Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
File:                     4Gkduvo6jeBwsHAi3prfdDQftPI.mft (raw, json)
Hash identifier:          yeukZwITNhbFLQNVkDlwmcdVDc2q4eV50xdpVFMUdOs=
Subject key identifier:   41:E8:0C:8A:D0:C2:C8:FD:56:22:74:63:B3:93:99:6C:7F:94:40:D6
Authority key identifier: E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
Certificate issuer:       /CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Certificate serial:       01976C989EF97228B1D4F77DFF99FB8C9F78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
Manifest number:          0E4F
Signing time:             Sat 14 Jun 2025 04:00:30 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:30 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:30 +0000
Files and hashes:         1: 4Gkduvo6jeBwsHAi3prfdDQftPI.crl (hash: 7a9zGUCJqguomcRyffmf8CLA6coYFQ6Hlxi0kX4OEfM=)
                          2: ZcIsus6k0U4n68vd2BlSmmX0JTQ.roa (hash: GGkzJjiRy+xG+nAGWUrXuzxUvFxqlSxJYvMRGhTfLjg=)
                          3: fO5bykwkTB3KiAZuWcyGEBGhJE8.roa (hash: 3HfGLaMktk6F2ghb5LrLG+rGBzaC5K9KjLNpttW6IrQ=)
                          4: wFM8K8dCgcjVIF6EWdiQdlQNXyY.roa (hash: lm9Zbfc6llKnFMQrYcsYug5Fz4BrAVnfVm1lHsp7Cfo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:9e:f9:72:28:b1:d4:f7:7d:ff:99:fb:8c:9f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
        Validity
            Not Before: Jun 14 04:00:30 2025 GMT
            Not After : Jun 15 04:00:30 2025 GMT
        Subject: CN=41e80c8ad0c2c8fd56227463b393996c7f9440d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:83:7f:71:0b:fd:fc:28:91:f1:01:71:5e:6e:
                    07:ee:7c:de:44:d5:1f:9b:63:12:cd:92:92:c5:e8:
                    36:5c:e6:e7:00:79:1b:66:4f:41:c3:9f:39:e4:5b:
                    09:4e:d5:15:cd:9b:23:1f:08:04:dd:73:cb:93:76:
                    8a:99:60:8c:3b:2f:a4:61:b0:4a:a6:56:75:8d:73:
                    f4:15:ac:ae:88:f0:5b:18:c8:28:83:19:70:19:0e:
                    5d:b6:00:c7:40:b7:01:3e:db:03:d7:52:75:7b:49:
                    2a:75:f2:2e:f0:f3:9c:cb:d6:9d:72:3e:66:a7:5c:
                    90:03:5c:cf:dc:d9:1f:f1:db:12:24:f9:aa:02:4e:
                    59:8f:55:ab:3a:4c:c9:ca:17:c2:36:9f:33:64:fc:
                    a9:2c:0a:bb:63:45:6e:5d:f2:76:ee:38:be:e7:fb:
                    2d:3b:b0:1b:a5:42:f5:1c:6a:c5:7f:33:37:83:d4:
                    b8:42:8c:f7:3e:6a:5a:2f:3f:ef:c1:13:bd:b3:02:
                    36:4e:b5:e3:1c:ee:10:f5:4a:82:b3:11:94:3d:c3:
                    25:d8:fa:38:bd:9d:be:7d:a3:14:74:86:d4:cb:1e:
                    13:c8:67:89:c7:64:23:ad:0c:0e:ea:04:bb:4f:94:
                    5d:15:3f:d4:2b:2d:bd:b4:ac:fc:72:f5:c4:20:3f:
                    16:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E8:0C:8A:D0:C2:C8:FD:56:22:74:63:B3:93:99:6C:7F:94:40:D6
            X509v3 Authority Key Identifier:
                keyid:E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:cb:42:7d:a7:70:30:57:c0:d9:bb:92:21:23:dd:9d:c3:1c:
         26:f3:87:70:b5:77:9d:2a:e4:0b:04:78:29:af:e1:07:3c:79:
         09:a3:cc:b4:78:d6:97:18:f8:23:2d:e1:3e:3b:c1:db:20:73:
         60:d0:48:90:25:66:e1:b7:0c:a1:3b:b1:47:32:c3:64:56:7c:
         b3:8b:fc:80:e1:08:50:20:de:c5:94:af:8a:d8:b9:af:cb:92:
         f5:26:92:a7:11:43:6a:aa:d8:f5:13:e1:d5:97:59:f4:6e:d0:
         a7:74:50:8d:5b:36:d9:64:09:73:cf:06:74:17:07:81:40:f5:
         fa:a8:08:26:48:23:b1:9b:b0:d5:6c:93:a5:a8:e8:8b:af:1c:
         b8:20:40:ad:66:f8:ee:94:9f:f5:85:54:81:fc:d8:d8:66:bc:
         2e:1d:30:5f:a8:f8:b3:a2:67:40:02:22:38:1e:9a:d5:cf:50:
         b0:cb:a2:e9:31:b2:a5:4c:6a:43:4a:eb:a4:d0:1c:2f:7a:60:
         fe:48:13:a8:64:bd:93:35:b1:0b:8c:8a:83:1e:7a:db:cb:d1:
         59:8f:72:02:2c:7f:9c:f8:45:b9:25:90:6f:5d:f4:73:d2:35:
         ba:cc:5f:8d:83:5b:ec:6a:03:8e:6a:c4:23:94:b9:f3:5c:13:
         67:80:dd:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmJ75ciix1Pd9/5n7jJ94MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNjkxZGJhZmEzYThkZTA3MGIwNzAyMmRlOWFkZjc0MzQx
ZmI0ZjIwHhcNMjUwNjE0MDQwMDMwWhcNMjUwNjE1MDQwMDMwWjAzMTEwLwYDVQQD
Eyg0MWU4MGM4YWQwYzJjOGZkNTYyMjc0NjNiMzkzOTk2YzdmOTQ0MGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoN/cQv9/CiR8QFxXm4H7nzeRNUf
m2MSzZKSxeg2XObnAHkbZk9Bw5855FsJTtUVzZsjHwgE3XPLk3aKmWCMOy+kYbBK
plZ1jXP0FayuiPBbGMgogxlwGQ5dtgDHQLcBPtsD11J1e0kqdfIu8POcy9adcj5m
p1yQA1zP3Nkf8dsSJPmqAk5Zj1WrOkzJyhfCNp8zZPypLAq7Y0VuXfJ27ji+5/st
O7AbpUL1HGrFfzM3g9S4Qoz3PmpaLz/vwRO9swI2TrXjHO4Q9UqCsxGUPcMl2Po4
vZ2+faMUdIbUyx4TyGeJx2QjrQwO6gS7T5RdFT/UKy29tKz8cvXEID8WiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHoDIrQwsj9ViJ0Y7OTmWx/lEDWMB8GA1UdIwQY
MBaAFOBpHbr6Oo3gcLBwIt6a33Q0H7TyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEdrZHV2bzZqZUJ3c0hBaTNwcmZkRFFmdFBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9mNzVjN2QtZTViMy00NDJmLWEwODQt
ZmQ0OWViM2YxOWIxLzEvNEdrZHV2bzZqZUJ3c0hBaTNwcmZkRFFmdFBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9mNzVjN2QtZTViMy00NDJmLWEwODQtZmQ0OWViM2YxOWIx
LzEvNEdrZHV2bzZqZUJ3c0hBaTNwcmZkRFFmdFBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmstCfadw
MFfA2buSISPdncMcJvOHcLV3nSrkCwR4Ka/hBzx5CaPMtHjWlxj4Iy3hPjvB2yBz
YNBIkCVm4bcMoTuxRzLDZFZ8s4v8gOEIUCDexZSviti5r8uS9SaSpxFDaqrY9RPh
1ZdZ9G7Qp3RQjVs22WQJc88GdBcHgUD1+qgIJkgjsZuw1WyTpajoi68cuCBArWb4
7pSf9YVUgfzY2Ga8Lh0wX6j4s6JnQAIiOB6a1c9QsMui6TGypUxqQ0rrpNAcL3pg
/kgTqGS9kzWxC4yKgx5628vRWY9yAix/nPhFuSWQb130c9I1usxfjYNb7GoDjmrE
I5S581wTZ4Dd/g==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:05:48 2025 by rpki-client