Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.mft
File:                     EucEV-ve5ZSwcUQgRFRwbOqva_Y.mft (raw, json)
Hash identifier:          /wcES0UtzEdMmXeInnh1n2pknR3LOZ+vFhAuZsZ+cdg=
Subject key identifier:   F7:35:15:01:46:16:F6:23:DD:D1:D6:D1:81:13:86:9B:02:86:57:60
Authority key identifier: 12:E7:04:57:EB:DE:E5:94:B0:71:44:20:44:54:70:6C:EA:AF:6B:F6
Certificate issuer:       /CN=12e70457ebdee594b07144204454706ceaaf6bf6
Certificate serial:       01974B8D63308234AB04E3F3CBB4691282A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EucEV-ve5ZSwcUQgRFRwbOqva_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.mft
Manifest number:          0689
Signing time:             Sat 07 Jun 2025 18:00:46 +0000
Manifest this update:     Sat 07 Jun 2025 18:00:46 +0000
Manifest next update:     Sun 08 Jun 2025 18:00:46 +0000
Files and hashes:         1: EucEV-ve5ZSwcUQgRFRwbOqva_Y.crl (hash: 2iLKLrX19Nu9kErTHy6hjp3tsDe/o9r76ZaajnHozXw=)
                          2: qs7BbSv0fO0BPXU-Iz3031gKExA.roa (hash: doqNGmfmNSThnCzcC+uqauIEfH+4+SUm/6IU5DxkDTk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EucEV-ve5ZSwcUQgRFRwbOqva_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:8d:63:30:82:34:ab:04:e3:f3:cb:b4:69:12:82:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12e70457ebdee594b07144204454706ceaaf6bf6
        Validity
            Not Before: Jun  7 18:00:46 2025 GMT
            Not After : Jun  8 18:00:46 2025 GMT
        Subject: CN=f73515014616f623ddd1d6d18113869b02865760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:93:ee:c5:82:00:34:2b:c0:1e:d6:87:b8:89:
                    18:42:5a:67:2d:5b:8d:6d:74:43:8b:34:fa:99:65:
                    52:2a:e0:31:9e:cb:a9:0d:78:c4:af:b2:50:ef:d7:
                    84:55:b6:d0:71:6f:90:9a:bb:f2:f2:2e:72:32:45:
                    5f:b1:9d:09:f4:b0:b0:ee:a0:91:e6:93:27:44:c0:
                    18:92:af:d0:76:fc:13:70:4e:ea:b9:18:a3:83:f7:
                    f7:3a:05:b0:c4:df:da:be:4f:d6:6b:2b:0f:7a:9c:
                    87:f0:47:23:bd:9a:a1:29:b1:eb:45:0b:0c:be:01:
                    cd:ed:ef:c2:d8:d0:09:6e:4a:d4:54:2a:87:d1:01:
                    1b:b3:89:8d:79:c0:33:f3:0a:47:8e:dd:c1:e6:69:
                    65:6e:3f:48:5c:dc:da:9e:b9:17:a1:51:d3:3d:66:
                    ef:1c:9f:89:f1:a7:da:9e:3b:1a:f4:1b:66:fe:cc:
                    f3:f9:73:e6:94:5f:65:37:5e:6d:f2:c9:91:70:6d:
                    c5:42:10:c4:87:61:17:9e:70:51:49:d6:8e:4f:0c:
                    d5:54:c2:b3:f9:20:10:b3:05:48:11:6f:93:dd:62:
                    95:13:a4:d1:d9:cf:1f:80:1a:77:cc:ca:b2:d8:c3:
                    f3:7b:a7:08:9e:84:7a:9f:94:15:4a:9f:f1:e3:3a:
                    c6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:35:15:01:46:16:F6:23:DD:D1:D6:D1:81:13:86:9B:02:86:57:60
            X509v3 Authority Key Identifier:
                keyid:12:E7:04:57:EB:DE:E5:94:B0:71:44:20:44:54:70:6C:EA:AF:6B:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EucEV-ve5ZSwcUQgRFRwbOqva_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:9c:ea:e9:ec:86:55:fa:5c:90:67:1d:db:b7:01:ea:cf:08:
         01:65:45:86:3c:90:6a:5d:9d:6a:3d:8e:34:76:01:19:d0:31:
         28:9c:91:e2:ce:7f:54:ac:fe:5d:d3:60:f9:8e:bf:91:58:70:
         18:77:d0:73:03:fb:94:49:a3:e9:ec:21:7e:d0:c0:b5:36:b7:
         59:de:fd:29:a3:b5:ab:29:c8:53:60:79:7c:6f:99:bb:9d:82:
         d1:b0:3b:c0:f6:eb:f9:d3:42:28:a0:a4:83:48:8a:a1:7d:44:
         0f:92:ea:39:49:9e:19:e3:84:bd:c9:84:cc:4d:62:89:07:10:
         2f:a1:45:6b:85:94:b7:be:f4:5e:32:ec:17:a2:c8:ce:2c:69:
         28:fe:6a:b4:68:e7:e3:6b:7f:49:7a:68:bb:72:48:9d:ed:19:
         78:ba:23:0b:22:95:b1:09:5c:6b:74:db:d2:e2:6e:d7:d2:d8:
         3f:6b:56:39:e6:b0:3c:9b:2f:b7:e5:d2:b9:96:e7:2b:f0:ec:
         fc:3d:24:52:f9:3f:50:b5:2f:f4:0c:68:d2:02:d1:a8:58:1a:
         ff:7b:b7:78:b1:32:65:70:68:86:51:14:cd:91:b8:1a:8a:fa:
         6e:2a:ee:ba:47:0d:69:aa:b1:b1:6c:81:e9:9b:43:d4:5c:36:
         2f:92:73:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:01:03 2025 by rpki-client