Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft
File:                     eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft (raw, json)
Hash identifier:          9HnxxhzZQ9Qerd9bQhNJ82dLtaq2rS48C9RG72ZWxOk=
Subject key identifier:   27:4D:A8:05:56:33:48:A9:24:2C:8C:A2:2A:A9:6F:45:A9:58:02:41
Authority key identifier: 79:4F:6B:59:B4:39:D1:76:99:32:05:9D:19:84:28:CB:80:6A:E7:53
Certificate issuer:       /CN=794f6b59b439d1769932059d198428cb806ae753
Certificate serial:       01975045FE33DA56A52AFD1752A194B8A1D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eU9rWbQ50XaZMgWdGYQoy4Bq51M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft
Manifest number:          1402
Signing time:             Sun 08 Jun 2025 16:00:53 +0000
Manifest this update:     Sun 08 Jun 2025 16:00:53 +0000
Manifest next update:     Mon 09 Jun 2025 16:00:53 +0000
Files and hashes:         1: eU9rWbQ50XaZMgWdGYQoy4Bq51M.crl (hash: sFi/vOx5ye2CrD/hsZzFOZXUob8Ywj/YXJqqXO6q0xA=)
                          2: rUKzkCWeUZuHZF9RTid_Ltn3NgM.roa (hash: M8dZkYCwYNG6gph8xMmvBysHbD2sO8kxwfhDf7bdOCA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eU9rWbQ50XaZMgWdGYQoy4Bq51M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:45:fe:33:da:56:a5:2a:fd:17:52:a1:94:b8:a1:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=794f6b59b439d1769932059d198428cb806ae753
        Validity
            Not Before: Jun  8 16:00:53 2025 GMT
            Not After : Jun  9 16:00:53 2025 GMT
        Subject: CN=274da805563348a9242c8ca22aa96f45a9580241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9f:ad:f1:33:bc:9b:2f:8d:93:ed:4b:f1:b9:
                    fb:82:92:f9:c1:92:89:d3:b8:04:f4:37:c2:a4:cc:
                    63:24:67:f5:87:a8:7c:f6:55:34:97:1e:c0:25:2e:
                    72:fb:b2:22:2e:6a:d7:2f:86:b3:cc:74:9b:0d:c2:
                    65:61:0d:42:7b:6e:15:97:80:9b:a1:8f:23:54:b8:
                    2d:00:11:90:a7:20:08:ef:e6:d7:2f:bf:45:db:4e:
                    1f:b0:5d:f3:b8:83:df:16:99:42:51:19:2b:9a:8b:
                    98:87:56:73:27:bc:a8:ae:da:58:ea:e4:8c:48:ab:
                    4f:44:af:8a:da:52:88:bb:26:7a:d1:d3:70:bb:18:
                    76:08:04:76:e7:72:4e:9f:49:b9:64:44:7c:dd:c1:
                    c0:b0:43:a3:58:e6:bf:60:d1:80:7e:fa:2f:f1:02:
                    75:79:96:4c:c2:e7:b5:ed:ff:83:1d:fe:40:f5:0e:
                    c6:02:33:52:5c:06:cd:7b:98:7a:2c:23:2b:60:51:
                    a1:28:f8:c7:f7:11:83:7a:51:09:18:2e:0c:f8:13:
                    f1:0e:96:2d:83:a0:50:60:58:b3:fc:ad:b4:36:78:
                    d8:ef:fd:59:08:48:c8:74:b0:b2:d8:2d:87:c1:3b:
                    4b:64:bc:10:17:d6:d1:6c:3f:22:85:d8:5b:75:b5:
                    60:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4D:A8:05:56:33:48:A9:24:2C:8C:A2:2A:A9:6F:45:A9:58:02:41
            X509v3 Authority Key Identifier:
                keyid:79:4F:6B:59:B4:39:D1:76:99:32:05:9D:19:84:28:CB:80:6A:E7:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU9rWbQ50XaZMgWdGYQoy4Bq51M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:03:1e:ca:78:26:34:62:43:7f:b8:c9:88:26:bd:40:e9:f7:
         d3:55:8f:33:42:f7:8a:36:8e:71:bb:cc:c1:95:a1:25:f2:5b:
         3d:19:3c:e8:7b:c2:de:1b:59:1a:e1:60:1f:59:77:35:85:cc:
         2c:f5:7b:31:95:86:36:ae:52:06:69:5e:eb:c1:2e:ae:ad:c5:
         64:98:ce:cb:e2:75:14:44:f5:a1:b7:f8:d3:e0:96:d5:c0:56:
         24:6b:2d:eb:48:b8:70:fa:f6:eb:4e:63:ff:1a:13:e0:70:6b:
         8d:20:92:e5:4f:fd:ce:b6:fd:32:c7:6c:a7:59:6d:3a:e9:36:
         61:73:d6:44:b0:6b:57:ef:d7:c8:b2:c8:c5:6d:71:ec:aa:92:
         11:8a:4b:50:24:87:9e:46:d0:5b:e2:40:87:58:fe:6a:c4:48:
         4b:a7:a8:2c:b5:84:fa:12:5e:59:c2:4a:3c:4e:5c:6a:c1:18:
         24:b4:7e:d1:9c:dd:dd:4e:e8:af:84:83:e9:26:3f:3e:15:1b:
         ca:05:9c:9c:91:db:43:7c:41:73:c1:c9:07:7b:b1:bf:1b:84:
         08:83:8b:a1:14:db:43:d3:6b:7c:44:23:a2:ff:70:fa:00:5d:
         44:bf:60:71:94:18:02:87:9a:8c:d8:f4:ce:7e:5a:52:7d:3c:
         84:7a:f0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:50:09 2025 by rpki-client