Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.mft
File:                     eJaox-m6CdLx1EhjZwviE_wMohA.mft (raw, json)
Hash identifier:          68qvaAb5kdr32d/1VEGROEkSNhk6sPU5hUXeNgS4RQ0=
Subject key identifier:   86:E1:B3:35:19:24:7C:3F:C7:58:6D:76:6F:AB:8D:A7:04:2E:B9:29
Authority key identifier: 78:96:A8:C7:E9:BA:09:D2:F1:D4:48:63:67:0B:E2:13:FC:0C:A2:10
Certificate issuer:       /CN=7896a8c7e9ba09d2f1d44863670be213fc0ca210
Certificate serial:       019641799E28107466CF0BCB9CB38E6E2AF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eJaox-m6CdLx1EhjZwviE_wMohA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.mft
Manifest number:          9C
Signing time:             Thu 17 Apr 2025 02:00:11 +0000
Manifest this update:     Thu 17 Apr 2025 02:00:11 +0000
Manifest next update:     Fri 18 Apr 2025 02:00:11 +0000
Files and hashes:         1: eJaox-m6CdLx1EhjZwviE_wMohA.crl (hash: LyFdzIlr2qzSGFr4upOV39m022wJrtps5ydmTYceUXk=)
                          2: wduzAoCV3X_HT3SwkAkhVbUpjvk.roa (hash: xcQexB5syiRJfDRPxaM63gktKvSVatGww4DJIDGRPJQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eJaox-m6CdLx1EhjZwviE_wMohA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:41:79:9e:28:10:74:66:cf:0b:cb:9c:b3:8e:6e:2a:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7896a8c7e9ba09d2f1d44863670be213fc0ca210
        Validity
            Not Before: Apr 17 02:00:11 2025 GMT
            Not After : Apr 18 02:00:11 2025 GMT
        Subject: CN=86e1b33519247c3fc7586d766fab8da7042eb929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7a:d6:8f:1b:b6:c8:d0:31:7b:a9:d3:0c:fe:
                    8b:5d:45:54:e0:4f:ab:f4:37:55:d3:18:e0:14:4a:
                    33:44:30:53:cc:64:90:97:0c:60:c3:9b:59:40:4d:
                    33:f0:30:53:f1:3d:27:f8:c0:ca:31:e6:2b:bb:9a:
                    d3:e9:83:79:bb:9b:00:d8:43:94:85:ca:da:8d:87:
                    c9:9d:74:5d:bb:34:ce:60:c1:55:52:e5:d3:a2:21:
                    20:ae:87:cc:6b:98:4b:62:f4:95:c3:89:72:3f:c6:
                    ec:81:b4:b2:48:98:98:bf:43:ee:21:f9:e3:09:78:
                    a7:c8:a0:21:aa:e9:32:a5:5b:de:5d:86:c2:33:c3:
                    b4:8f:e1:01:b6:14:7b:1e:5a:2f:47:44:0e:07:a0:
                    c4:a8:48:4f:87:1b:3e:e4:2e:47:ee:27:48:8e:53:
                    9c:07:fb:db:fa:ca:3d:ca:22:86:22:3e:6f:09:e2:
                    db:f5:43:fc:a8:fa:b7:72:ab:6b:47:e3:53:92:63:
                    b3:31:29:86:6a:94:c5:dc:b2:a4:8b:bc:a9:a3:ec:
                    cf:1c:50:82:b8:66:4e:66:77:94:51:57:5a:49:57:
                    17:18:ae:7b:71:88:19:03:b7:da:9c:7f:ea:24:a4:
                    55:a4:d6:f1:46:e0:2d:c1:7f:9b:dc:3e:b2:18:68:
                    16:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E1:B3:35:19:24:7C:3F:C7:58:6D:76:6F:AB:8D:A7:04:2E:B9:29
            X509v3 Authority Key Identifier:
                keyid:78:96:A8:C7:E9:BA:09:D2:F1:D4:48:63:67:0B:E2:13:FC:0C:A2:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJaox-m6CdLx1EhjZwviE_wMohA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:43:3f:20:2b:3f:bb:d0:60:bb:28:c8:04:b3:fb:aa:00:c6:
         3b:6a:d7:0b:07:d3:e9:da:72:88:b6:72:0e:3e:83:29:af:ff:
         16:b5:4d:cf:f0:98:86:2c:a0:cd:91:ab:1c:f6:87:4f:0a:a3:
         ca:e7:f8:9e:e4:9c:95:ac:04:49:54:77:2b:66:8d:fe:e9:58:
         eb:5f:06:ee:7f:de:5c:b4:e2:bc:f1:6e:91:0f:07:ea:f6:bf:
         fc:57:20:3c:02:4a:3c:70:81:8a:8a:5a:4d:52:de:c8:12:e9:
         9b:81:92:9d:89:27:95:35:a8:61:0d:c4:af:cd:7f:e3:9a:58:
         38:d9:77:39:99:f1:2c:76:69:e5:56:fc:4f:36:d7:f7:87:61:
         f9:09:ae:3e:2e:8a:b9:a8:0c:da:47:db:07:c2:c3:d0:1b:3e:
         ac:e4:5c:94:ea:79:fd:c9:e1:e7:6b:d6:c1:6e:31:cf:76:3b:
         d3:be:f3:f7:70:fb:06:d5:fc:cd:f9:12:66:97:e9:b7:2a:f6:
         7f:e1:05:df:ab:4c:a7:80:a3:29:c3:ef:c8:bb:c5:8e:ef:43:
         b3:0a:fc:a4:b9:20:06:e0:0f:28:60:d3:2a:33:63:0a:76:f2:
         a6:cb:91:1d:1c:91:aa:ca:3b:4f:4e:7d:6d:41:bb:9f:f0:cc:
         ff:6c:63:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:15:45 2025 by rpki-client