53:5d:92:d5:6c:34:54:73:5a:8a:48:9c:a9:66:6a:ab:87:4e:
         37:31:7e:de:c7:90:81:48:51:f6:77:cf:8e:1c:35:bb:ff:ee:
         dd:0d:a8:af:e9:a2:b0:d3:25:ce:b9:10:c1:cd:36:e7:6d:f3:
         0b:16:c7:af:61:02:c6:99:e8:d3:2c:fa:49:9f:7c:b3:18:c3:
         c4:ce:eb:27:31:ab:9d:cd:b3:f2:89:ea:1c:4c:db:c1:e1:15:
         9b:61:bc:44:d7:23:0e:0c:03:a1:18:a4:e4:cc:50:68:2d:23:
         a2:8b:dc:86:30:47:43:a4:a2:38:e0:ca:3d:f3:f6:fb:f5:f2:
         bc:0e:eb:c9:ea:f7:60:7a:92:3f:b8:c0:1b:f0:3b:9e:92:72:
         39:22:52:96:9f:24:65:78:21:ab:07:d3:53:56:20:13:97:f4:
         fa:58:b8:bf:4f:57:00:0c:91:94:28:70:46:e7:91:f9:b4:54:
         0d:f9:88:06:b2:c5:4e:6c:29:02:d6:d6:a8:75:8f:31:a7:cc:
         67:cf:7f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:28:44 2025 by rpki-client