Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft
File:                     EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft (raw, json)
Hash identifier:          8NfkUpu1nuekbl7pmOT3tCRosELwLEbcryAcrt1lIps=
Subject key identifier:   D0:FD:0C:A4:04:62:BB:AD:6F:C9:BC:13:A4:CD:D0:11:DC:56:CB:C2
Authority key identifier: 10:03:CD:25:31:53:30:35:0D:73:F2:A3:57:9A:A9:5E:05:2B:71:8D
Certificate issuer:       /CN=1003cd25315330350d73f2a3579aa95e052b718d
Certificate serial:       0197458B58F3E0819C0F5AA5BBEF3ACD5C65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EAPNJTFTMDUNc_KjV5qpXgUrcY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft
Manifest number:          09AE
Signing time:             Fri 06 Jun 2025 14:00:49 +0000
Manifest this update:     Fri 06 Jun 2025 14:00:49 +0000
Manifest next update:     Sat 07 Jun 2025 14:00:49 +0000
Files and hashes:         1: EAPNJTFTMDUNc_KjV5qpXgUrcY0.crl (hash: shLn6gCZo44b9uu3aBUkN5tHpxNRoQI/K7IWAFAyEAc=)
                          2: m05UFQfMUkm8RmzIuHOsksJMdP0.roa (hash: yGsV8HL3U4MAtVDLG2EGnsRjRnklyUH2zR9pUN6kEek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EAPNJTFTMDUNc_KjV5qpXgUrcY0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:8b:58:f3:e0:81:9c:0f:5a:a5:bb:ef:3a:cd:5c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1003cd25315330350d73f2a3579aa95e052b718d
        Validity
            Not Before: Jun  6 14:00:49 2025 GMT
            Not After : Jun  7 14:00:49 2025 GMT
        Subject: CN=d0fd0ca40462bbad6fc9bc13a4cdd011dc56cbc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:99:fc:7a:cf:10:0f:0a:ee:0d:15:dd:f4:7b:
                    42:b7:9a:cc:ee:c7:dd:5b:9b:9f:d7:c5:9b:4d:23:
                    84:3b:55:c4:53:e0:fa:0e:c3:d0:f6:c7:90:20:df:
                    cb:bb:58:3e:1f:2b:d5:d7:2e:cf:39:2e:f7:dd:51:
                    2d:eb:bb:19:4a:5a:c4:0e:f7:c0:29:93:47:0b:74:
                    12:5c:12:2c:a3:3c:b7:8e:15:b9:c2:0d:d6:25:e8:
                    38:1e:f2:bf:6d:f6:d7:d9:6a:8c:d0:94:ab:46:91:
                    0c:45:83:92:0c:89:83:7a:5b:0d:9d:1a:ef:e4:8d:
                    fc:9c:1d:68:4a:60:55:28:e1:21:91:c6:a1:e6:1b:
                    0d:20:27:e8:69:9e:77:63:02:4e:5b:d8:2d:ff:0d:
                    33:30:8e:a6:82:da:7b:66:d1:cf:9b:8a:ed:f5:15:
                    69:4d:ef:84:92:ec:10:ca:da:24:68:04:09:8f:ad:
                    2e:ab:37:bc:b7:2d:66:84:67:68:26:85:16:04:61:
                    4e:e1:58:02:2e:85:90:b1:66:c4:02:de:65:47:da:
                    df:d3:97:87:6c:1c:bc:4d:7f:22:9e:2e:6e:e7:f8:
                    3f:d3:b0:41:7a:82:d8:43:e7:a6:1d:09:71:0b:d6:
                    b8:6d:f0:1a:5f:5d:8d:a1:1d:ec:86:28:ef:c4:cb:
                    f0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:FD:0C:A4:04:62:BB:AD:6F:C9:BC:13:A4:CD:D0:11:DC:56:CB:C2
            X509v3 Authority Key Identifier:
                keyid:10:03:CD:25:31:53:30:35:0D:73:F2:A3:57:9A:A9:5E:05:2B:71:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAPNJTFTMDUNc_KjV5qpXgUrcY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:e5:3c:53:9c:0d:52:5f:40:94:54:37:6d:75:39:1b:70:95:
         3f:80:a6:d6:ff:64:74:78:ae:af:66:78:9e:ca:8a:00:14:e9:
         7f:9c:dc:db:44:74:ab:19:d1:4c:dd:59:81:31:fe:5e:92:f6:
         44:5d:de:d0:1f:43:b2:da:d4:1d:a0:44:67:8d:ac:89:32:b4:
         a1:16:23:5e:ff:78:95:6c:38:2a:1d:21:60:2f:83:ec:70:58:
         5f:ec:2a:72:1f:49:b0:f0:82:48:26:cd:05:ad:c4:80:ed:b8:
         d2:12:ef:bc:0d:2b:dd:9d:91:07:92:d1:61:6f:0d:a0:b9:6e:
         d0:41:4f:d0:00:4f:cb:0c:e5:4a:1c:96:39:12:b4:5d:60:9c:
         77:0b:f6:8b:09:e6:02:a9:24:21:eb:5a:34:ab:f6:e8:82:24:
         03:91:f2:03:8b:cc:d5:20:96:e2:4b:52:1b:32:4a:da:2b:02:
         c0:db:07:82:ce:6b:f4:13:42:f1:be:ce:30:0f:ed:b3:8d:67:
         c3:71:7c:47:1a:f8:5c:98:30:b6:4c:9f:02:76:81:5a:dd:57:
         13:1f:97:70:e0:36:5b:56:f3:c6:89:1e:93:93:09:0b:6d:6d:
         d9:fc:1f:63:ea:7c:3d:1e:27:b5:13:38:ce:69:59:21:93:c4:
         1e:38:bb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:55:31 2025 by rpki-client