Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft
File:                     eaMEujS2GhXjeX_9TRrowhjBx78.mft (raw, json)
Hash identifier:          SZ+dP5Ft8bfBO7s9Wcz6Q1OEyo9PxB4483YpI+o6ueI=
Subject key identifier:   62:33:45:63:1D:FF:CF:A1:9A:B8:1C:02:DF:25:95:08:17:D2:69:72
Authority key identifier: 79:A3:04:BA:34:B6:1A:15:E3:79:7F:FD:4D:1A:E8:C2:18:C1:C7:BF
Certificate issuer:       /CN=79a304ba34b61a15e3797ffd4d1ae8c218c1c7bf
Certificate serial:       01964A0F8831B8283E50D587853F0B45A858
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft
Manifest number:          0C06
Signing time:             Fri 18 Apr 2025 18:00:53 +0000
Manifest this update:     Fri 18 Apr 2025 18:00:53 +0000
Manifest next update:     Sat 19 Apr 2025 18:00:53 +0000
Files and hashes:         1: b0H5BIPWspFi043SM6fKEKW_8OQ.roa (hash: ThJ0L4hUOokOS85srPc80jBMsa+mo0OF59zs8lkKdbA=)
                          2: eaMEujS2GhXjeX_9TRrowhjBx78.crl (hash: ZssJvWAdAt9leFM55CEvg8Js0188k0vW7dPOciaAXIc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 18:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:0f:88:31:b8:28:3e:50:d5:87:85:3f:0b:45:a8:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a304ba34b61a15e3797ffd4d1ae8c218c1c7bf
        Validity
            Not Before: Apr 18 18:00:53 2025 GMT
            Not After : Apr 19 18:00:53 2025 GMT
        Subject: CN=623345631dffcfa19ab81c02df25950817d26972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3e:b0:e2:6f:8d:39:75:e1:12:57:2a:9b:d2:
                    59:97:dc:6e:de:3b:6f:7f:fd:66:e9:bd:d6:97:70:
                    b0:47:03:65:bd:56:40:f7:2f:af:5a:51:cd:23:f3:
                    56:74:be:00:e4:3b:bb:0d:55:06:db:0f:f0:5d:f6:
                    a9:61:d1:51:2e:9f:49:83:b1:51:28:11:7f:d2:ac:
                    e2:57:f3:ce:8e:ba:22:34:fa:28:66:fb:ae:c7:c8:
                    f6:17:f8:08:45:9b:d6:de:31:23:7d:e7:7d:8c:06:
                    e2:ac:58:b2:2f:5b:9e:91:05:10:0e:cb:5b:2b:38:
                    9c:3b:0d:c3:81:e6:0d:e5:a4:f0:ae:a2:b2:2e:40:
                    f9:76:87:94:69:cb:f2:d4:48:d4:ad:9f:2d:95:f6:
                    0e:08:0a:20:d7:e8:7a:fb:9f:98:dc:48:ff:28:e7:
                    a1:1b:e7:ba:df:63:91:ae:08:ff:39:4a:c2:5e:3c:
                    f5:59:2a:c1:32:97:ec:8d:cc:84:9b:64:34:2c:cd:
                    f7:bc:3d:33:57:d5:04:da:b3:16:bc:9c:b9:95:ca:
                    56:50:b2:b4:d9:ce:58:21:87:56:47:0d:51:96:dd:
                    15:09:08:bc:86:fa:fd:35:de:98:87:65:80:33:50:
                    a5:9c:3f:8c:c9:b6:3d:49:27:b9:18:ea:6c:b4:32:
                    4b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:33:45:63:1D:FF:CF:A1:9A:B8:1C:02:DF:25:95:08:17:D2:69:72
            X509v3 Authority Key Identifier:
                keyid:79:A3:04:BA:34:B6:1A:15:E3:79:7F:FD:4D:1A:E8:C2:18:C1:C7:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:38:d4:83:72:03:aa:28:87:2b:0d:fc:a1:a1:39:eb:8c:a3:
         5d:32:e3:2a:93:3d:61:bd:fa:2b:64:ff:d0:95:74:53:cd:d6:
         d5:31:b4:5f:a7:42:18:14:45:82:b8:df:86:c1:fd:70:c1:a8:
         7d:35:6a:06:59:01:0c:30:52:38:93:6e:db:c9:cc:5c:c8:1e:
         dd:73:14:dd:8f:6b:27:9b:d2:ba:2a:ee:eb:38:30:9f:e2:4c:
         e2:8b:3d:a7:e7:3e:ea:af:b2:ae:0d:60:5e:9b:90:fb:c0:9d:
         9d:eb:23:6f:34:2f:86:f5:0c:22:9f:20:f0:e1:1e:e9:44:7f:
         74:58:9b:3b:40:b8:7c:0b:8e:a1:78:38:85:c5:c5:82:fb:65:
         16:86:bf:cf:6c:e6:cd:51:01:11:84:a9:03:6a:a5:d6:92:e5:
         12:e0:1f:2d:11:02:b7:a3:70:0a:2e:ca:87:20:ba:c3:42:8d:
         16:a2:72:48:6f:a9:b7:3f:85:12:95:ed:13:7c:45:70:8d:35:
         ce:a9:42:a1:2d:57:c0:90:47:41:b9:e9:06:9e:4c:b7:cf:d8:
         7f:db:98:4d:01:1e:4d:de:cc:ea:d0:92:ff:d0:43:cf:63:6c:
         20:27:73:35:fe:25:76:3b:8a:1a:7b:f3:99:04:d5:0d:cd:dd:
         ce:31:80:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:56:22 2025 by rpki-client