Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.mft
File:                     eouukjMFpxxSam_PV8KdbBakJp4.mft (raw, json)
Hash identifier:          EP9YDrGu/OdHUXXW+VG4C5UlXdFogJgjUZ2nQprdDhY=
Subject key identifier:   64:A2:45:75:48:A7:87:FB:06:D6:EE:A1:F9:0C:0E:8C:0A:43:D1:99
Authority key identifier: 7A:8B:AE:92:33:05:A7:1C:52:6A:6F:CF:57:C2:9D:6C:16:A4:26:9E
Certificate issuer:       /CN=7a8bae923305a71c526a6fcf57c29d6c16a4269e
Certificate serial:       01964E233A085B8B795FCBC9FB1FDB9699F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.mft
Manifest number:          04A5
Signing time:             Sat 19 Apr 2025 13:00:53 +0000
Manifest this update:     Sat 19 Apr 2025 13:00:53 +0000
Manifest next update:     Sun 20 Apr 2025 13:00:53 +0000
Files and hashes:         1: 54SI4AU08cWeiBESR3sCSHx0TbY.roa (hash: ogC6E7nBlCKY8Q7uANOLw5dJbxOpZ0GvO/Ezuu8OGxE=)
                          2: KWunod-zk9nUyGQLaX0WWlDz8Hk.roa (hash: jg5cFNw/BR34Fq2GfC2OIJItcaZUD8MAY2g0M7t7mYg=)
                          3: eouukjMFpxxSam_PV8KdbBakJp4.crl (hash: 9a1Zxbm3TrRLhxXTRBJkp8cS6B2IU7Tu/YzzPilavmA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:23:3a:08:5b:8b:79:5f:cb:c9:fb:1f:db:96:99:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a8bae923305a71c526a6fcf57c29d6c16a4269e
        Validity
            Not Before: Apr 19 13:00:53 2025 GMT
            Not After : Apr 20 13:00:53 2025 GMT
        Subject: CN=64a2457548a787fb06d6eea1f90c0e8c0a43d199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b2:ba:e1:13:49:7a:1c:c6:44:4f:33:d5:33:
                    4c:94:f7:5d:87:b1:67:d5:e9:c9:85:9e:1d:61:06:
                    2e:9b:26:50:e8:a0:11:e7:f3:61:5f:88:0a:fa:44:
                    91:0b:c2:56:97:e3:0b:19:a0:e9:f7:0f:40:45:0d:
                    85:da:ac:1c:81:be:a6:ad:8f:1a:4a:8a:fa:90:ce:
                    d8:bf:cd:33:bd:fd:3e:ee:1d:e9:77:ef:1f:14:6d:
                    82:ef:d3:5e:03:a6:d8:9b:f1:98:0d:30:6e:d7:b3:
                    4e:87:b3:41:ad:9a:2c:42:c1:ab:41:b1:b4:16:b0:
                    ad:24:ae:61:28:05:2e:28:52:fb:15:b8:7a:fc:b9:
                    fe:26:47:fe:4b:57:e8:d8:3f:01:42:6d:1d:35:6b:
                    f7:8c:86:60:47:19:1e:5a:5f:a2:bd:80:03:d8:2b:
                    2e:79:f9:27:d0:32:46:2b:d0:a2:a8:43:08:7d:8b:
                    3f:ec:76:dc:4b:ad:45:7b:eb:b1:a4:f4:09:cd:53:
                    36:73:59:f5:cf:18:74:26:70:af:bb:59:6d:a1:74:
                    5e:9e:e3:36:85:5f:8e:eb:b8:52:9a:7e:be:eb:eb:
                    d8:eb:d1:b1:8b:bf:04:74:fa:de:2e:8d:a9:65:47:
                    27:35:10:bc:78:14:4b:4b:83:1e:c6:00:98:6c:14:
                    08:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A2:45:75:48:A7:87:FB:06:D6:EE:A1:F9:0C:0E:8C:0A:43:D1:99
            X509v3 Authority Key Identifier:
                keyid:7A:8B:AE:92:33:05:A7:1C:52:6A:6F:CF:57:C2:9D:6C:16:A4:26:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:ac:9a:77:3c:a3:0c:25:94:a2:6d:c3:f9:8e:3c:90:1e:1c:
         8d:6a:9d:e3:6c:6d:cf:d8:28:84:a9:ce:a0:ab:56:30:78:ca:
         58:45:75:a7:c8:26:85:09:7d:b7:52:79:48:84:de:6f:58:de:
         b8:05:75:19:c3:59:bd:4f:12:e5:a3:9f:98:bd:60:76:33:66:
         42:9b:29:01:ba:30:0d:db:86:35:92:36:16:50:f3:23:ad:ea:
         2e:5c:09:56:f4:f8:87:56:c7:84:36:89:3a:82:8d:1c:32:9b:
         b9:7c:ce:2e:6e:21:7e:87:d7:8e:2b:a5:66:7d:66:06:8c:d0:
         b6:1e:b2:0b:88:0a:c2:81:a2:2b:e8:0a:eb:09:d4:67:ca:71:
         95:33:9b:7d:bf:f5:d6:3d:a7:f3:45:8b:92:1f:cf:a4:65:aa:
         8d:90:91:e0:2e:be:d7:60:d7:79:28:75:d0:73:2a:fe:bc:ee:
         17:63:5b:23:59:80:91:29:af:32:6f:86:09:03:f5:f0:f8:71:
         6f:6a:40:5c:0b:0d:48:ed:a6:f6:c7:2a:bb:31:1b:eb:bf:cc:
         bc:54:57:e0:26:50:a2:f8:d0:05:40:10:73:69:42:f1:81:3c:
         8f:48:2d:93:af:2a:d6:77:00:bd:54:b5:7c:23:18:e5:df:95:
         1b:57:b6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:02:30 2025 by rpki-client