Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
File:                     7uTEl10mDZew0zxNbNDVh_EMIqA.mft (raw, json)
Hash identifier:          iHq/VgXw+B20swjbHdsBzZKi2hBjdf8caQb9rbfW8gY=
Subject key identifier:   7C:1A:EA:90:72:EA:48:69:A3:7C:76:D9:CA:F2:A8:B6:32:A1:34:8F
Authority key identifier: EE:E4:C4:97:5D:26:0D:97:B0:D3:3C:4D:6C:D0:D5:87:F1:0C:22:A0
Certificate issuer:       /CN=eee4c4975d260d97b0d33c4d6cd0d587f10c22a0
Certificate serial:       019759EE753965FA25BC9E71597B624ABC7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
Manifest number:          1572
Signing time:             Tue 10 Jun 2025 13:01:29 +0000
Manifest this update:     Tue 10 Jun 2025 13:01:29 +0000
Manifest next update:     Wed 11 Jun 2025 13:01:29 +0000
Files and hashes:         1: 7uTEl10mDZew0zxNbNDVh_EMIqA.crl (hash: V6yMFvO7e9d2HmfnY7LUMAGCd7t/Fg1/MMBFfKuHyG8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 13:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:ee:75:39:65:fa:25:bc:9e:71:59:7b:62:4a:bc:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eee4c4975d260d97b0d33c4d6cd0d587f10c22a0
        Validity
            Not Before: Jun 10 13:01:29 2025 GMT
            Not After : Jun 11 13:01:29 2025 GMT
        Subject: CN=7c1aea9072ea4869a37c76d9caf2a8b632a1348f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9f:15:07:25:1f:38:b8:cd:4d:c9:40:c6:33:
                    d1:9a:e7:c5:0f:d8:7d:67:9f:ab:d4:3b:05:bd:44:
                    38:ed:8d:dd:8e:1e:eb:b0:51:9a:d1:db:06:39:20:
                    d1:2a:63:48:aa:66:45:7f:aa:7b:c9:35:1d:8c:de:
                    38:a0:28:9c:93:a1:78:d3:6a:1b:10:b3:52:5b:ba:
                    c9:fc:b0:2b:07:42:40:db:02:14:b3:ee:64:95:6a:
                    91:6a:53:9d:7c:5b:9e:f9:b6:0d:1f:23:73:d2:d4:
                    58:58:96:e1:1f:51:cf:a5:ea:1b:ff:55:08:a7:d9:
                    2b:66:11:93:23:c6:75:f7:fe:44:ec:08:9e:51:52:
                    e6:ab:ba:39:a7:3f:fe:7b:49:61:0f:3d:5f:f5:90:
                    21:3c:fe:89:14:ea:97:5d:99:bf:0e:e4:34:fd:64:
                    fc:b7:35:7f:f2:c0:27:27:27:4b:c7:be:bc:3d:92:
                    b3:ea:91:62:1c:1a:0b:82:4c:38:fb:b5:d2:8e:7c:
                    9c:29:bd:f4:11:a7:ee:dd:90:84:a6:67:cc:6b:74:
                    9d:1a:9b:95:3e:32:7b:c3:0e:3b:20:8a:4f:e1:3f:
                    37:e2:6d:92:31:73:6c:55:37:db:ca:8d:9a:44:e0:
                    c0:93:03:18:aa:31:a2:de:d6:5e:a2:af:9c:1b:d7:
                    57:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1A:EA:90:72:EA:48:69:A3:7C:76:D9:CA:F2:A8:B6:32:A1:34:8F
            X509v3 Authority Key Identifier:
                keyid:EE:E4:C4:97:5D:26:0D:97:B0:D3:3C:4D:6C:D0:D5:87:F1:0C:22:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:70:08:f4:06:b8:f2:b5:ca:c3:8f:e5:44:0d:02:f5:c5:b5:
         dc:9b:79:3b:b2:6e:e2:bb:ee:dd:60:cd:83:02:22:2a:07:be:
         46:6e:20:a7:bb:98:a1:ee:86:2b:82:76:de:5b:f4:d8:3a:7c:
         6b:1a:77:1d:02:f0:91:bb:59:94:7a:78:ec:2f:e9:19:af:57:
         7c:80:11:1a:6f:c3:2e:e2:d7:57:81:d7:49:19:f2:ef:e0:d1:
         d5:3b:47:d0:ca:5d:b0:fe:64:e4:4a:1b:0d:2f:ae:9d:57:ae:
         e1:ae:ae:84:98:a2:b0:ba:eb:40:e0:0c:53:0d:e1:1d:6a:aa:
         39:5c:c0:2c:11:d7:9e:2c:95:b0:7f:cd:fd:3b:72:48:0b:5b:
         c4:6b:87:a7:89:b1:a7:a4:f2:56:37:ec:b6:e9:04:cb:77:d3:
         76:08:3b:0c:1e:96:25:c7:16:af:d0:f1:8d:0e:89:72:5c:4b:
         bc:9f:d6:56:13:77:29:2a:b5:33:1c:3c:34:71:55:35:0a:18:
         c2:f4:97:04:96:33:78:a8:3c:92:d4:d4:ff:5f:2d:fe:ed:fe:
         dc:1e:1c:81:b5:3e:bc:f3:72:8f:b0:f0:d8:d0:c5:3d:9e:d9:
         04:10:fb:fc:52:d1:a2:27:65:50:63:1f:07:e8:47:5f:9c:f3:
         b9:95:7d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:35:55 2025 by rpki-client