Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft
File:                     EJU-YHZw_3OO7mprV32MiygE4eE.mft (raw, json)
Hash identifier:          Pzbn0+Q9CBBsC9ymwQS4dSpe1kZgjHpw/t2nyNSHoUU=
Subject key identifier:   BA:2C:26:35:4C:31:9C:F3:0F:40:91:2A:39:83:35:FD:22:39:2B:2F
Authority key identifier: 10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1
Certificate issuer:       /CN=10953e607670ff738eee6a6b577d8c8b2804e1e1
Certificate serial:       019602D256D17033E1FFCFB30B85D427C488
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft
Manifest number:          121D
Signing time:             Fri 04 Apr 2025 22:01:01 +0000
Manifest this update:     Fri 04 Apr 2025 22:01:01 +0000
Manifest next update:     Sat 05 Apr 2025 22:01:01 +0000
Files and hashes:         1: EJU-YHZw_3OO7mprV32MiygE4eE.crl (hash: hhTrbEbmdmzQgEcPG07hCR+Y67aq4S9iVZEZpZoH+us=)
                          2: h1bxrd9ZQSHnWEsCAF5tNHnFIO4.roa (hash: bzjeTqPcjaJhOMAteDMwXrvi1f6qBvlBTlDeNbXA0mc=)
                          3: kkhZtXnFFbbyksJB3tfkXPoindU.roa (hash: AnX+QPeb1iA6tYHpW/GJq8CbkdKou5XvPzQURX4/+g0=)
                          4: n7z_DfOtkGmMleyu2ItBMkfbWIg.roa (hash: JfGahSu9V1xovP5pxrTlWe3nwAxY6TrxY6kTUEokFws=)
                          5: uBAndVEu4g2uOttKjyLkMFr3ADc.roa (hash: RQpI8/9SZFmhxGwLcGtsCyax4v0wvsItiR+xv1PadRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Apr 2025 22:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:02:d2:56:d1:70:33:e1:ff:cf:b3:0b:85:d4:27:c4:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10953e607670ff738eee6a6b577d8c8b2804e1e1
        Validity
            Not Before: Apr  4 22:01:01 2025 GMT
            Not After : Apr  5 22:01:01 2025 GMT
        Subject: CN=ba2c26354c319cf30f40912a398335fd22392b2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1d:9a:29:85:cd:4d:20:ae:e5:d6:96:64:3d:
                    33:35:3c:0e:74:b4:b8:74:ca:4e:ac:f5:20:19:84:
                    e3:95:6a:10:84:6d:d4:5a:c5:8f:b5:9e:bf:29:18:
                    7d:da:4e:3e:51:9e:07:51:88:33:b8:16:6e:ca:02:
                    55:6e:30:62:b0:82:e0:27:8e:52:75:3b:06:a2:37:
                    9d:8c:d4:7c:da:91:2a:72:cc:d0:bc:ef:6d:50:e5:
                    da:7a:69:1d:f9:36:67:40:6c:e0:48:57:29:f9:3b:
                    c4:c2:c5:90:b6:69:2b:d8:b7:b6:70:0e:4b:83:3a:
                    73:f1:ab:8a:fb:6d:6e:37:65:44:24:b6:21:12:be:
                    70:a5:f2:96:c5:33:51:03:b4:a8:78:63:00:57:99:
                    aa:c3:a9:61:68:7f:4f:6e:00:d6:0f:e9:65:6f:5d:
                    e1:1c:5b:b3:cf:9e:ca:20:5f:d2:26:06:6c:36:7f:
                    46:41:ae:b3:7a:9d:6c:8c:5d:24:7a:bd:ea:26:ce:
                    6a:9b:b6:ab:e6:34:3a:6b:47:aa:87:85:82:ce:8f:
                    01:4d:b4:b8:a5:62:7b:49:d0:3d:f1:eb:84:dd:e4:
                    a0:3b:8f:e7:95:d9:ea:78:05:c0:3b:ff:89:97:7a:
                    7e:6f:02:89:f6:1e:e4:73:5b:42:bf:4c:12:e6:37:
                    0a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2C:26:35:4C:31:9C:F3:0F:40:91:2A:39:83:35:FD:22:39:2B:2F
            X509v3 Authority Key Identifier:
                keyid:10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:63:d6:b4:85:cd:ad:7c:65:c9:85:4d:41:d5:4d:8e:fe:b6:
         ab:53:cd:20:8b:6a:04:a5:8a:f8:93:21:cb:4e:e9:b0:40:41:
         ad:2e:08:77:7b:18:57:9b:ad:22:fc:9f:6f:83:81:8c:6f:4e:
         26:c6:41:51:67:1f:24:33:c1:63:4d:92:5e:c1:88:35:a3:a3:
         11:ae:e9:61:82:6f:8e:90:ef:7c:fb:8b:a1:19:c3:4a:17:43:
         44:86:04:ed:a7:45:e2:a7:b0:e9:e6:31:1c:b0:a7:7f:61:4c:
         12:b2:40:c6:61:3d:24:c5:49:93:c6:59:10:22:80:63:03:fd:
         d0:0d:8b:cd:a6:07:9c:fb:15:02:2e:10:c9:3b:da:62:4f:cd:
         20:6e:ab:0f:e0:d2:73:9e:e6:be:bf:a5:89:48:ab:51:97:41:
         9b:f5:3f:05:99:2e:bd:7c:d8:ff:7e:50:4f:83:12:6f:5a:52:
         8e:fa:ae:fb:d7:70:89:42:07:96:5f:c8:19:a5:2e:2d:ea:3d:
         c2:df:fd:c8:58:0e:88:a9:41:5f:7c:5a:c7:eb:d3:d8:07:20:
         c4:9c:ce:80:86:9f:e9:77:d7:b5:c2:f9:3c:49:da:6f:8f:53:
         64:26:47:08:f3:39:13:ad:3e:e3:17:eb:72:5c:f2:92:f1:72:
         82:60:58:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:14:23 2025 by rpki-client