Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
File:                     EKjG6TCLsACDEAFx4A27YUD09YA.mft (raw, json)
Hash identifier:          z2O650B7q2uo96CL+Zh5HD70N+Y4E483qwEOw7iAck0=
Subject key identifier:   42:EF:59:53:BF:B3:F0:FF:EF:85:EA:3A:0A:11:05:EE:66:D7:22:DE
Authority key identifier: 10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80
Certificate issuer:       /CN=10a8c6e9308bb00083100171e00dbb6140f4f580
Certificate serial:       01974967A74F2059EE1D0DB178D48030DDB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
Manifest number:          1581
Signing time:             Sat 07 Jun 2025 08:00:18 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:18 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:18 +0000
Files and hashes:         1: AVUcMAxEbDhM7vM-FUjcCVxpkZ4.roa (hash: XsWajvBJCQBaQCOPW97TUhH7waI4+kM6mJXjahHInmI=)
                          2: EKjG6TCLsACDEAFx4A27YUD09YA.crl (hash: HMotZvGaZcg7BPsodPCU8sUvSs243EjxF7AcXzRLy2k=)
                          3: Pb3BR7I3yypN0jZXyhXVjX7_7qk.roa (hash: Hki992M/vj13WyFzgI/qTd7id5FfrVmsocjjt8H+8YY=)
                          4: SEzIpQlEdNO7qpFJFox8nqfBkU8.roa (hash: DyyJf3v7/p2uLPbLbI0Ax8tgSfmYrSUpfCXMF5ZFV0U=)
                          5: e6QKnd26NFxLpuuhAxML73T_BHw.roa (hash: WvnUhZyvWR50U69T375x8NsElxKc8FKV3YkOrKaAbIs=)
                          6: ilp0a42y4ZM8M4NmpHagTEQmfIY.roa (hash: b8xhghXOeNEICuuPH88EHMI0zu8DkuF/9JKbLv1CD0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:67:a7:4f:20:59:ee:1d:0d:b1:78:d4:80:30:dd:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10a8c6e9308bb00083100171e00dbb6140f4f580
        Validity
            Not Before: Jun  7 08:00:18 2025 GMT
            Not After : Jun  8 08:00:18 2025 GMT
        Subject: CN=42ef5953bfb3f0ffef85ea3a0a1105ee66d722de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a1:74:f6:53:f7:c4:18:54:70:e7:75:53:03:
                    a1:72:23:78:d9:fa:b9:c4:ee:73:e9:35:0f:6a:4b:
                    c9:c0:34:04:a5:76:79:c1:ca:36:71:54:89:fc:b2:
                    61:87:39:1f:0b:05:40:06:d0:50:38:6a:85:f8:6c:
                    a7:e5:00:be:9e:8c:aa:fc:2a:85:9c:b4:73:74:57:
                    da:91:91:b0:bb:77:0e:ae:31:f3:4b:ce:bc:b3:fd:
                    2a:78:c2:26:1c:6e:a2:39:c1:2f:9b:84:37:f7:00:
                    f2:38:6f:0d:86:e0:ec:5f:64:57:b1:9f:bd:54:98:
                    2a:7b:fc:a2:bd:cb:48:da:48:86:cb:67:67:7c:3a:
                    02:aa:db:2b:55:34:80:eb:d9:5f:f9:39:f0:55:94:
                    f8:90:1a:91:de:5a:73:b8:54:98:e2:81:60:08:f3:
                    a9:83:0a:57:b4:61:a9:49:a9:c5:37:d0:77:49:f7:
                    55:89:a0:c4:88:c8:d6:57:be:d0:76:76:99:bb:f1:
                    65:85:7f:c9:bf:62:c2:2a:65:04:3f:b9:2b:f9:3d:
                    1d:56:86:b7:95:81:73:3a:a3:d5:b7:4a:e4:61:3f:
                    ad:e0:82:f4:6b:62:de:66:f9:67:34:be:5b:bf:57:
                    84:0f:d2:d3:ce:c7:a6:21:c9:c1:42:da:4d:84:51:
                    49:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:EF:59:53:BF:B3:F0:FF:EF:85:EA:3A:0A:11:05:EE:66:D7:22:DE
            X509v3 Authority Key Identifier:
                keyid:10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:97:e6:94:8f:cf:2e:69:7a:8b:1e:4f:25:41:18:4e:08:78:
         06:78:38:48:2f:4f:48:f1:05:c0:ce:38:0c:9c:8c:36:ca:fc:
         92:1e:aa:c8:07:ea:dd:0c:3d:ae:15:e4:ff:60:82:b5:c7:0b:
         2a:93:59:7e:c7:be:26:31:4e:09:dc:9d:01:06:10:23:99:47:
         c9:aa:e3:48:ac:c7:86:3d:3e:82:47:5b:82:8e:43:98:15:d1:
         d0:88:ef:a2:61:d6:a5:45:b0:29:cc:f4:da:32:37:4f:96:6d:
         6a:c0:1d:15:1d:e0:7c:24:c8:14:ae:e4:03:f2:b0:f6:6a:5b:
         7a:4b:cc:1c:40:0c:b6:0b:86:75:e8:12:9a:8c:9b:f6:19:43:
         42:3b:14:e5:1c:fd:6b:4f:4c:44:4d:f0:7d:2b:bd:3f:57:86:
         4c:69:ad:79:74:9c:87:87:64:d3:cc:40:d3:39:86:10:4d:52:
         85:5a:b6:3a:d9:71:09:49:11:9c:7e:ae:eb:f8:a2:e0:3e:b2:
         72:50:fa:1d:c3:8a:02:46:40:5c:80:bd:47:24:2a:19:78:81:
         77:fa:f1:ed:2f:85:70:21:bf:d2:96:6a:b3:e7:42:97:49:8f:
         29:ad:a1:34:27:e3:52:27:a5:2c:18:3c:a7:e9:8c:fb:dc:71:
         a4:05:a5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:33:12 2025 by rpki-client