Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
File:                     _EeASzKQyJovwgWF9BpGgM3Y3zE.mft (raw, json)
Hash identifier:          /xQPGbE/WFSpGh62iK35VC3EfgqrKeXFAtxzfDEZ7Dg=
Subject key identifier:   30:79:23:46:2F:8B:83:60:FE:73:42:8C:48:E9:DC:BB:D3:41:B4:4C
Authority key identifier: FC:47:80:4B:32:90:C8:9A:2F:C2:05:85:F4:1A:46:80:CD:D8:DF:31
Certificate issuer:       /CN=fc47804b3290c89a2fc20585f41a4680cdd8df31
Certificate serial:       019764DF913BEC81020BA3753088305C3845
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
Manifest number:          12F0
Signing time:             Thu 12 Jun 2025 16:01:02 +0000
Manifest this update:     Thu 12 Jun 2025 16:01:02 +0000
Manifest next update:     Fri 13 Jun 2025 16:01:02 +0000
Files and hashes:         1: _EeASzKQyJovwgWF9BpGgM3Y3zE.crl (hash: g++ZN1F309CstxNxcwpF9iRaHuB/WytXb+z5XLOShQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 16:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:64:df:91:3b:ec:81:02:0b:a3:75:30:88:30:5c:38:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc47804b3290c89a2fc20585f41a4680cdd8df31
        Validity
            Not Before: Jun 12 16:01:02 2025 GMT
            Not After : Jun 13 16:01:02 2025 GMT
        Subject: CN=307923462f8b8360fe73428c48e9dcbbd341b44c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:01:b0:6a:ac:da:3c:1c:c4:6f:e7:82:23:59:
                    06:bd:04:bf:0d:6c:a8:98:6c:11:f8:9d:82:98:50:
                    17:ba:e5:1f:b6:54:21:a7:53:6f:cc:be:4f:6d:82:
                    d1:bc:08:d1:85:10:e4:03:81:a2:e5:ae:61:91:ac:
                    05:3f:57:91:c0:57:5f:ff:0a:08:7d:3f:45:a1:95:
                    d7:d4:4c:5f:18:92:51:fb:64:3d:3e:73:ef:cc:b4:
                    91:9b:f7:2f:79:78:ac:71:2b:c1:38:52:a8:9f:7e:
                    38:7e:f8:2f:53:e5:e8:a0:98:a9:97:1a:b4:cc:45:
                    c2:cf:c5:50:9a:f1:31:e6:45:e6:dc:06:a4:92:44:
                    37:0e:31:61:97:aa:fb:a5:6b:22:95:80:50:8c:a2:
                    ad:bb:82:38:56:8f:ff:6d:62:11:85:91:79:97:d3:
                    87:5b:fc:a2:a3:37:ac:63:c6:b8:a9:5b:73:57:5f:
                    2c:d5:ad:96:ba:d6:99:44:f4:15:ba:84:76:0f:ad:
                    38:d1:2c:f5:52:df:98:63:70:33:73:44:17:dd:25:
                    22:cc:07:29:5f:3f:e4:8e:de:a8:17:aa:1d:cf:31:
                    c2:46:ed:f4:de:3d:2e:d3:5f:bc:31:77:e9:a4:dd:
                    30:74:8f:39:57:5d:b6:91:88:fb:81:d5:39:b4:a3:
                    54:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:79:23:46:2F:8B:83:60:FE:73:42:8C:48:E9:DC:BB:D3:41:B4:4C
            X509v3 Authority Key Identifier:
                keyid:FC:47:80:4B:32:90:C8:9A:2F:C2:05:85:F4:1A:46:80:CD:D8:DF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:55:c6:0c:82:97:df:50:2b:9b:35:03:4e:a6:97:e0:41:a7:
         9e:4e:e2:ea:f5:fb:12:07:57:18:11:d2:e3:a9:23:75:d4:44:
         8b:00:7a:41:7e:ab:5e:d1:4a:fb:6b:68:65:d2:e0:54:6c:03:
         a6:d9:6d:94:1b:9e:87:92:b0:6c:6a:95:4a:5f:c7:e1:e5:bf:
         d0:81:2c:fb:f2:16:94:50:e2:00:68:85:10:7a:a3:80:2e:58:
         65:c9:ca:2a:01:cd:06:c5:38:20:88:4d:ba:99:c0:41:91:17:
         c2:aa:54:77:62:6a:96:06:5b:86:24:56:ba:b8:f9:81:1d:3f:
         27:d7:57:c5:4c:93:b3:ab:96:21:0f:31:9c:bb:5c:1d:35:fc:
         7a:fb:8b:b4:cd:c6:d5:e4:9e:ba:a6:1a:5a:69:7e:15:37:f2:
         5a:80:cb:82:db:9a:de:d9:ce:de:dc:8a:0c:81:32:f9:f5:42:
         69:bb:63:6a:98:15:42:3d:df:82:88:c6:a7:b7:ec:c8:e9:97:
         77:fe:d6:ce:73:25:85:8c:5c:ee:f5:25:d5:29:c2:da:97:6e:
         21:7d:48:34:52:57:32:a1:87:5f:37:60:6b:a0:88:2c:f6:11:
         d4:ee:cd:9c:2d:a0:ac:59:1a:30:42:61:a5:7a:10:a6:56:91:
         2b:b0:60:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 02:13:03 2025 by rpki-client