Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
File:                     eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft (raw, json)
Hash identifier:          R85a4B8mJwVaKAgTpz8iOTOALPvRRsoccGk23PMvBbk=
Subject key identifier:   0F:FB:BA:7D:E7:BC:C5:82:A1:C2:DF:2F:EB:D3:43:2D:FE:4C:D4:89
Authority key identifier: 78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2
Certificate issuer:       /CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
Certificate serial:       0197507CF1A7FDB10378A9BDD0EB983E9BB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
Manifest number:          11CA
Signing time:             Sun 08 Jun 2025 17:00:55 +0000
Manifest this update:     Sun 08 Jun 2025 17:00:55 +0000
Manifest next update:     Mon 09 Jun 2025 17:00:55 +0000
Files and hashes:         1: eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl (hash: 4FEQvKkZCdhkPpJxBoQdfEL2IjgjhfMeI4q2fg+T+mA=)
                          2: yuuro4DZVKBcq4qfaMzuK_H9btI.roa (hash: vk4eiNew6fQF6RCXYVJFZr4P4ma9BlPB3UnJJEu4bKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:7c:f1:a7:fd:b1:03:78:a9:bd:d0:eb:98:3e:9b:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
        Validity
            Not Before: Jun  8 17:00:55 2025 GMT
            Not After : Jun  9 17:00:55 2025 GMT
        Subject: CN=0ffbba7de7bcc582a1c2df2febd3432dfe4cd489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d7:52:0a:fc:95:a8:d5:6e:99:f7:4c:87:d2:
                    a3:03:63:22:fe:c1:28:4e:ca:ca:f5:db:93:3e:56:
                    b1:e0:bc:39:25:07:bf:ba:17:07:2c:c3:1f:5d:bc:
                    ab:c8:22:ce:5e:3b:55:85:c7:d7:04:9a:8c:cf:ee:
                    4a:b6:84:2a:07:91:47:da:54:d2:f1:0b:2b:20:4a:
                    9e:0c:4f:22:6d:7d:95:c4:15:f7:7b:4f:cb:9f:ff:
                    0d:49:4b:49:73:8f:5f:79:59:4a:4d:c7:62:dc:32:
                    43:f0:0d:7a:cb:8c:fd:0c:ed:14:f2:a1:07:48:96:
                    c1:1b:21:88:08:57:05:54:5e:90:18:ae:eb:c0:29:
                    2b:06:b8:4b:9a:1b:ba:99:7f:a3:90:af:f5:aa:ad:
                    00:81:85:96:56:ee:f7:27:b6:b5:cb:22:ae:a5:1c:
                    43:2a:6a:e9:e3:ad:ef:de:2d:8e:e2:93:45:53:3c:
                    09:d3:2c:a8:ee:69:bc:f5:e3:f3:ec:fe:87:82:e2:
                    ce:68:96:7f:47:bf:1f:c8:6e:36:1b:11:ac:42:c3:
                    68:d3:d1:c5:db:84:b7:ed:b0:9e:de:88:af:3f:e4:
                    37:58:0c:15:12:3c:bc:1c:8c:44:d0:9d:bb:a2:77:
                    95:04:bc:19:e2:1c:fe:d2:6e:d9:8a:fe:08:44:44:
                    8e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:FB:BA:7D:E7:BC:C5:82:A1:C2:DF:2F:EB:D3:43:2D:FE:4C:D4:89
            X509v3 Authority Key Identifier:
                keyid:78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:82:70:ee:46:1d:b8:c3:5e:1a:63:8c:7d:f2:36:d0:8a:b9:
         6c:d1:91:62:b9:8a:2d:54:b9:11:f1:0a:6b:b1:96:14:7f:f0:
         d2:fe:d4:4e:79:c5:15:f6:d9:e7:f8:52:a2:a4:69:b9:f2:14:
         ff:48:c9:4c:89:82:70:a5:54:f7:4e:2b:07:87:7d:c2:8d:c2:
         37:d1:ab:cc:f9:bd:ae:5a:14:fb:15:77:0f:a6:b2:cb:b9:90:
         e0:a4:be:28:ac:55:f8:bf:03:9d:15:6d:c5:28:7b:67:fe:56:
         36:75:66:5e:10:d9:8e:1d:f3:bc:5a:fd:e5:0d:f1:e0:fc:94:
         4a:2f:f3:bb:b8:e3:70:6b:24:35:6f:fb:5b:47:f0:0c:aa:c5:
         6e:37:39:e5:39:93:d7:8f:a6:59:7f:d7:2f:5f:43:03:ea:39:
         53:cd:ad:d6:d2:79:71:25:40:e6:57:ac:50:f8:57:1d:4e:c5:
         3e:dd:f1:fb:86:74:8f:be:df:84:77:6e:29:d4:d6:6c:03:6b:
         e7:db:4e:85:4a:77:e2:c9:cb:21:8b:a4:64:d6:aa:d1:ed:e1:
         57:a0:09:9a:d9:b1:f9:b2:ed:db:9a:00:d8:5a:63:23:1e:e2:
         34:1b:f0:d1:5a:20:54:65:44:18:47:22:c3:7e:a6:fd:a1:7f:
         4b:1a:57:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:13:17 2025 by rpki-client