Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
File:                     Em_8AJbGk7vEIO64zO80vHtTh0M.mft (raw, json)
Hash identifier:          A4/l8N92i/UfRxnog6vwTRAfLiYuPNoZtUXWwlmVQXQ=
Subject key identifier:   87:AE:7B:10:39:C6:D0:EF:95:73:80:AE:8F:A0:66:27:F9:54:1C:0F
Authority key identifier: 12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43
Certificate issuer:       /CN=126ffc0096c693bbc420eeb8ccef34bc7b538743
Certificate serial:       019748FA0B23691CD7B9C0EB7807D8C11721
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
Manifest number:          0F12
Signing time:             Sat 07 Jun 2025 06:00:35 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:35 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:35 +0000
Files and hashes:         1: Em_8AJbGk7vEIO64zO80vHtTh0M.crl (hash: QUaPvXQBn0Ca/HS451sCnKuibdho+Ot8ptzJgDqgeV0=)
                          2: wqwxAvFZiZ6bPRDoA0zO-bNhhIc.roa (hash: W+sz9TCOY3wSjFpbMXmTZluRFQBYvoOF99W06O++/x8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:0b:23:69:1c:d7:b9:c0:eb:78:07:d8:c1:17:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=126ffc0096c693bbc420eeb8ccef34bc7b538743
        Validity
            Not Before: Jun  7 06:00:35 2025 GMT
            Not After : Jun  8 06:00:35 2025 GMT
        Subject: CN=87ae7b1039c6d0ef957380ae8fa06627f9541c0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f2:51:aa:4c:46:0b:29:d6:25:4c:93:40:22:
                    0a:ce:52:d4:c8:46:2e:b0:cf:b9:e5:ce:c7:cc:af:
                    83:f9:cf:65:84:95:67:4a:7f:b0:a2:18:a7:db:fc:
                    b5:6f:a8:29:aa:25:16:69:3a:63:09:a2:f6:8f:78:
                    2d:0a:23:1c:78:28:45:7c:dc:28:3d:25:6a:23:61:
                    2f:81:b5:db:6e:49:41:9b:cf:06:69:0c:1e:2c:4f:
                    da:a7:58:5b:15:72:07:5a:50:ba:b5:a7:38:34:d0:
                    17:7c:4e:3f:19:83:86:89:7f:20:dc:48:b5:39:e4:
                    1d:51:8f:77:f5:aa:35:78:87:08:ad:1f:1b:4b:b7:
                    d9:1a:6e:ec:8f:5f:39:ca:4f:e8:0a:23:b9:ee:9c:
                    a3:93:1f:99:fe:5f:e9:70:91:99:96:60:75:47:6c:
                    78:cd:4f:a9:2a:45:ad:07:d1:12:da:47:04:a5:52:
                    2a:8b:de:c4:61:ac:5e:6b:63:2e:45:bb:f4:17:3c:
                    ca:0c:5b:50:f2:4a:91:75:53:94:a8:4d:c0:44:e1:
                    36:c6:1b:2a:5b:b2:70:11:d1:b8:e0:7b:9e:08:7e:
                    93:36:61:bb:62:08:2b:6c:a0:80:41:2e:e7:1b:ed:
                    57:29:ef:07:2a:f1:28:79:c8:9c:3b:b3:b1:07:5b:
                    53:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AE:7B:10:39:C6:D0:EF:95:73:80:AE:8F:A0:66:27:F9:54:1C:0F
            X509v3 Authority Key Identifier:
                keyid:12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:e7:a5:9e:d8:20:cc:58:7d:1d:e9:c1:53:a7:38:ba:6c:f8:
         74:48:9c:66:79:7e:e6:4b:09:d5:dd:c3:f1:53:a7:44:96:33:
         bd:4c:4b:1e:f2:36:e3:30:7a:e0:74:dd:b9:b7:18:40:c7:39:
         59:e8:82:d4:6c:64:b3:be:5d:2f:8b:65:55:cd:60:09:3c:4d:
         21:b4:41:fe:1c:de:30:b5:a7:97:64:da:38:74:53:07:80:6b:
         1d:eb:46:8a:81:81:a2:33:5e:43:13:c9:4b:02:5f:42:1b:31:
         95:b0:cd:77:56:65:86:6f:1e:00:e7:f9:b0:55:24:77:61:32:
         62:0f:be:86:09:b4:3a:17:02:8f:4c:c5:29:5b:c7:06:84:cb:
         2b:e5:5c:ed:09:38:71:5b:f0:11:47:36:74:9d:63:f9:f6:7c:
         da:63:f8:77:65:13:05:10:fc:f5:e8:92:6b:0b:3d:d4:a3:c5:
         55:0a:3e:81:75:a0:c4:28:20:2e:a7:be:84:a3:4e:4e:34:fd:
         0c:3b:2a:76:ab:27:fc:02:c1:f5:a1:4d:fc:dd:d5:5d:46:b1:
         4b:99:ff:ae:a7:88:a5:3d:66:cf:2e:f0:75:36:64:5a:79:78:
         b0:1d:75:2c:54:52:c2:b2:fa:2c:a1:e5:ef:fd:5f:bc:c4:d4:
         08:fa:3c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:31:14 2025 by rpki-client