Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.mft
File:                     EOXv6TTPN33fNzs2ZyHxM5JD-Qc.mft (raw, json)
Hash identifier:          eJSkFEA1cq2kKEhlCnAlGX3xC/rn9amY/kJjOefGrco=
Subject key identifier:   23:5B:2C:EA:A1:16:E9:A5:DA:EC:49:F0:7B:B0:37:70:CB:77:46:0E
Authority key identifier: 10:E5:EF:E9:34:CF:37:7D:DF:37:3B:36:67:21:F1:33:92:43:F9:07
Certificate issuer:       /CN=10e5efe934cf377ddf373b366721f1339243f907
Certificate serial:       019748C2DF63E86441C915154AD2CA7613F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.mft
Manifest number:          2A
Signing time:             Sat 07 Jun 2025 05:00:19 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:19 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:19 +0000
Files and hashes:         1: EOXv6TTPN33fNzs2ZyHxM5JD-Qc.crl (hash: NkXCsTXVrF4SeHyEGJG1fewVQPvpEB/XVmrS2fRG0lg=)
                          2: lexK-PZGa0dRIxHrAucmPZfoZH8.roa (hash: BTYzPVVTX+QrUsB9dt95kpnERBtDlHXeueDyzr/RAhM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 05:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c2:df:63:e8:64:41:c9:15:15:4a:d2:ca:76:13:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10e5efe934cf377ddf373b366721f1339243f907
        Validity
            Not Before: Jun  7 05:00:19 2025 GMT
            Not After : Jun  8 05:00:19 2025 GMT
        Subject: CN=235b2ceaa116e9a5daec49f07bb03770cb77460e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4b:75:bc:0b:a9:a3:f6:a5:02:9b:96:e4:f5:
                    2a:a3:46:0f:64:f7:d1:2f:25:81:2c:b5:2b:eb:3e:
                    ed:8a:9d:08:b0:f8:1f:ae:d3:dc:c0:e2:20:c2:a1:
                    f0:cc:c8:97:db:9a:21:0e:10:30:f8:7d:0e:17:00:
                    87:86:98:12:a1:41:1f:ad:b9:a6:6f:f9:93:c1:d0:
                    71:27:ae:db:96:b2:77:58:0a:68:f4:40:82:1c:c3:
                    cb:ea:0f:12:3a:ac:44:b5:00:84:f6:1a:c6:e9:ad:
                    29:30:64:25:3e:92:06:c1:02:2e:b2:79:4d:dd:6d:
                    93:8f:4f:e1:53:9c:cd:85:c4:89:1e:c2:f4:d9:64:
                    63:9c:6e:2e:7f:8f:28:45:b1:9c:11:14:a3:b7:5d:
                    cd:bf:ee:f5:c1:03:b6:7e:02:6e:7f:b2:2a:79:c5:
                    f1:76:17:8b:f5:84:87:c0:85:8b:b9:42:e7:e3:69:
                    75:cc:c0:09:78:fe:f7:82:ce:7a:08:b9:27:64:6b:
                    d6:04:da:31:7f:12:c5:78:39:4a:7b:39:a5:ba:93:
                    27:5d:3a:44:ae:97:c1:3d:9c:56:2d:a1:f6:ca:65:
                    fe:52:9c:75:e4:e2:40:b1:2a:71:59:f7:b9:10:13:
                    74:9e:43:34:bb:5b:a9:80:c5:44:9d:a0:8b:6d:bc:
                    f8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:5B:2C:EA:A1:16:E9:A5:DA:EC:49:F0:7B:B0:37:70:CB:77:46:0E
            X509v3 Authority Key Identifier:
                keyid:10:E5:EF:E9:34:CF:37:7D:DF:37:3B:36:67:21:F1:33:92:43:F9:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:50:0a:c5:1a:46:2c:95:53:aa:3e:ef:a8:90:03:55:65:d1:
         16:2d:0e:20:ad:11:d8:c9:d5:48:51:c7:13:46:60:75:21:d0:
         ed:e4:f4:88:2b:c8:02:48:3d:df:dd:ba:ff:51:0c:d0:a1:98:
         0b:4e:55:3d:9b:69:62:f2:e0:25:22:fd:b9:a4:13:80:a0:35:
         6f:7f:c8:05:39:9f:5e:65:51:19:66:72:c1:58:b1:66:85:52:
         87:34:0f:65:f3:7d:16:a4:b0:8c:b4:e0:3c:0d:8c:3f:5e:aa:
         dc:d7:50:71:c0:18:98:22:c2:2b:af:5d:cd:f5:a4:4f:51:29:
         7c:7b:c1:a3:86:e2:93:5b:1f:2d:43:f7:79:a2:a5:cf:dd:be:
         c2:43:ca:ba:9e:68:54:12:cc:53:64:66:b9:1a:c8:3f:48:93:
         2e:4a:93:d5:4e:67:72:1d:8d:8d:ab:b0:59:b9:9f:da:69:c0:
         0d:cb:df:bf:b2:51:a4:3c:f2:44:2b:ac:41:14:fc:e6:9f:4e:
         c1:92:75:a2:97:53:a8:c9:ad:41:9d:6e:da:41:0c:65:92:53:
         96:41:43:0c:c9:b7:5c:a9:56:62:ee:cc:69:cb:ae:a4:51:24:
         bc:af:86:fd:d7:91:76:f0:65:6b:a8:eb:3f:d2:09:38:f2:d5:
         c4:ec:12:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:51:23 2025 by rpki-client