Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
File:                     ekeMWqImonjosZBvNxxgz8fYfo4.mft (raw, json)
Hash identifier:          nRIzBF58jWOtO1j1r1V18Rx+ysggyGfiFsSGwJhpOL8=
Subject key identifier:   B5:B4:79:FC:69:F6:CE:7F:6C:9E:EA:37:77:D8:E7:04:CE:A0:95:6C
Authority key identifier: 7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
Certificate issuer:       /CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Certificate serial:       01974365D0BE0BB46924F8999B0F80A1DC3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
Manifest number:          1188
Signing time:             Fri 06 Jun 2025 04:00:35 +0000
Manifest this update:     Fri 06 Jun 2025 04:00:35 +0000
Manifest next update:     Sat 07 Jun 2025 04:00:35 +0000
Files and hashes:         1: Te1smkaZFoPIXpDeDnkA_3SYuF4.roa (hash: fsg7fcR1+A1zfqsZoPgI6UandEUlSTg2/PWpSOpOTeg=)
                          2: ekeMWqImonjosZBvNxxgz8fYfo4.crl (hash: mPoetIHyzmd+KCNvuCqrOaUKKuBrn10wv6V5bUMxw7g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 04:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:43:65:d0:be:0b:b4:69:24:f8:99:9b:0f:80:a1:dc:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
        Validity
            Not Before: Jun  6 04:00:35 2025 GMT
            Not After : Jun  7 04:00:35 2025 GMT
        Subject: CN=b5b479fc69f6ce7f6c9eea3777d8e704cea0956c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:da:76:65:c5:07:d8:5a:ba:a6:0c:1c:9a:3c:
                    77:f9:42:3f:ac:13:5d:07:06:56:bb:72:4c:c9:d3:
                    09:10:38:a0:66:f3:fa:ee:34:e5:f5:df:09:9d:d6:
                    06:e4:f6:ba:57:f0:df:bf:9b:1b:c3:a4:db:fa:f6:
                    18:b0:7f:82:04:a0:41:a5:6b:12:96:15:fd:c9:a3:
                    5a:ee:4c:82:64:f1:e6:f7:32:a4:5b:35:37:32:79:
                    df:f1:5b:4d:21:66:e2:0c:ed:42:44:3a:25:b5:2e:
                    6b:51:4e:07:39:fb:fd:4d:f2:54:dc:3d:3f:18:e0:
                    65:7f:d4:52:74:c3:09:4b:ad:df:70:9b:db:37:f1:
                    80:b3:2a:2e:9a:c6:00:cb:8c:f2:4f:b4:6b:04:48:
                    3b:d0:fc:cd:f0:e2:c8:dd:21:45:45:4b:3c:d6:04:
                    98:2d:e0:f4:74:c4:29:45:7e:78:39:c3:d1:86:f5:
                    bc:11:41:24:5c:9c:c2:50:9d:5f:5e:0f:1e:fb:1b:
                    08:c7:5a:a6:a5:6c:aa:4d:bf:82:04:59:56:14:61:
                    d5:8a:1e:a3:de:95:bd:cb:47:be:c2:50:1d:a3:20:
                    c8:1d:7f:6b:97:45:a2:c2:3b:25:e4:a9:28:f4:5f:
                    80:63:f9:bb:93:45:47:5e:7d:b7:c3:d4:ba:d7:a3:
                    d0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B4:79:FC:69:F6:CE:7F:6C:9E:EA:37:77:D8:E7:04:CE:A0:95:6C
            X509v3 Authority Key Identifier:
                keyid:7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:da:88:32:32:ff:d9:79:a4:60:f4:ee:8d:e2:e2:1b:09:03:
         d7:16:48:3d:be:04:0e:44:6e:90:be:77:a4:8b:73:2e:f8:e6:
         bb:3b:0a:46:03:84:79:b9:ad:71:5b:cb:8c:f6:85:9a:96:ea:
         df:0c:03:f9:20:c4:95:6d:ac:ec:eb:4b:74:1d:9d:d0:ad:ed:
         57:66:69:2f:a0:c3:f4:5b:a4:16:f3:02:9d:1e:e8:ee:44:5c:
         ce:c7:dd:01:fd:bc:fc:4d:fd:8b:e3:5f:cf:9e:d3:ad:49:6b:
         8e:00:8a:0a:9b:7c:59:00:77:eb:bc:d4:35:8f:25:9b:38:44:
         83:3f:47:d9:f8:8f:4c:84:0c:90:11:2d:73:ec:37:51:ab:ac:
         98:ba:c1:6f:71:7a:39:76:ce:41:29:41:ef:e3:90:e2:d0:46:
         04:6a:2d:20:9e:5e:fd:7a:ee:06:dc:16:04:20:53:68:97:15:
         4a:48:0c:cc:de:6f:ab:d1:c9:9e:f6:71:fc:e3:4b:ee:17:9a:
         da:f8:0d:96:cb:ae:d5:85:79:bb:1a:e1:a0:4c:22:55:7a:52:
         f5:c7:b6:46:ea:78:09:75:92:16:72:d2:f2:c6:fb:74:84:5f:
         56:32:6b:11:b6:8f:04:a7:65:75:05:b5:43:76:7e:ce:2e:55:
         e9:d1:27:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 10:48:18 2025 by rpki-client