Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
File:                     EjIwPRY44HNSQEkaqp5CsYh62so.mft (raw, json)
Hash identifier:          DPr1L9NTm5m/7eAV3r4igJh85B178qHDn7K8/3gHWV0=
Subject key identifier:   23:D1:80:F3:F1:75:0F:9C:3E:88:FC:8D:DF:CA:D3:4C:45:A9:B7:27
Authority key identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
Certificate issuer:       /CN=1232303d1638e0735240491aaa9e42b1887adaca
Certificate serial:       019764DF2A3E0B3EFF4F5675C051DA781B96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
Manifest number:          15A7
Signing time:             Thu 12 Jun 2025 16:00:36 +0000
Manifest this update:     Thu 12 Jun 2025 16:00:36 +0000
Manifest next update:     Fri 13 Jun 2025 16:00:36 +0000
Files and hashes:         1: EjIwPRY44HNSQEkaqp5CsYh62so.crl (hash: OKjWdws4RSy6ezzkulXA7uF3HsEoi6iZykIC3E6G+aA=)
                          2: HvEy6S3Ot5506jaubdhYUPInfR8.roa (hash: +uwLnIF4Ta57G3IvwprmDCNh2cynoTtS6b+z70i12zs=)
                          3: Tp0auhJCmeeWmWKmCzIKG_vEZP4.roa (hash: 90pnLgqjS54drkkCBOnFNNLX5/NGGoYmxkCs4EGSwIc=)
                          4: bHI4QTonk3m080h4RB4RhN5M5CM.roa (hash: JmOuSUaL5aO6eJWDHsSKGkEflmXUZDl4Xm6SOZx0COY=)
                          5: ibV6SVEOzYK-uCJ2IJP7n2XGoFE.roa (hash: 367ZTo8bU7FXxL+j4Dkgjzx4iuXuZnPhTMCWZPMb+Q4=)
                          6: mh9lIMJaI3H1RJqde6saqnmgfvE.roa (hash: T7iu0Z++bA+ic9xBY/awoTn5K/2Jk9xBYmpN5iNezhs=)
                          7: t1EepmAv0dwDhiBnrHwtKtXN_Yc.roa (hash: VYM0YIWjbegizmnVX9b/V1dVjXFx+63jBlM9wmcRlpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 16:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:64:df:2a:3e:0b:3e:ff:4f:56:75:c0:51:da:78:1b:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1232303d1638e0735240491aaa9e42b1887adaca
        Validity
            Not Before: Jun 12 16:00:36 2025 GMT
            Not After : Jun 13 16:00:36 2025 GMT
        Subject: CN=23d180f3f1750f9c3e88fc8ddfcad34c45a9b727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:22:f1:cf:af:13:eb:23:18:f9:b0:63:44:c5:
                    3e:be:78:0e:d9:2b:ca:cd:04:9f:6d:c9:93:5f:ef:
                    e3:c8:c9:58:88:b6:bd:2a:3c:f9:81:de:59:00:c1:
                    49:d6:9b:36:ae:b9:b2:3e:08:e6:02:8d:6a:1d:6e:
                    cb:c3:a4:b7:25:2f:61:97:5f:9e:d7:8e:52:d9:b7:
                    69:d0:b0:2c:dc:0d:06:77:b9:60:6b:dd:5a:1b:79:
                    3f:af:5e:ef:78:ae:6f:11:b1:2e:12:00:d7:3e:09:
                    6b:6d:dc:ed:79:1c:30:6f:43:27:2b:5d:b2:40:1d:
                    ab:2d:fb:53:ae:13:5d:d7:66:21:82:a1:d2:a1:90:
                    b2:65:d3:a5:9c:b7:51:61:8a:9d:2e:fa:9d:31:06:
                    f9:93:8f:a4:5f:25:6a:9e:ca:6b:71:87:df:9c:4e:
                    f9:15:62:03:fa:54:71:c1:a2:02:8c:dc:c4:29:bb:
                    ed:90:29:9b:f3:38:8e:19:73:e5:ec:fe:90:1e:c0:
                    fe:9d:20:a4:d5:42:ee:dc:45:57:9f:3a:6a:e2:73:
                    4c:e7:0c:9d:9a:79:fa:a5:b8:25:91:a6:92:05:6d:
                    3b:77:01:5d:7c:d4:29:bd:c9:cb:11:80:2a:65:95:
                    fd:03:a3:03:6f:08:f6:60:82:25:17:8d:f3:77:d2:
                    a3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D1:80:F3:F1:75:0F:9C:3E:88:FC:8D:DF:CA:D3:4C:45:A9:B7:27
            X509v3 Authority Key Identifier:
                keyid:12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:08:8a:4f:45:37:d4:68:44:2a:be:b7:e0:4d:be:08:09:64:
         83:71:17:10:52:20:27:19:6b:b4:c7:ad:ac:c2:99:ca:1d:80:
         c0:89:81:3e:cc:95:2f:de:29:28:b4:62:d5:23:7c:f9:d3:2b:
         2d:1a:b6:15:dd:2f:85:87:60:69:91:40:20:68:7b:15:6a:a9:
         c4:9c:e9:90:59:b1:3d:21:3b:06:62:48:10:2b:cb:ee:7f:ea:
         a0:fd:45:ac:64:36:3a:b1:46:49:9a:76:fe:99:e9:2f:7a:e3:
         5e:7f:a9:69:4f:00:79:ae:f5:9f:e0:50:25:42:39:84:14:a3:
         c4:bc:94:00:f8:ff:de:69:ae:d4:41:29:23:04:fd:a9:7f:eb:
         59:c5:a6:92:d8:b8:99:66:dc:f7:8f:86:48:89:7d:ea:af:bb:
         dd:83:d5:e7:d9:d1:23:a8:92:9a:51:aa:f8:3c:0f:5f:a8:98:
         40:66:75:1d:c4:47:9a:20:f7:08:a3:d4:e7:13:e4:d0:75:f2:
         c6:3a:15:3e:b0:a6:79:27:be:87:1f:be:27:26:b7:58:3c:bc:
         17:56:ce:af:8a:97:5d:3b:e3:35:7e:8a:7f:b3:72:09:d8:a7:
         0c:13:65:a0:0f:86:6b:c8:bd:83:c6:46:88:d6:e9:01:11:58:
         70:3a:2b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 02:06:05 2025 by rpki-client