Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
File:                     EGwPOVQQ8obIV2V219L3gwS16Do.mft (raw, json)
Hash identifier:          QDOyiwLZB2q5U+uj9aVzPXsfpFCGFNEZ5FH8BXEY1O0=
Subject key identifier:   E1:87:50:35:A9:52:EF:FA:74:8F:C0:78:50:90:F9:E0:9C:4E:10:FE
Authority key identifier: 10:6C:0F:39:54:10:F2:86:C8:57:65:76:D7:D2:F7:83:04:B5:E8:3A
Certificate issuer:       /CN=106c0f395410f286c8576576d7d2f78304b5e83a
Certificate serial:       0197654CEC7037E9F5A020EEDC9CAAFBBE70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
Manifest number:          1589
Signing time:             Thu 12 Jun 2025 18:00:29 +0000
Manifest this update:     Thu 12 Jun 2025 18:00:29 +0000
Manifest next update:     Fri 13 Jun 2025 18:00:29 +0000
Files and hashes:         1: EGwPOVQQ8obIV2V219L3gwS16Do.crl (hash: fwKwA3uX6vd0djFVWNft6tDqFZ+vKdos+n0/5Fb8UBk=)
                          2: gD2HCH7UZnug2JFbN0h_SjReLJU.roa (hash: 46J5NZnwRfdk2xDFMSmrrq3sdpnGs3ijOq3oqLGBAkw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 15:17:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:4c:ec:70:37:e9:f5:a0:20:ee:dc:9c:aa:fb:be:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106c0f395410f286c8576576d7d2f78304b5e83a
        Validity
            Not Before: Jun 12 18:00:29 2025 GMT
            Not After : Jun 13 18:00:29 2025 GMT
        Subject: CN=e1875035a952effa748fc0785090f9e09c4e10fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:87:db:fe:06:27:08:ff:94:f6:dc:07:7b:db:
                    3d:d0:f9:b9:15:6d:2b:fe:61:2b:3b:0e:d3:6f:0d:
                    40:c7:f9:1f:b9:15:ec:c9:0c:83:e8:9a:e2:a4:ff:
                    c9:2b:93:d4:c7:1d:20:5d:c3:3d:b0:dd:10:7a:9a:
                    13:f9:f8:7e:2f:bb:d2:e5:cc:ee:dc:c3:ef:6d:82:
                    49:39:30:be:b4:e1:05:d4:43:cb:e3:4e:64:4f:90:
                    9b:73:e4:01:c0:ab:e8:08:2e:6d:81:f8:74:34:43:
                    aa:1a:74:c9:a1:ed:9b:ae:ea:3e:d8:dd:c2:bf:0f:
                    15:6d:15:b1:ce:d2:9c:cc:f3:f2:f1:c0:d7:3d:b2:
                    6f:fc:3f:80:45:94:fa:67:f0:29:f9:91:ff:ec:df:
                    9c:f5:7a:1e:5d:04:93:5e:dd:e3:26:88:84:2b:9f:
                    1f:b0:ff:27:4c:c5:bb:e1:dc:e1:0c:3e:63:df:9b:
                    02:fd:f4:35:c0:ab:ee:3b:9c:47:49:59:ff:a1:2b:
                    11:7a:5d:4d:a2:69:67:08:2e:d5:ac:54:0c:33:92:
                    59:93:3d:3b:33:3d:71:f4:7e:05:ef:e3:fe:bf:1a:
                    0a:e6:fe:d3:07:de:38:1f:d9:9c:45:31:2e:3f:c0:
                    21:bf:4c:b2:71:18:1c:99:70:cb:bf:01:8c:65:1d:
                    e5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:87:50:35:A9:52:EF:FA:74:8F:C0:78:50:90:F9:E0:9C:4E:10:FE
            X509v3 Authority Key Identifier:
                keyid:10:6C:0F:39:54:10:F2:86:C8:57:65:76:D7:D2:F7:83:04:B5:E8:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:c1:0f:c0:28:f7:df:db:13:9d:bd:2e:9b:78:fe:f1:59:13:
         e6:2e:0a:c8:f3:02:41:17:c6:f3:ea:e8:32:9c:60:0e:f0:a8:
         5f:e3:6f:cb:01:00:22:a6:f2:98:d3:af:74:48:6b:37:5f:ee:
         13:91:fe:61:d8:fb:94:ec:c6:ba:db:14:d3:75:44:2b:7f:1a:
         41:7c:91:15:9d:10:4a:66:b7:9f:93:90:a6:73:3b:7d:f2:10:
         0a:e0:a8:fa:6c:35:d3:90:ab:1e:16:0d:70:15:05:75:1f:a8:
         43:59:1c:11:4f:80:22:9b:ef:bb:0c:4e:79:d8:b0:ba:33:28:
         f9:fd:0e:27:b6:56:f8:57:bc:29:ef:fc:be:38:2c:e3:d5:24:
         da:02:c0:c4:b7:52:09:8a:6d:4c:e5:ba:37:5a:62:61:87:de:
         f1:56:b8:67:53:f1:18:a4:37:17:a1:fc:d2:38:d6:aa:0f:15:
         33:3c:99:8b:9b:51:68:56:4f:99:40:82:b7:34:3a:6d:b9:9c:
         a9:38:4a:8d:f1:31:23:bd:ce:76:04:5b:8f:21:fb:00:48:20:
         67:0d:29:ae:93:64:9c:8a:e4:03:b1:d5:5a:72:f7:8c:e9:f8:
         43:f3:f6:3a:9b:ae:b8:db:4a:7b:5d:b4:35:50:aa:a0:27:e7:
         e6:11:78:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 00:56:46 2025 by rpki-client