Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.mft
File:                     EucEV-ve5ZSwcUQgRFRwbOqva_Y.mft (raw, json)
Hash identifier:          8mkRF2Kj44x2y9uQ9Hig+fUnWJU8VETKQ2eHEl2lMAw=
Subject key identifier:   21:51:98:45:8B:42:80:BC:04:61:45:56:59:2D:46:F1:12:13:09:E5
Authority key identifier: 12:E7:04:57:EB:DE:E5:94:B0:71:44:20:44:54:70:6C:EA:AF:6B:F6
Certificate issuer:       /CN=12e70457ebdee594b07144204454706ceaaf6bf6
Certificate serial:       0196545C55D01BE5E3E8C63C973C5D85A84B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EucEV-ve5ZSwcUQgRFRwbOqva_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.mft
Manifest number:          0609
Signing time:             Sun 20 Apr 2025 18:00:59 +0000
Manifest this update:     Sun 20 Apr 2025 18:00:59 +0000
Manifest next update:     Mon 21 Apr 2025 18:00:59 +0000
Files and hashes:         1: EucEV-ve5ZSwcUQgRFRwbOqva_Y.crl (hash: kQiyVp215rBrWvdEkqRvGNqLmdzM+5N2PhZ4H/4GpHE=)
                          2: qs7BbSv0fO0BPXU-Iz3031gKExA.roa (hash: doqNGmfmNSThnCzcC+uqauIEfH+4+SUm/6IU5DxkDTk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EucEV-ve5ZSwcUQgRFRwbOqva_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:5c:55:d0:1b:e5:e3:e8:c6:3c:97:3c:5d:85:a8:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12e70457ebdee594b07144204454706ceaaf6bf6
        Validity
            Not Before: Apr 20 18:00:59 2025 GMT
            Not After : Apr 21 18:00:59 2025 GMT
        Subject: CN=215198458b4280bc04614556592d46f1121309e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:2e:81:a4:4c:bc:17:3a:cf:c7:e2:04:9e:33:
                    25:5c:d9:b7:3c:97:72:91:98:31:5f:41:de:d9:40:
                    97:c2:5d:02:e4:22:a5:36:ca:41:d3:cc:87:67:ec:
                    4f:5b:65:9e:04:08:47:d8:ce:ea:f2:76:a2:9a:c3:
                    9d:b1:b4:e3:fd:79:fc:5c:fb:ce:3d:22:38:9f:1b:
                    7d:28:65:03:94:b5:e0:7e:6e:84:2c:96:23:ec:60:
                    68:8d:20:1a:e3:36:4a:93:60:29:f8:04:33:80:12:
                    4f:e4:7e:ad:12:f9:5f:1d:f8:7f:2a:c1:4a:79:af:
                    d7:f6:20:24:e8:2e:26:b3:da:e5:c4:15:e9:9f:61:
                    13:65:b8:e8:b8:8a:0d:2d:46:23:90:a1:a2:b1:72:
                    86:04:c8:e9:16:57:4d:4d:7c:c2:3d:92:09:d6:c2:
                    79:83:7f:f8:e2:e3:22:7c:e0:08:e8:33:39:91:c0:
                    6e:71:59:e1:a5:5c:87:e8:e5:2f:9c:38:c1:03:e4:
                    e3:9b:a8:12:dd:52:60:cd:c5:f9:d2:17:ea:e8:ca:
                    5b:61:ed:eb:42:88:8b:cb:5a:ca:ba:f2:75:bc:c0:
                    1b:5c:20:d2:d4:a5:32:08:c5:24:e1:74:89:a0:6d:
                    30:1a:31:3f:32:45:86:fe:23:b8:bf:ac:9c:cb:e7:
                    f9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:51:98:45:8B:42:80:BC:04:61:45:56:59:2D:46:F1:12:13:09:E5
            X509v3 Authority Key Identifier:
                keyid:12:E7:04:57:EB:DE:E5:94:B0:71:44:20:44:54:70:6C:EA:AF:6B:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EucEV-ve5ZSwcUQgRFRwbOqva_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:70:e0:b8:ea:b1:4a:fe:fb:93:87:10:28:4b:0d:f3:f7:8a:
         26:99:94:0b:67:10:d1:03:6d:99:da:c1:d2:28:65:4d:54:a7:
         b4:51:c8:7e:2b:15:f7:15:c9:4f:04:a1:93:4f:61:62:62:62:
         d0:6f:af:1a:f4:5f:37:69:64:fe:03:80:9b:ff:7b:e3:11:d7:
         e4:f5:11:5d:f8:74:88:93:97:2a:6a:cb:ae:28:33:4c:07:27:
         3f:b1:8d:79:9d:39:5c:70:ac:ee:83:66:05:ba:88:ff:2e:2f:
         16:76:d3:df:ad:1e:b9:70:59:cd:6a:fe:9b:dd:b0:37:33:40:
         41:ce:c9:ed:06:94:34:9b:14:6e:ab:e0:9a:e2:34:47:fb:33:
         3f:04:91:3b:51:3f:0f:6a:b1:7b:67:5d:56:2d:73:81:93:ae:
         59:d2:cd:57:e2:09:c1:26:f6:6d:76:2a:ff:18:65:46:73:66:
         ca:67:2e:47:ef:17:e5:0e:72:59:a1:3a:83:50:e4:0f:4d:60:
         87:5e:4e:8a:3c:13:c7:59:a7:0f:d3:f4:13:f8:c5:26:1b:66:
         a4:7e:e0:20:4b:8a:92:bc:89:3e:07:05:5a:40:9f:2d:5b:e8:
         fb:e0:dd:07:ad:21:de:f6:86:56:35:b2:58:a2:24:49:4f:71:
         f4:57:57:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:27:24 2025 by rpki-client