Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
File:                     _EjmUG7G1TxZFdyPKWREhd-S_Ok.mft (raw, json)
Hash identifier:          NbbgHjfIqCPIJ3KR51d7Ey0YBf4R0bZi2sLHmoBXDrg=
Subject key identifier:   E8:7E:9E:B3:99:24:0A:FF:A9:E2:CD:0B:B5:D6:36:FE:D8:A8:0A:8A
Authority key identifier: FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9
Certificate issuer:       /CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
Certificate serial:       01974E2034B99B279C13189693A932D598B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
Manifest number:          122F
Signing time:             Sun 08 Jun 2025 06:00:22 +0000
Manifest this update:     Sun 08 Jun 2025 06:00:22 +0000
Manifest next update:     Mon 09 Jun 2025 06:00:22 +0000
Files and hashes:         1: _EjmUG7G1TxZFdyPKWREhd-S_Ok.crl (hash: 37OSM4mnKJ4CRRhwo5t0VExcoQQgdTc3Bg9culdhQWU=)
                          2: f7kAf3KV7qb69Z3Irf9QrNtLyY0.roa (hash: jPD7nunzn9cSBTS41yie793CY1UObq7bXZ4qPAfEbsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:20:34:b9:9b:27:9c:13:18:96:93:a9:32:d5:98:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
        Validity
            Not Before: Jun  8 06:00:22 2025 GMT
            Not After : Jun  9 06:00:22 2025 GMT
        Subject: CN=e87e9eb399240affa9e2cd0bb5d636fed8a80a8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:49:22:c0:ef:1b:76:1f:6e:ce:0a:fe:ad:96:
                    1b:c6:a3:9b:85:3c:07:b7:32:ce:2f:a9:52:22:90:
                    b0:8a:31:ea:af:28:c5:9c:fb:96:dc:fd:39:28:7b:
                    ef:8e:95:bd:b6:cd:0b:d9:97:8e:28:52:00:d3:37:
                    c4:91:c9:a1:06:88:3c:51:99:85:26:28:ec:59:86:
                    9c:ba:33:0e:5d:21:d8:62:e0:35:1d:cf:b1:94:e4:
                    c7:53:37:f4:18:03:b2:46:a9:7c:68:36:0b:14:eb:
                    2f:24:62:85:8b:6f:e3:bd:81:b7:b7:b9:96:a3:4c:
                    b8:09:43:45:5d:57:05:09:30:64:87:91:c4:46:8a:
                    08:f2:b5:26:05:36:74:57:f3:5a:f8:8b:b4:18:6b:
                    9d:a9:d1:dd:71:bc:1d:d9:40:2d:c9:77:c9:02:4a:
                    7f:35:1d:a9:5a:82:03:25:e2:a8:59:32:cb:16:98:
                    fd:c9:04:b5:3a:94:3c:bf:b4:f2:e9:22:f3:3d:66:
                    f6:5e:07:21:69:43:f2:6e:e6:d6:25:55:e5:d8:c8:
                    50:63:f1:7f:5c:11:41:79:62:30:3b:44:d5:2a:66:
                    fe:ce:19:22:6b:cf:cf:fc:b2:63:91:ab:9a:53:79:
                    fc:79:5c:cf:0b:d4:df:b6:c9:e4:78:f7:b8:d4:da:
                    ff:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:7E:9E:B3:99:24:0A:FF:A9:E2:CD:0B:B5:D6:36:FE:D8:A8:0A:8A
            X509v3 Authority Key Identifier:
                keyid:FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:22:bb:9a:9b:3c:c9:0b:db:1f:cc:c1:c7:ea:35:4a:48:f2:
         df:8f:7f:d5:32:8d:5e:cf:83:b8:0a:5d:41:2d:43:da:0a:f9:
         6b:0f:e3:54:cd:9b:6b:ae:c5:8e:0b:59:b5:a6:6d:a6:bc:ea:
         65:1d:20:ed:65:ab:e6:a5:9d:8d:df:20:c2:33:ab:ed:6e:ca:
         fd:4e:d3:63:b2:15:4f:43:bb:69:a3:db:46:f5:69:8c:35:4f:
         e1:d5:f2:c3:64:69:dc:29:97:aa:0c:b8:a7:27:e6:87:ce:76:
         4c:b3:4c:7d:fb:77:dd:0f:d3:e3:d7:ce:73:4e:51:86:6a:8a:
         ab:1b:5c:f0:05:08:2f:03:b3:a1:85:9a:80:e5:91:f7:9d:43:
         c5:14:79:46:b8:a7:17:51:7f:b5:1c:ff:5a:53:eb:cc:10:b8:
         0c:10:bc:93:8e:b5:44:ab:20:47:91:14:78:76:a7:2e:ac:45:
         d9:89:ad:e4:a0:6e:8e:3d:0a:ab:21:4c:c0:b6:b7:41:3d:15:
         7f:b0:d3:57:b4:e5:f0:48:a2:ea:0e:20:b1:5d:d8:a4:27:d4:
         1c:15:f8:61:0f:55:71:a8:22:34:aa:fa:d8:d4:46:7a:0c:9d:
         9f:1b:c1:c7:c5:7a:8d:5e:59:58:16:19:eb:9b:e6:46:54:de:
         f5:39:fe:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:08:27 2025 by rpki-client