Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft
File:                     eSMEzs5_tlUdYh4ld0N1PX0-fro.mft (raw, json)
Hash identifier:          MIq9n+80a7vQvk/aZXbhB5jqu4AY7l4TMtyCIvMF8DA=
Subject key identifier:   07:42:29:8F:23:6D:94:F1:18:0C:1D:19:D6:E7:08:B0:F8:6C:43:94
Authority key identifier: 79:23:04:CE:CE:7F:B6:55:1D:62:1E:25:77:43:75:3D:7D:3E:7E:BA
Certificate issuer:       /CN=792304cece7fb6551d621e257743753d7d3e7eba
Certificate serial:       01964BFDA952ADE3CECFB6E6F945FC2700FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eSMEzs5_tlUdYh4ld0N1PX0-fro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft
Manifest number:          123E
Signing time:             Sat 19 Apr 2025 03:00:36 +0000
Manifest this update:     Sat 19 Apr 2025 03:00:36 +0000
Manifest next update:     Sun 20 Apr 2025 03:00:36 +0000
Files and hashes:         1: IMdPglYzX5a0Y8UZyR6PoX9F3qI.roa (hash: LlemrthVpDv3Bg7I6x+S4EwJBWPGL+Tm33DKrH5qsTc=)
                          2: eSMEzs5_tlUdYh4ld0N1PX0-fro.crl (hash: 2GVYUnOW34vct7MhtoEjDhbSJOLYZxsZ2ZHDixAznfU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eSMEzs5_tlUdYh4ld0N1PX0-fro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 03:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:fd:a9:52:ad:e3:ce:cf:b6:e6:f9:45:fc:27:00:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=792304cece7fb6551d621e257743753d7d3e7eba
        Validity
            Not Before: Apr 19 03:00:36 2025 GMT
            Not After : Apr 20 03:00:36 2025 GMT
        Subject: CN=0742298f236d94f1180c1d19d6e708b0f86c4394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:66:f4:a8:78:dc:4f:ad:71:2d:07:46:a4:e9:
                    3c:b6:f5:5a:29:c1:4e:ec:95:9c:37:4e:dd:46:61:
                    7a:9f:5b:da:18:02:e2:1c:28:55:65:d3:bb:6f:66:
                    48:38:76:f1:ca:e4:27:89:53:fc:7d:b5:55:7f:c8:
                    74:7c:09:8c:01:b7:ea:05:f8:48:4d:fa:5f:9d:88:
                    e9:19:a2:9e:62:53:a7:6d:63:97:31:56:9e:77:7c:
                    e4:89:c7:5c:36:25:af:a9:71:a1:02:14:db:6c:fd:
                    a0:a4:ea:79:95:9c:ec:42:c8:d4:46:74:5b:29:fb:
                    99:b5:2f:8f:a8:97:41:bb:49:6c:be:bc:c7:5e:41:
                    30:bc:e0:db:ff:6c:c2:96:ee:24:49:7a:ae:ee:60:
                    d9:d5:82:92:d0:ef:a4:66:28:27:33:2f:78:73:43:
                    ba:f2:70:fa:2d:26:1a:ec:e9:07:78:72:a1:f3:1a:
                    0b:a0:0b:ac:87:9e:96:e3:04:1f:61:16:53:cb:c5:
                    76:1f:eb:f3:d0:3b:93:4a:88:b3:1a:ac:86:7e:26:
                    af:87:e3:e3:74:b1:54:17:26:18:f8:ca:0b:20:dd:
                    8c:fb:76:43:ec:d4:dd:27:d9:98:ed:e8:c2:0e:0f:
                    bb:30:34:6a:da:86:ec:8c:a0:4b:67:67:55:30:ff:
                    7d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:42:29:8F:23:6D:94:F1:18:0C:1D:19:D6:E7:08:B0:F8:6C:43:94
            X509v3 Authority Key Identifier:
                keyid:79:23:04:CE:CE:7F:B6:55:1D:62:1E:25:77:43:75:3D:7D:3E:7E:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSMEzs5_tlUdYh4ld0N1PX0-fro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:a5:14:9d:ef:44:5f:fc:19:02:e7:c9:ee:42:b0:51:55:53:
         17:9f:71:a8:2a:ea:df:84:cb:0c:f6:34:5d:84:17:b8:0c:7b:
         d9:1f:9e:7a:80:20:5a:2b:b5:4e:49:2b:b9:1a:53:47:b2:59:
         7f:58:40:a8:c1:e5:9c:38:fb:a9:10:eb:b5:4c:a0:ea:ad:80:
         a2:07:a0:0b:00:7e:38:ba:d8:8b:da:de:43:32:1a:2f:ad:9e:
         81:7e:81:73:99:ef:06:44:0b:08:56:38:68:b1:60:a5:8d:8d:
         c5:03:95:b1:da:6c:93:50:a9:2d:1d:71:46:fb:27:0c:ef:d2:
         3d:28:32:ec:01:25:69:0c:a9:00:94:ed:17:81:d3:92:46:1f:
         57:cb:9d:cb:2a:69:9b:8d:a6:bb:95:4a:ce:9d:e1:71:6e:b0:
         f5:20:41:57:51:30:d6:b6:06:94:ec:21:18:96:3f:5e:28:f0:
         e4:79:8f:8e:ab:f0:96:65:eb:95:71:c1:b9:45:bf:9a:76:a4:
         d7:db:79:5d:cd:58:74:65:d6:b8:ba:1c:2d:04:71:27:38:f8:
         d0:a4:b7:c7:8c:8c:7b:c2:f8:a2:0b:3f:19:34:df:a1:2f:f7:
         fd:5b:ad:8d:d4:81:ce:4f:24:33:5b:8f:f2:c9:68:da:2b:a3:
         0a:61:b5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:47:10 2025 by rpki-client