Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft
File:                     eQ7eZiID9FnpsZbSM4esKeSnxOU.mft (raw, json)
Hash identifier:          FZNegXnMCSDWDouHLodBUq9QHFoTEsSKFwxZAc466sc=
Subject key identifier:   9D:3A:A4:21:79:14:87:EB:D0:4E:78:16:F3:51:13:0B:E6:A6:5C:45
Authority key identifier: 79:0E:DE:66:22:03:F4:59:E9:B1:96:D2:33:87:AC:29:E4:A7:C4:E5
Certificate issuer:       /CN=790ede662203f459e9b196d23387ac29e4a7c4e5
Certificate serial:       019748C31EDD4DA306B93CFB858B784810AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft
Manifest number:          024B
Signing time:             Sat 07 Jun 2025 05:00:36 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:36 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:36 +0000
Files and hashes:         1: eQ7eZiID9FnpsZbSM4esKeSnxOU.crl (hash: LSA6nqTo9Dlw92Dm1wxbRTHLosJm0gaIQ53wZEwXss8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c3:1e:dd:4d:a3:06:b9:3c:fb:85:8b:78:48:10:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790ede662203f459e9b196d23387ac29e4a7c4e5
        Validity
            Not Before: Jun  7 05:00:36 2025 GMT
            Not After : Jun  8 05:00:36 2025 GMT
        Subject: CN=9d3aa421791487ebd04e7816f351130be6a65c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a9:00:99:24:45:9a:6b:75:0d:1e:cc:52:d3:
                    46:76:ef:9d:aa:a9:0a:85:28:cb:cf:60:7c:79:ba:
                    da:b6:1c:f4:bc:f1:f4:95:f0:92:bc:30:3e:9f:5f:
                    cb:d0:2c:4f:b5:c2:a0:c5:6c:18:93:9a:34:91:1d:
                    63:06:d6:43:fb:fc:36:13:59:a9:69:17:7b:4a:88:
                    71:58:2e:9c:57:83:fc:8f:10:86:47:a1:86:8e:e1:
                    0f:76:36:c0:4d:45:fe:2a:e8:14:11:c2:7e:58:c9:
                    c9:bd:23:fc:a0:3b:34:6d:cf:1d:72:f0:ff:86:25:
                    ed:47:79:0c:6b:b9:42:db:4c:43:8e:41:b9:29:5a:
                    e4:af:1a:ee:8b:eb:49:50:9b:d8:e2:40:2e:ad:5a:
                    69:9c:92:60:b1:bc:70:63:72:45:e5:59:5e:0a:5f:
                    3b:ac:17:64:9f:61:b4:4e:5e:94:65:b5:07:38:ed:
                    0f:ed:cc:e5:b3:e1:3b:6e:67:bc:23:4d:4c:f5:7a:
                    1a:ea:44:6d:6b:34:0c:26:35:8d:f5:c3:b5:ce:2c:
                    c6:30:23:c1:0d:9f:9c:10:4b:e7:67:e3:a8:07:fd:
                    27:23:3d:81:86:44:cb:6d:34:4d:14:b2:c0:d8:86:
                    e6:dc:59:71:8b:fe:1b:10:5a:d2:ee:fd:23:27:60:
                    07:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:3A:A4:21:79:14:87:EB:D0:4E:78:16:F3:51:13:0B:E6:A6:5C:45
            X509v3 Authority Key Identifier:
                keyid:79:0E:DE:66:22:03:F4:59:E9:B1:96:D2:33:87:AC:29:E4:A7:C4:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:d1:08:d2:3b:e1:d5:c1:25:35:49:8a:00:56:ff:6b:4d:cd:
         e6:a1:eb:3c:49:f4:5f:99:ae:33:80:39:c6:e3:a9:ff:54:89:
         c9:7e:45:37:89:53:ca:8f:b0:66:c4:3a:a6:0c:eb:44:c8:60:
         40:e4:c8:9b:d8:97:72:1e:73:3e:c5:32:44:66:a6:8b:6c:e9:
         30:ed:54:2d:5c:e0:d9:2f:bd:7f:7f:a7:de:b2:7a:d0:e1:7d:
         7e:1e:01:56:13:d3:ee:b7:70:3f:a4:34:33:e3:04:ca:63:f7:
         90:71:99:45:64:ab:c6:81:a6:4f:8a:05:8d:97:04:d4:a0:9f:
         d2:db:b4:b4:85:2c:67:83:4f:e1:c7:16:4d:48:45:29:02:67:
         50:15:97:52:58:34:48:9c:eb:01:61:63:69:d1:eb:e5:07:b8:
         96:6a:ac:72:53:71:e7:4f:f4:fb:07:24:f6:60:d6:cc:c3:82:
         09:5b:4e:49:7d:e0:9e:6a:78:29:11:d6:7d:be:05:86:32:d9:
         5c:0e:3b:81:d2:c6:a4:0c:59:e1:e5:a9:b9:f8:5e:fb:16:cc:
         85:64:3f:99:ba:3c:0e:82:ac:8d:5c:2b:f1:ad:a7:31:b7:57:
         32:69:b7:33:d9:cf:da:32:c6:e7:61:44:f4:14:8c:48:3b:cd:
         4a:ad:9f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:55:07 2025 by rpki-client