Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.mft
File:                     eaKVyAtUwtvne6R959rsa5hgIbQ.mft (raw, json)
Hash identifier:          j51Naw9w3Ysou6Xpb+F6UTp0FO4ryXTe67EbazFjBsY=
Subject key identifier:   96:3A:81:7B:06:12:4E:89:C7:E2:44:81:D6:B3:E5:F5:80:64:04:70
Authority key identifier: 79:A2:95:C8:0B:54:C2:DB:E7:7B:A4:7D:E7:DA:EC:6B:98:60:21:B4
Certificate issuer:       /CN=79a295c80b54c2dbe77ba47de7daec6b986021b4
Certificate serial:       01964CD946C87230DA7E88C23F704BD91854
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.mft
Manifest number:          0EF0
Signing time:             Sat 19 Apr 2025 07:00:29 +0000
Manifest this update:     Sat 19 Apr 2025 07:00:29 +0000
Manifest next update:     Sun 20 Apr 2025 07:00:29 +0000
Files and hashes:         1: C9I9L672PlbWqQBGPXD-LljxFm8.roa (hash: +ke4s3nz80Z09QzZpjaWVPGcz+zRYaW46pTivPvijPQ=)
                          2: _Hv-371f3PpQrPgvaLXFPgbDqAs.roa (hash: LCaDC2GnT7VyfO2v1Zin8LH9TSL6mMs+tcHPlTEQoSg=)
                          3: eaKVyAtUwtvne6R959rsa5hgIbQ.crl (hash: aLu0hc7sB0cLBxgKaOXuHW2jGUS1t47t+7JrkjyiOlY=)
                          4: gMIvq9YtCgOkL-7wopg1kqEgOOY.roa (hash: CP7S68jNnZq7f3001jUkejgDjHIYNSAYCHyxzvgL+hw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:d9:46:c8:72:30:da:7e:88:c2:3f:70:4b:d9:18:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a295c80b54c2dbe77ba47de7daec6b986021b4
        Validity
            Not Before: Apr 19 07:00:29 2025 GMT
            Not After : Apr 20 07:00:29 2025 GMT
        Subject: CN=963a817b06124e89c7e24481d6b3e5f580640470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:71:61:a4:5f:48:72:d5:c1:44:1c:9f:2c:f2:
                    8e:27:ec:27:ab:f6:a0:31:01:b5:8e:52:8a:d7:e6:
                    bc:3a:07:87:98:5d:56:7c:99:4e:8e:c4:96:5d:31:
                    af:c3:48:c1:0e:06:e3:91:4f:dc:39:0b:dc:dc:f0:
                    cf:f5:53:d4:3e:45:e3:19:48:fe:99:94:e0:e0:c6:
                    fe:09:15:2c:7b:d8:b5:ed:75:b4:8a:18:80:55:0a:
                    46:73:f7:64:36:29:53:7e:95:61:fa:ad:af:03:73:
                    56:8a:e2:ba:b5:57:25:4c:a6:84:23:8a:07:0e:75:
                    22:f5:2c:b6:e3:b1:74:dd:e9:8a:17:fa:53:f5:b4:
                    83:8a:dc:b3:3e:f3:1e:bb:87:bb:52:ae:7f:8e:bd:
                    21:70:f6:35:81:fd:8d:9a:8b:c1:46:af:84:0b:48:
                    db:92:eb:ef:9c:b8:fd:02:fb:cc:ca:1d:7a:ea:87:
                    f4:7f:64:93:b3:a4:9a:6c:e1:da:a1:46:91:92:4a:
                    fe:75:1c:51:f4:d4:ef:4c:43:67:9b:f2:13:97:d3:
                    42:5b:4d:19:5b:1a:4f:2b:d8:5a:e9:05:96:a2:1a:
                    f7:f5:88:65:e3:7b:cb:e6:5b:fc:1f:66:1c:99:db:
                    a9:d4:bd:d6:2c:fb:4b:b9:be:68:b8:82:a9:58:3a:
                    25:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:3A:81:7B:06:12:4E:89:C7:E2:44:81:D6:B3:E5:F5:80:64:04:70
            X509v3 Authority Key Identifier:
                keyid:79:A2:95:C8:0B:54:C2:DB:E7:7B:A4:7D:E7:DA:EC:6B:98:60:21:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:cf:09:83:f6:d3:c3:6d:71:79:36:ec:3d:ea:ad:87:5a:41:
         81:b8:41:82:9c:62:62:be:8a:4c:6c:71:b8:e9:88:75:1d:71:
         5a:88:ab:ce:75:3b:3d:06:de:a5:21:3b:97:e7:bd:d5:a4:4a:
         53:e4:73:4a:c4:3f:fc:3a:6a:66:a3:a4:02:ca:24:b9:dd:ec:
         b8:44:a8:b6:2e:ac:b7:51:04:4f:66:d0:88:df:3d:8b:25:74:
         c8:e8:4b:4e:00:16:57:86:1b:df:de:4e:b2:48:a4:b2:96:0d:
         bf:7b:c7:75:3f:e0:e3:91:78:3b:19:83:35:78:42:ad:4f:d0:
         52:43:65:45:0e:cf:ce:3b:d2:be:ca:22:95:63:09:01:34:7c:
         62:c0:4f:14:6f:f1:b2:44:98:26:96:77:9e:82:2a:90:39:df:
         81:2c:d6:a3:eb:97:f1:21:6c:3a:fb:25:3f:00:35:de:39:dc:
         ac:a9:38:6f:ef:a2:2d:16:24:82:cc:a5:28:65:02:3e:86:0e:
         e9:93:d9:56:b3:92:08:de:f3:ad:ca:b7:f1:cd:80:fa:25:17:
         8e:37:d0:0c:0c:42:ca:3e:1d:92:c6:9e:82:1c:03:c5:ac:40:
         bf:7b:9c:77:74:08:e4:1b:3e:67:a0:d7:e8:7c:4e:77:4c:2d:
         b8:1c:91:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:26:09 2025 by rpki-client