Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.mft
File:                     emc1t6VToWgMEa3T5Iw2NbU5eco.mft (raw, json)
Hash identifier:          FiwEX9AmFdr7+NLmefjfdXRwbsYge4y3dQzZ9o+RZT4=
Subject key identifier:   07:07:AA:D3:BE:AE:E6:04:AB:B5:1C:35:7A:4F:74:D4:50:7C:37:A1
Authority key identifier: 7A:67:35:B7:A5:53:A1:68:0C:11:AD:D3:E4:8C:36:35:B5:39:79:CA
Certificate issuer:       /CN=7a6735b7a553a1680c11add3e48c3635b53979ca
Certificate serial:       01964D105E5BEC3EB9F3E6397AA5C41E2FC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/emc1t6VToWgMEa3T5Iw2NbU5eco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.mft
Manifest number:          14FD
Signing time:             Sat 19 Apr 2025 08:00:40 +0000
Manifest this update:     Sat 19 Apr 2025 08:00:40 +0000
Manifest next update:     Sun 20 Apr 2025 08:00:40 +0000
Files and hashes:         1: YwW9PmhG8M67os_ETzB_lC8b6dc.roa (hash: KXc6a/HjHbtUphkQiVnt5ftECmown2oFzOkxnqPkL0M=)
                          2: emc1t6VToWgMEa3T5Iw2NbU5eco.crl (hash: w6AP0I++Eyo3gUOYfWitpWWlTccap3+Z2APtsRePDfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/emc1t6VToWgMEa3T5Iw2NbU5eco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:10:5e:5b:ec:3e:b9:f3:e6:39:7a:a5:c4:1e:2f:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a6735b7a553a1680c11add3e48c3635b53979ca
        Validity
            Not Before: Apr 19 08:00:40 2025 GMT
            Not After : Apr 20 08:00:40 2025 GMT
        Subject: CN=0707aad3beaee604abb51c357a4f74d4507c37a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:0b:0f:8f:6a:12:e9:45:15:e9:f0:0d:f5:e3:
                    0e:eb:cf:73:87:1c:82:65:4d:8b:1d:3b:79:66:8a:
                    9e:9e:b4:66:cb:9b:85:43:2b:e5:6b:4d:fc:ea:35:
                    e4:ed:17:fb:de:3a:1b:72:97:33:4d:28:75:0e:15:
                    0b:35:54:04:ca:3d:dd:45:55:91:fd:f1:4a:ba:33:
                    3c:34:60:c5:59:db:ee:07:8d:25:42:4d:3f:27:27:
                    c1:e6:56:9b:62:f1:78:dd:c0:b6:69:c6:f2:af:d1:
                    a4:ca:49:1d:7e:9d:f2:78:a7:a0:9e:d3:77:d1:76:
                    60:4b:36:e0:bd:5a:a3:b0:02:d4:7d:1d:4b:8c:19:
                    c7:45:14:06:88:b0:ca:a5:0e:85:ba:3c:98:6a:9c:
                    a2:31:a2:5d:f6:de:0c:a0:57:bc:38:96:bb:68:9d:
                    75:27:21:fd:e8:d9:ef:85:74:80:47:88:9c:35:e5:
                    86:c6:56:51:32:01:2c:f1:5f:c3:ce:5a:44:69:b4:
                    be:ff:b8:74:2e:20:fe:11:9b:52:4f:ae:55:1c:d3:
                    03:6d:76:f7:61:9b:a9:cc:86:d5:7b:98:dd:0e:f1:
                    6c:04:5b:61:92:b4:26:a1:04:96:c7:9b:04:e9:65:
                    76:54:dd:e3:65:4d:51:0d:0e:99:32:02:d0:2e:16:
                    c8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:07:AA:D3:BE:AE:E6:04:AB:B5:1C:35:7A:4F:74:D4:50:7C:37:A1
            X509v3 Authority Key Identifier:
                keyid:7A:67:35:B7:A5:53:A1:68:0C:11:AD:D3:E4:8C:36:35:B5:39:79:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/emc1t6VToWgMEa3T5Iw2NbU5eco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:84:0b:0d:85:d9:85:60:d2:56:59:54:4d:39:59:4c:a7:03:
         40:5e:4c:2c:8a:93:5b:a8:b7:1b:c6:22:04:08:b1:b4:6f:bc:
         d1:32:ed:a2:8d:5a:6b:15:08:a4:d0:97:8b:5a:72:f9:73:44:
         63:a3:18:29:f7:6f:38:ba:e8:78:4d:33:8f:08:06:c4:75:a6:
         b1:8b:5b:7b:ea:9a:31:bf:ef:f7:0c:73:99:79:b3:a9:60:44:
         30:8a:fc:ec:40:cf:5e:f3:b4:1d:3a:47:47:ed:24:1a:84:2c:
         4d:51:d0:64:da:27:c8:b3:d1:7a:f0:fa:51:24:01:26:71:5e:
         ab:e2:29:64:fb:55:b9:c8:bb:4d:df:25:48:d2:fb:dd:70:33:
         e8:65:24:d4:33:04:ff:52:6e:07:c4:45:bf:24:53:8c:ea:ac:
         5d:67:b8:26:80:af:1d:82:ab:6a:3d:8d:98:1c:a5:4c:6e:38:
         43:a9:28:b7:33:92:f6:72:9a:01:37:ba:1c:49:ee:3d:74:1c:
         1d:6d:c7:de:34:6f:1e:d5:5e:d6:00:9d:a9:e3:b5:3f:66:e5:
         c1:23:6b:16:b8:c4:ad:14:2c:2a:2b:ef:bb:d1:5a:ff:e2:e9:
         04:00:98:f7:ce:3a:e9:d9:57:b4:00:d6:ef:50:67:54:06:fa:
         1c:8d:13:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:14:50 2025 by rpki-client