Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/EynNPuL-EmqCyipYyH7Vg4_ir1c.mft
File:                     EynNPuL-EmqCyipYyH7Vg4_ir1c.mft (raw, json)
Hash identifier:          Q0/9xNvGDojSDEtAyFMpekp/IKRCSu5d9geTNkjputs=
Subject key identifier:   C1:2D:E5:E9:A1:E1:61:BA:8A:92:04:4F:9F:BE:3A:5E:4D:29:93:0B
Authority key identifier: 13:29:CD:3E:E2:FE:12:6A:82:CA:2A:58:C8:7E:D5:83:8F:E2:AF:57
Certificate issuer:       /CN=1329cd3ee2fe126a82ca2a58c87ed5838fe2af57
Certificate serial:       0197481E0F358EEE6AD8F1B0CEBFF8C126C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EynNPuL-EmqCyipYyH7Vg4_ir1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/EynNPuL-EmqCyipYyH7Vg4_ir1c.mft
Manifest number:          1160
Signing time:             Sat 07 Jun 2025 02:00:18 +0000
Manifest this update:     Sat 07 Jun 2025 02:00:18 +0000
Manifest next update:     Sun 08 Jun 2025 02:00:18 +0000
Files and hashes:         1: EynNPuL-EmqCyipYyH7Vg4_ir1c.crl (hash: 4zRhbJWqLVI1C0js+Lp/pEZr9b0wmrZnm62/fkMdF4o=)
                          2: xRuQVNxBS_3Mgbe42rndbMsNass.roa (hash: A1raJrfsn9sVKt/kmB4hYgZNVWgJqoDFFUH8LA8mWcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/EynNPuL-EmqCyipYyH7Vg4_ir1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/EynNPuL-EmqCyipYyH7Vg4_ir1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EynNPuL-EmqCyipYyH7Vg4_ir1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:1e:0f:35:8e:ee:6a:d8:f1:b0:ce:bf:f8:c1:26:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1329cd3ee2fe126a82ca2a58c87ed5838fe2af57
        Validity
            Not Before: Jun  7 02:00:18 2025 GMT
            Not After : Jun  8 02:00:18 2025 GMT
        Subject: CN=c12de5e9a1e161ba8a92044f9fbe3a5e4d29930b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:aa:cc:c1:ee:66:63:b8:9d:1c:c5:4b:6b:b2:
                    1f:17:7c:ef:4e:0d:00:81:6c:5a:4a:45:fe:49:5c:
                    44:47:2e:96:7f:4d:c5:c3:0e:7c:5a:6c:08:06:3a:
                    0e:9c:c0:48:dc:69:8f:dc:d4:fb:0a:18:3a:af:6f:
                    ec:b7:e4:f7:16:7b:a0:81:6e:c2:ce:70:45:ce:fc:
                    71:5f:9d:d2:aa:6d:1e:bd:92:c4:92:5b:b9:f5:e0:
                    57:46:a6:34:df:24:66:aa:9e:a2:e9:57:cd:0a:49:
                    d0:99:33:02:69:53:f0:42:2f:65:1a:3c:87:00:4f:
                    9e:20:c6:73:36:e0:3f:6f:71:cc:8d:eb:cd:c8:a8:
                    42:1d:e2:9d:f4:54:6e:26:d7:3f:52:e3:11:b5:47:
                    81:0d:ea:a3:95:e9:cd:31:05:60:6c:d6:65:7f:60:
                    dc:6d:21:8f:fb:39:be:35:24:ff:1b:2d:24:48:27:
                    45:5f:82:07:d5:9e:d8:00:00:ed:73:24:b0:7f:c0:
                    ef:4c:cc:0e:44:51:2e:87:9d:37:ed:17:29:71:e2:
                    c8:d8:4d:8b:e9:34:a1:da:f0:eb:6f:c6:62:3a:dd:
                    24:6d:87:3a:d1:4f:c9:d4:39:80:8d:24:46:9d:a9:
                    b9:a3:74:66:8a:d0:02:9e:2e:f4:65:f6:32:a2:56:
                    ea:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:2D:E5:E9:A1:E1:61:BA:8A:92:04:4F:9F:BE:3A:5E:4D:29:93:0B
            X509v3 Authority Key Identifier:
                keyid:13:29:CD:3E:E2:FE:12:6A:82:CA:2A:58:C8:7E:D5:83:8F:E2:AF:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EynNPuL-EmqCyipYyH7Vg4_ir1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/EynNPuL-EmqCyipYyH7Vg4_ir1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/EynNPuL-EmqCyipYyH7Vg4_ir1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:a6:4d:bc:eb:f7:a3:f3:a7:fa:68:c5:76:1e:0a:5b:04:ca:
         33:94:52:4b:82:51:fc:9c:c1:32:e1:06:fb:9e:5b:0e:4c:1c:
         53:ef:28:3c:37:14:47:9e:41:08:a6:61:89:d8:28:4f:56:a0:
         9a:f8:09:55:cc:fc:0d:4a:e0:6d:68:d9:e2:64:fe:6d:b3:d5:
         67:dc:ef:e0:7e:44:19:1d:ce:46:48:9f:8a:b5:cc:7a:c4:47:
         cd:07:94:3d:2f:8f:f5:01:08:ab:3e:9a:c4:dc:96:a2:15:3b:
         1e:f6:8e:fb:87:3b:9c:54:36:7d:4d:a2:05:35:d8:76:10:87:
         f2:6d:b2:38:f3:46:65:c1:d4:9b:ef:5d:a4:5b:80:4e:d9:19:
         d5:73:b7:1d:67:4d:bd:37:0a:57:b7:cc:8e:36:73:90:82:55:
         ca:ab:e7:56:4c:d4:49:5a:64:4f:c1:a6:0b:fb:f7:18:b0:7c:
         07:a1:19:df:83:2d:51:37:e2:6b:3c:46:81:59:b6:21:9b:04:
         7f:3c:bc:2b:d7:ab:b4:41:09:f4:56:8e:2e:94:43:35:4e:21:
         a1:b6:bb:69:56:0f:43:52:eb:09:73:57:f0:1e:6f:64:0b:9d:
         17:2a:7d:8e:dc:ce:aa:1f:4f:4d:f3:1e:0f:07:df:87:9f:55:
         a1:81:b9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:55:55 2025 by rpki-client