Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft
File:                     eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft (raw, json)
Hash identifier:          lfqxT0P6VRcNOI9h8Ii8aqU0kkb/AYBlk1PQ55uJDnM=
Subject key identifier:   0F:E8:72:89:AB:4A:8D:AD:47:AD:8D:BA:1B:20:D9:FA:FC:58:BE:89
Authority key identifier: 79:46:C5:60:10:64:10:1B:1B:54:CF:5C:6E:FC:D4:07:F1:79:11:B9
Certificate issuer:       /CN=7946c5601064101b1b54cf5c6efcd407f17911b9
Certificate serial:       019749D59AE37A6623B97443FF81DE5321B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft
Manifest number:          0C5E
Signing time:             Sat 07 Jun 2025 10:00:24 +0000
Manifest this update:     Sat 07 Jun 2025 10:00:24 +0000
Manifest next update:     Sun 08 Jun 2025 10:00:24 +0000
Files and hashes:         1: c7GuDPd6K8Mw6TfxSKv8OUbqyUg.roa (hash: L3mZu6WxGNpKrVa630mczwqlZOlcgqKqthoD3BhJb+k=)
                          2: eUbFYBBkEBsbVM9cbvzUB_F5Ebk.crl (hash: hJr2Pg9vQCk/JCNt6Nx5DsMbz2veeQrCk3RYz8SySfs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d5:9a:e3:7a:66:23:b9:74:43:ff:81:de:53:21:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7946c5601064101b1b54cf5c6efcd407f17911b9
        Validity
            Not Before: Jun  7 10:00:24 2025 GMT
            Not After : Jun  8 10:00:24 2025 GMT
        Subject: CN=0fe87289ab4a8dad47ad8dba1b20d9fafc58be89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c3:8f:c3:4e:96:1b:d6:51:b6:60:f1:5f:af:
                    06:f3:6d:ff:a2:aa:ee:75:51:07:a8:6d:30:2c:b3:
                    f6:a5:22:b9:e0:6a:3f:8c:87:ec:02:b0:01:d2:25:
                    6f:78:74:03:c1:c5:f9:34:b4:40:2d:af:a5:09:4f:
                    f6:ed:5d:44:e6:94:ea:51:c0:59:f5:fd:b8:ec:96:
                    f1:6c:17:1c:7b:01:6c:4e:d7:7e:b7:91:52:a0:ff:
                    4e:41:c4:e5:d3:5c:38:7e:4c:e6:0a:58:e1:35:df:
                    82:89:53:3f:d6:d5:85:62:5c:69:87:57:8f:69:7e:
                    79:91:11:e9:41:d5:19:7f:6c:f3:4d:13:94:20:f4:
                    9f:81:f8:50:e9:9a:36:0d:b1:6f:5f:c7:9f:7e:45:
                    78:02:e1:e3:87:c3:88:c9:5e:b3:c3:72:ba:7b:6f:
                    ce:a7:04:70:6b:ce:ee:4c:cf:c9:ad:d5:65:61:13:
                    b1:a3:ac:c9:88:a7:54:e7:3b:30:2c:ef:b3:4f:da:
                    cd:17:6b:4a:57:67:22:78:af:a0:b6:fd:80:95:9c:
                    64:9d:79:de:ca:14:b0:0a:19:c4:87:41:e6:cf:ac:
                    cc:14:fb:d4:d2:6f:63:3e:c4:d0:ba:23:b8:bd:04:
                    bc:af:bb:79:f5:e5:9f:b0:2e:ac:c6:0a:10:e4:70:
                    c1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E8:72:89:AB:4A:8D:AD:47:AD:8D:BA:1B:20:D9:FA:FC:58:BE:89
            X509v3 Authority Key Identifier:
                keyid:79:46:C5:60:10:64:10:1B:1B:54:CF:5C:6E:FC:D4:07:F1:79:11:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:a4:f3:68:8d:40:44:53:73:f8:de:ff:1e:38:f6:28:54:a2:
         c4:52:34:37:f0:dd:f8:a1:31:13:2a:35:5e:76:50:09:cc:a1:
         31:cb:43:22:ce:99:df:48:b1:51:8c:9d:eb:92:c0:c9:a5:a0:
         a9:d7:00:f1:bb:d7:1a:b4:c1:01:eb:69:2e:e3:1e:35:18:1a:
         f1:e0:93:7a:52:7b:6a:b0:11:af:3e:61:8e:a2:32:60:10:a7:
         11:37:45:6e:b9:ba:69:f4:a0:e5:48:31:fc:ac:cc:b6:a6:44:
         1d:95:f5:59:42:b5:ce:39:12:a6:61:a0:b3:eb:6c:c1:44:07:
         82:94:51:1d:5e:76:f0:81:96:5d:86:e5:8e:7b:df:8d:06:fe:
         66:94:78:82:0a:4a:6b:d4:32:c8:ce:19:8f:32:42:62:7a:81:
         0b:ad:31:f7:1d:10:dc:eb:0c:60:cd:00:96:3e:33:63:bd:83:
         e7:f0:9d:a4:e2:3f:bc:1e:44:a5:ab:c7:fa:eb:2e:92:1e:3e:
         4c:09:24:01:b6:88:75:d4:1b:6c:46:2a:a7:91:f1:c0:1a:c1:
         cf:f1:16:f8:83:4d:58:9d:c2:4f:8d:53:1a:d0:59:99:13:02:
         49:62:3b:c4:38:6c:19:ed:9f:80:f7:ab:3a:b8:11:73:e3:04:
         ba:33:0b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:32:01 2025 by rpki-client