Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.mft
File:                     eBmwlu34dg6OUA-UFpvAA3iulHU.mft (raw, json)
Hash identifier:          XDUQW7Uaa67/xesnFbSqo+C59iDFg0wJkiI2ZXnDE3M=
Subject key identifier:   A3:CE:BA:18:E5:1C:FB:33:78:F6:63:02:EB:8D:11:61:1B:48:F3:95
Authority key identifier: 78:19:B0:96:ED:F8:76:0E:8E:50:0F:94:16:9B:C0:03:78:AE:94:75
Certificate issuer:       /CN=7819b096edf8760e8e500f94169bc00378ae9475
Certificate serial:       01974E8E6ED0F1C89C5C408CD8F7953A296F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBmwlu34dg6OUA-UFpvAA3iulHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.mft
Manifest number:          10C0
Signing time:             Sun 08 Jun 2025 08:00:46 +0000
Manifest this update:     Sun 08 Jun 2025 08:00:46 +0000
Manifest next update:     Mon 09 Jun 2025 08:00:46 +0000
Files and hashes:         1: eBmwlu34dg6OUA-UFpvAA3iulHU.crl (hash: yN0woxtxKI4GEiU/LjVKlnSuYaoKx1/XKqtHNqV3zE4=)
                          2: kvpjW1OQ3nnqnZospDXyTTjms3c.roa (hash: jdHb9YcJtduSRgTK6EOa2Lgs5rNOzEsJ93AqGYpkqHg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eBmwlu34dg6OUA-UFpvAA3iulHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:8e:6e:d0:f1:c8:9c:5c:40:8c:d8:f7:95:3a:29:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7819b096edf8760e8e500f94169bc00378ae9475
        Validity
            Not Before: Jun  8 08:00:46 2025 GMT
            Not After : Jun  9 08:00:46 2025 GMT
        Subject: CN=a3ceba18e51cfb3378f66302eb8d11611b48f395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:01:4c:df:ee:80:c5:9d:a2:58:62:7b:3a:af:
                    4b:fb:6c:ac:52:e1:f0:0a:04:36:9d:d3:8c:a0:21:
                    67:01:53:59:cf:c5:9d:11:a1:1a:4d:a8:5c:57:82:
                    5d:c2:04:a4:6e:53:46:50:97:4c:e2:89:9c:90:23:
                    2c:da:9d:0b:43:9c:e5:4c:86:8c:58:3f:29:c2:89:
                    3c:b3:3f:ba:f8:ba:47:86:20:1b:93:9d:4c:12:89:
                    4a:c1:36:aa:88:22:aa:51:c4:82:fe:c9:7e:b4:b8:
                    b3:30:09:ed:8f:c0:59:76:a9:79:07:97:e6:cc:4d:
                    39:a3:87:e5:d1:55:4c:4d:9b:9a:5e:fe:bc:ef:cf:
                    43:35:6e:40:cb:be:a8:b2:ed:1a:14:41:08:ad:dd:
                    84:07:95:5b:ca:f2:b6:ae:cf:34:5e:f4:f5:ec:d9:
                    2b:1d:81:8d:5b:00:ba:96:e8:f9:48:44:f2:c7:98:
                    5c:8c:d9:1c:6a:96:28:0a:c0:d8:a8:0d:52:b1:34:
                    7d:89:74:05:63:15:65:a6:8e:72:8b:61:ef:42:e5:
                    57:f4:f9:1c:7c:a7:22:31:e8:b0:18:a5:22:a4:de:
                    b4:ad:72:08:79:db:5e:aa:cc:5c:1a:5a:49:3e:da:
                    26:8f:5d:51:73:96:61:f6:b0:86:17:f0:78:f5:08:
                    d2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:CE:BA:18:E5:1C:FB:33:78:F6:63:02:EB:8D:11:61:1B:48:F3:95
            X509v3 Authority Key Identifier:
                keyid:78:19:B0:96:ED:F8:76:0E:8E:50:0F:94:16:9B:C0:03:78:AE:94:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBmwlu34dg6OUA-UFpvAA3iulHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:3d:93:1c:e2:89:4f:06:2b:2e:f9:8c:8a:8d:04:5b:b5:41:
         86:d1:69:7d:0f:11:1b:33:c9:6a:47:3e:35:d9:8f:0b:e3:f4:
         34:1e:b6:5e:bc:96:0d:0f:7e:b7:ab:8e:d0:02:55:ba:a8:b6:
         31:28:32:ae:8c:3e:45:51:b9:d6:c5:a7:25:ab:cc:21:da:79:
         02:e1:a8:50:bc:04:6f:59:97:7b:35:e8:56:f4:b0:55:90:96:
         1d:bb:02:82:2f:8a:62:17:7c:0b:e8:27:5d:14:d7:81:ce:6c:
         11:4a:c1:9f:c8:09:8c:be:a8:52:ae:8b:16:5a:2b:07:54:8f:
         58:7c:21:18:e5:a0:1c:43:fb:b6:de:d6:95:0b:6c:14:f9:6c:
         f9:09:f7:9e:80:48:b4:cd:78:bd:72:3b:f7:c4:85:da:67:12:
         b1:84:bf:14:9b:5c:4a:36:a4:ef:81:b1:b3:5e:fd:63:1b:52:
         f1:e1:d5:e3:39:4e:99:ba:e3:d7:cd:19:60:6c:21:76:83:dd:
         7f:81:a2:c7:90:3e:7c:ca:9b:03:61:d1:68:a1:03:3e:8d:be:
         f2:10:af:2e:a7:5d:ba:2f:f7:5f:51:13:58:95:bd:42:6d:5c:
         3c:c9:13:9b:07:7c:e9:c0:de:55:a5:da:38:b4:4c:76:7a:a1:
         d6:16:b5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:32:10 2025 by rpki-client