Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft
File:                     EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft (raw, json)
Hash identifier:          bRweyBRJl4aufQUiL1XcyszDR5xl4rcfiAxoTD9/u4c=
Subject key identifier:   DA:8E:B9:61:90:EC:8C:96:6B:CF:73:5B:73:D9:99:A1:40:DB:4F:E4
Authority key identifier: 10:C0:94:AD:0F:C7:BF:16:0A:A1:C1:AD:0C:53:8E:9B:F8:0E:59:F8
Certificate issuer:       /CN=10c094ad0fc7bf160aa1c1ad0c538e9bf80e59f8
Certificate serial:       01974D0E31FD07B2172BD979E18640AD434F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EMCUrQ_HvxYKocGtDFOOm_gOWfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft
Manifest number:          128D
Signing time:             Sun 08 Jun 2025 01:01:05 +0000
Manifest this update:     Sun 08 Jun 2025 01:01:05 +0000
Manifest next update:     Mon 09 Jun 2025 01:01:05 +0000
Files and hashes:         1: 5xCjSbVj0eQI-CbUmHCn2zV_TYM.roa (hash: oYg7Hd7YagslknVGleyR1QDuiaGvaAsro+gwXQIpa8k=)
                          2: EMCUrQ_HvxYKocGtDFOOm_gOWfg.crl (hash: JCYvbJm3qppv4n6VNGno3zRrbmwc/wqm3q0miMTh45k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EMCUrQ_HvxYKocGtDFOOm_gOWfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 01:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:0e:31:fd:07:b2:17:2b:d9:79:e1:86:40:ad:43:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c094ad0fc7bf160aa1c1ad0c538e9bf80e59f8
        Validity
            Not Before: Jun  8 01:01:05 2025 GMT
            Not After : Jun  9 01:01:05 2025 GMT
        Subject: CN=da8eb96190ec8c966bcf735b73d999a140db4fe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d1:50:79:a1:c2:85:61:c8:2f:dc:8d:6f:3c:
                    ca:03:8f:c2:3a:6f:fb:1f:fb:50:5b:2a:34:1a:4e:
                    84:43:3e:34:d5:3b:08:90:17:2f:ee:a1:95:31:21:
                    53:1a:e6:02:95:ed:14:20:f4:22:70:d4:8a:9f:ac:
                    41:82:90:35:15:1a:22:c5:63:b6:b5:4b:4f:f3:60:
                    28:83:87:3f:d9:31:04:65:6b:fe:92:4c:89:17:ef:
                    bf:46:e0:d8:ec:eb:de:50:ea:19:c9:93:ae:bf:c9:
                    c8:88:1f:a0:e8:2a:d2:5c:6d:cb:eb:89:a1:78:fd:
                    0a:e6:fa:f5:f9:18:e4:9b:ec:c9:cb:00:35:7a:80:
                    12:0f:fd:78:37:26:06:2e:b7:c6:ae:aa:3e:15:1b:
                    93:fb:5e:c2:57:a3:9c:9b:59:35:b2:b0:cd:8e:16:
                    91:35:a1:cb:b4:5e:e2:2c:c8:36:9e:a4:c7:42:84:
                    5b:a9:9d:9d:b1:fd:10:2a:64:61:73:40:16:24:28:
                    93:31:28:6a:90:18:08:d4:d5:55:0e:50:b8:18:b5:
                    37:95:b9:79:a2:75:38:50:92:30:61:a7:24:3b:d0:
                    af:39:3a:d9:58:36:d6:2d:a1:91:3b:21:ef:77:de:
                    1c:9c:f3:8e:8d:7a:f8:da:1c:81:c7:dd:ff:28:5a:
                    ed:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8E:B9:61:90:EC:8C:96:6B:CF:73:5B:73:D9:99:A1:40:DB:4F:E4
            X509v3 Authority Key Identifier:
                keyid:10:C0:94:AD:0F:C7:BF:16:0A:A1:C1:AD:0C:53:8E:9B:F8:0E:59:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMCUrQ_HvxYKocGtDFOOm_gOWfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:61:6a:4b:a4:8c:8d:37:9a:34:eb:1c:0b:c2:67:0b:2d:18:
         1d:29:d9:14:e7:4a:92:24:fc:d1:c3:2a:e0:0a:c5:24:57:6c:
         1a:6c:79:b1:33:04:c4:e1:ba:14:81:ac:65:48:c8:5c:06:91:
         80:48:81:23:7f:ba:3f:a5:ec:2c:76:bb:6a:33:81:0e:b2:8e:
         c4:e4:14:3e:42:c6:a6:77:33:e6:d1:4e:ea:90:97:43:29:c5:
         09:fd:a2:df:dc:6b:94:3c:9b:fa:be:84:60:19:66:dc:45:c6:
         18:63:2f:bb:13:00:17:c8:4c:6c:12:6c:e5:7d:8c:86:46:0c:
         29:4d:1f:95:ca:fe:9d:99:c4:cf:bf:b0:8b:c7:db:ed:5f:ad:
         59:e0:6c:f6:d7:c7:4e:92:1d:53:29:fc:1f:80:5d:cf:03:2a:
         87:2d:2b:0b:9b:51:af:96:61:e8:70:03:69:0f:3d:43:28:cf:
         3f:ca:03:a8:9c:f4:04:d8:28:f8:3c:07:05:a7:3e:0e:b0:c0:
         06:d0:f0:b1:4c:ab:ad:5b:88:ba:ef:1d:6b:b9:d6:13:64:ec:
         e6:43:6d:47:15:3e:3b:68:a5:be:e1:5b:94:4d:7a:62:f8:d4:
         3e:09:4d:e5:17:e9:97:48:d6:e3:5f:bd:09:c2:4a:82:b0:ae:
         83:0d:86:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:32:13 2025 by rpki-client