Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
File:                     EeB1VsGRhnrdkBAVgOz11bdClnE.mft (raw, json)
Hash identifier:          71cJpwD9ENh1ITy0kv+Nur4vRHWJWlut063lQmbpr3c=
Subject key identifier:   2A:7E:87:13:85:EE:D7:89:9A:DA:D4:6E:3A:AD:54:45:AD:B8:A6:36
Authority key identifier: 11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71
Certificate issuer:       /CN=11e07556c191867add90101580ecf5d5b7429671
Certificate serial:       019765BAACA8C30A2627AABEAA4D009ECB6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
Manifest number:          1095
Signing time:             Thu 12 Jun 2025 20:00:22 +0000
Manifest this update:     Thu 12 Jun 2025 20:00:22 +0000
Manifest next update:     Fri 13 Jun 2025 20:00:22 +0000
Files and hashes:         1: EeB1VsGRhnrdkBAVgOz11bdClnE.crl (hash: zru8YOBbvrSoHbahdg4E/igw4kunTWKaXB+/qx3J/aQ=)
                          2: jfKlhf7Z2FYXHGCxpIFV4H7KtVw.roa (hash: M0IA4ol4QEDMaHvnBk/xSvh7Vb38bMiYrIeleD4pqMI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 20:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:ba:ac:a8:c3:0a:26:27:aa:be:aa:4d:00:9e:cb:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11e07556c191867add90101580ecf5d5b7429671
        Validity
            Not Before: Jun 12 20:00:22 2025 GMT
            Not After : Jun 13 20:00:22 2025 GMT
        Subject: CN=2a7e871385eed7899adad46e3aad5445adb8a636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:de:90:e4:f3:96:a8:26:d9:10:97:a0:4c:93:
                    db:7b:8f:ff:58:98:ff:df:60:92:eb:18:46:10:e5:
                    9a:59:e9:71:2b:e6:77:6a:09:81:58:af:4d:89:d3:
                    8f:0f:a3:99:b8:41:99:b9:78:3b:77:2d:5e:42:32:
                    1f:54:cf:67:65:32:16:e2:1c:83:54:ba:03:44:98:
                    fc:51:5e:11:3f:51:8a:d4:7c:67:c7:45:c0:a4:1c:
                    61:a6:ea:d8:17:1e:d5:07:cd:01:b3:f2:f8:f2:c6:
                    be:78:9b:d6:34:d3:da:4a:e8:1c:67:da:b0:b8:60:
                    04:9b:1c:06:ac:80:d6:f2:c7:c3:94:bb:2c:91:46:
                    3d:31:65:44:55:01:04:32:ba:e8:da:47:41:8d:c7:
                    8a:b6:19:2d:40:b0:d0:92:4d:8b:20:7e:8a:da:da:
                    a6:a0:c1:75:9b:10:51:0d:ea:b0:d0:ba:73:12:61:
                    80:0d:88:36:4d:ee:a8:a4:b2:08:28:1d:e1:b8:75:
                    b0:a3:65:a5:0c:b1:c5:06:62:0b:4e:1c:93:d6:a6:
                    cf:2a:e7:85:e4:d8:26:82:24:48:94:44:db:08:c4:
                    4f:0b:42:fb:91:6c:78:d1:ce:ab:ff:47:86:63:f9:
                    16:a9:d3:cf:6b:98:7f:ee:a1:ef:aa:ba:03:1a:61:
                    bd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:7E:87:13:85:EE:D7:89:9A:DA:D4:6E:3A:AD:54:45:AD:B8:A6:36
            X509v3 Authority Key Identifier:
                keyid:11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:13:76:b6:0e:83:00:b8:2c:12:1d:bf:28:9e:d8:a1:aa:f5:
         2d:c5:15:d4:59:3f:59:0b:68:67:f9:83:89:4d:d5:42:8c:0d:
         14:f9:07:61:93:d1:03:52:12:68:87:98:4f:7b:55:81:b0:68:
         d6:4a:52:6c:4d:7b:bc:dd:96:b4:b6:1e:d9:b6:9a:a9:4c:a0:
         24:71:fe:81:fc:32:de:ef:b3:34:c5:e2:3d:a7:71:b3:81:97:
         d9:6a:d0:a6:f5:e6:13:ca:ea:68:99:a3:c7:82:22:1e:cc:f9:
         e8:ce:c1:89:b2:56:3d:bd:6d:fa:c2:49:a0:ae:d4:ac:1b:95:
         e0:ad:51:4c:cc:b3:7a:10:58:c1:6e:23:28:7f:a7:68:ed:7a:
         3a:f3:2f:7b:bd:90:3f:4a:16:61:d6:0c:bb:23:79:5d:66:a6:
         54:87:a0:cc:2c:44:e6:55:f8:ef:8b:bb:f7:37:76:bc:43:d9:
         a2:fd:41:be:48:15:a0:2d:1a:a6:86:d1:f5:14:ed:40:82:06:
         27:14:5a:e7:03:f0:e2:fb:0c:2f:f3:65:ea:77:ff:62:49:b7:
         eb:b3:ab:3b:da:c0:c2:ef:18:dc:9d:3c:bb:54:75:4f:f8:f8:
         c4:be:d4:d0:b5:59:02:ca:83:b2:7c:76:4a:64:57:e8:11:e9:
         40:f7:94:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 05:05:05 2025 by rpki-client