Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.mft
File:                     EVNfj6S19RUz1yTq-Q26mXFfxvw.mft (raw, json)
Hash identifier:          12cCgea8JiuWhCa0Cbc0lE8C/fUIeyTluRHbX5DUJPk=
Subject key identifier:   38:2A:D6:B9:55:C3:09:B1:CD:3B:8C:3A:99:97:80:48:45:5C:A9:1F
Authority key identifier: 11:53:5F:8F:A4:B5:F5:15:33:D7:24:EA:F9:0D:BA:99:71:5F:C6:FC
Certificate issuer:       /CN=11535f8fa4b5f51533d724eaf90dba99715fc6fc
Certificate serial:       01976094ED4D63B4D8DF03BB269E1153576A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EVNfj6S19RUz1yTq-Q26mXFfxvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.mft
Manifest number:          1587
Signing time:             Wed 11 Jun 2025 20:01:02 +0000
Manifest this update:     Wed 11 Jun 2025 20:01:02 +0000
Manifest next update:     Thu 12 Jun 2025 20:01:02 +0000
Files and hashes:         1: EVNfj6S19RUz1yTq-Q26mXFfxvw.crl (hash: MTz8VU9RKQQcZuw7PmHznYzHZVXLx99CeD4NU4WiUbc=)
                          2: Qpu6vaOAY5n2mIT4E3Vh72x5kkE.roa (hash: P0y6XucznI/69rbHwQvBGeYNmc4RVWARo9Yt1RUz3AY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EVNfj6S19RUz1yTq-Q26mXFfxvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 20:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:60:94:ed:4d:63:b4:d8:df:03:bb:26:9e:11:53:57:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11535f8fa4b5f51533d724eaf90dba99715fc6fc
        Validity
            Not Before: Jun 11 20:01:02 2025 GMT
            Not After : Jun 12 20:01:02 2025 GMT
        Subject: CN=382ad6b955c309b1cd3b8c3a99978048455ca91f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6c:ff:c5:cc:9a:04:a9:09:b4:3c:99:c0:78:
                    c6:93:0c:06:ac:aa:a5:fa:0d:d0:1b:21:8c:19:0c:
                    2d:b6:8d:08:c6:68:b6:82:e5:0f:82:61:6a:3c:24:
                    b3:5a:9c:69:25:9c:cd:04:17:0d:ab:9a:9c:6e:1e:
                    7d:9f:5f:45:e0:8b:89:66:89:42:54:22:a0:d7:61:
                    89:69:dd:30:fc:34:a4:bd:06:62:12:12:b6:03:8d:
                    c1:bb:61:a2:2e:47:8a:fe:e7:b6:9a:83:38:20:eb:
                    52:44:09:6b:ad:62:0f:49:bc:94:fa:06:cf:29:4f:
                    5d:61:53:31:8f:72:a0:66:d4:56:60:c8:01:0d:e9:
                    24:22:3b:0f:9b:82:97:2f:8f:cf:44:e6:a8:7a:ab:
                    67:8e:e4:ea:16:e2:d2:ac:5d:14:14:a2:34:4a:a8:
                    b0:1c:3e:b9:be:8f:48:31:26:e0:dc:f6:53:56:45:
                    06:9c:aa:7c:d5:f0:09:0c:11:86:b4:87:ff:7d:27:
                    96:9d:95:07:df:d9:00:fe:f0:6a:db:e9:a5:a6:66:
                    35:fe:b9:26:a4:48:33:fe:2f:90:07:68:7d:f3:da:
                    d9:d2:12:25:12:e3:bc:88:66:d4:71:a2:bd:c3:a6:
                    42:78:77:44:e0:db:fd:4b:59:84:48:3a:09:c3:fc:
                    a1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:2A:D6:B9:55:C3:09:B1:CD:3B:8C:3A:99:97:80:48:45:5C:A9:1F
            X509v3 Authority Key Identifier:
                keyid:11:53:5F:8F:A4:B5:F5:15:33:D7:24:EA:F9:0D:BA:99:71:5F:C6:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVNfj6S19RUz1yTq-Q26mXFfxvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:05:a8:d4:43:2a:15:39:92:ea:71:43:6b:f5:dd:ef:52:21:
         cf:2b:c5:48:6f:1c:35:fe:5a:e4:f7:0f:56:4a:14:1a:b3:a8:
         94:02:fb:3b:6f:cf:0a:91:bc:5f:18:f9:ea:ed:63:07:ee:01:
         a1:97:6d:96:e7:95:0f:0c:26:09:81:fe:69:80:73:46:47:5b:
         89:73:c5:88:cd:ad:3e:34:5a:2e:e8:f9:e0:8f:f1:e2:91:38:
         74:35:ff:98:38:da:56:a7:df:9f:5b:df:e9:46:44:e0:a4:5c:
         e4:e4:f9:cc:2d:06:b2:e3:b6:42:7c:09:bd:51:6a:b3:ec:2f:
         69:47:63:90:2e:56:44:65:20:15:a4:f0:03:5b:39:a1:9e:36:
         64:f9:4f:6a:14:c6:8d:64:a2:89:db:4f:af:17:56:26:fc:95:
         49:4f:5c:ed:0e:e4:20:c2:25:0a:4d:77:84:57:f0:90:c6:a7:
         b3:42:8b:05:c5:79:91:02:fa:6e:2d:83:a3:e0:c6:90:64:36:
         42:1d:e8:d2:d9:58:27:af:d3:be:81:e7:28:42:21:08:c1:47:
         3b:09:94:ea:b6:20:8e:90:7a:7e:69:45:2f:78:82:60:f9:e2:
         76:04:d5:11:29:61:23:b6:b2:b7:9c:92:97:37:3e:49:79:4e:
         6b:b3:cd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 03:27:54 2025 by rpki-client