Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
File:                     eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft (raw, json)
Hash identifier:          NrDPsAe35w6GddOSOUlTsBVycpICJgUqfo6452/5l4E=
Subject key identifier:   30:D6:8C:03:E1:F2:83:40:9B:AB:17:02:06:FB:44:97:A7:08:70:D0
Authority key identifier: 7B:27:11:15:09:10:DC:D1:B1:C7:AB:53:14:48:BD:83:21:FC:1C:36
Certificate issuer:       /CN=7b2711150910dcd1b1c7ab531448bd8321fc1c36
Certificate serial:       01974D7BEFA5EAB929830C86703165073ED6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
Manifest number:          0465
Signing time:             Sun 08 Jun 2025 03:00:57 +0000
Manifest this update:     Sun 08 Jun 2025 03:00:57 +0000
Manifest next update:     Mon 09 Jun 2025 03:00:57 +0000
Files and hashes:         1: eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl (hash: PYTMs0zGjiI0O+Vux9IoU8qfy2q6gR9n3dT3/Q32gC0=)
                          2: gP8qEhtADxz-fNyyU3vcu8NYBMU.roa (hash: UQJK4mMNNX6B898sPio2JOjeNiXhgW4l71UxZw7LEXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:7b:ef:a5:ea:b9:29:83:0c:86:70:31:65:07:3e:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b2711150910dcd1b1c7ab531448bd8321fc1c36
        Validity
            Not Before: Jun  8 03:00:57 2025 GMT
            Not After : Jun  9 03:00:57 2025 GMT
        Subject: CN=30d68c03e1f283409bab170206fb4497a70870d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7b:af:85:50:37:d3:60:f0:f8:f2:c8:75:dc:
                    87:34:c5:f7:f3:64:cc:3e:9e:58:31:67:8b:be:36:
                    91:87:f0:1a:b5:57:11:33:7a:47:9a:aa:8c:55:4f:
                    e0:85:6d:8e:db:57:40:bc:72:30:25:a0:e3:5b:b9:
                    b2:6f:8c:93:80:ec:37:57:6b:a9:9d:77:a3:9c:30:
                    6e:9f:8f:c9:5e:cb:64:34:ab:ff:b5:46:fd:20:2f:
                    c9:5b:bf:fb:75:6e:47:c7:80:9f:c4:34:f3:d4:c0:
                    71:72:67:3c:f7:25:4c:7b:28:48:de:d3:37:04:6a:
                    ba:fc:a2:a5:d4:2c:d7:ad:5c:1e:21:cd:bc:bf:95:
                    d8:b8:bc:37:a2:87:5e:72:39:09:92:f7:2d:c6:f6:
                    0f:7a:bb:2d:a2:92:c0:8f:41:db:42:ef:af:4b:f3:
                    54:b9:d1:05:f3:ef:a3:98:54:9d:c1:76:6f:3b:da:
                    95:65:15:9f:f9:6c:23:96:9b:46:c7:54:20:0a:2d:
                    97:51:05:92:eb:8d:3d:1d:2f:6e:34:9a:af:e0:5c:
                    b8:99:ed:76:bd:2a:69:c6:2b:06:ce:6b:5b:1f:5e:
                    1c:ce:13:e6:8f:8f:11:82:25:14:24:29:5f:64:37:
                    15:53:05:84:f4:56:66:2b:2e:85:d8:39:ed:f1:76:
                    18:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D6:8C:03:E1:F2:83:40:9B:AB:17:02:06:FB:44:97:A7:08:70:D0
            X509v3 Authority Key Identifier:
                keyid:7B:27:11:15:09:10:DC:D1:B1:C7:AB:53:14:48:BD:83:21:FC:1C:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:9d:9a:bc:6d:c4:3b:a5:08:da:6a:41:4b:72:89:08:32:8b:
         89:90:38:e6:2f:7d:05:cd:93:49:5c:6b:7b:67:bc:00:e3:bf:
         13:39:b3:75:33:4c:75:4d:cd:50:bf:b2:84:1e:67:27:3e:f9:
         3a:16:28:7a:d1:ff:78:02:ab:6b:7a:44:e3:e5:3c:1e:62:34:
         de:7d:2e:82:02:87:96:74:4c:f6:2b:8a:31:6b:3a:4f:30:e7:
         db:f6:da:80:cb:8d:21:d0:e3:73:74:67:cb:3f:04:d0:99:7d:
         7e:6c:3d:49:4f:01:dd:fc:07:9a:e8:33:6c:bd:bc:c9:e2:03:
         14:e1:43:60:e9:3a:50:f8:5d:eb:01:37:76:61:f5:c0:4d:f8:
         23:43:79:22:c5:e0:0b:eb:7b:84:7f:17:65:cc:47:7e:13:5b:
         48:05:5d:cb:77:0d:24:5f:72:da:79:00:9b:16:87:80:47:f6:
         21:51:95:04:a2:7c:19:2d:dd:69:c2:79:80:9d:67:29:3b:c6:
         d0:4b:1a:8f:42:85:3f:17:35:c9:6d:43:a7:aa:38:69:d8:d5:
         f2:da:53:df:fa:a8:b8:29:90:69:53:75:25:08:43:c3:b0:ab:
         f6:70:e0:03:e2:05:b5:99:30:21:bc:5a:73:df:70:6c:81:f2:
         6f:42:e3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:51:37 2025 by rpki-client