Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft
File:                     EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft (raw, json)
Hash identifier:          HSCt5+UcrZfe8BXFSD9NzQEwAJC8H16EVu/iOK+oPTI=
Subject key identifier:   E9:50:1B:CC:6D:9E:8E:7A:87:90:E1:5F:05:7A:49:D2:90:3D:24:99
Authority key identifier: 12:E6:40:42:B6:E7:28:8A:48:5D:B2:70:C5:51:32:9B:80:2F:D8:C4
Certificate issuer:       /CN=12e64042b6e7288a485db270c551329b802fd8c4
Certificate serial:       01964D7DDBE442A53FF20932FE92E037D0FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EuZAQrbnKIpIXbJwxVEym4Av2MQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft
Manifest number:          11B6
Signing time:             Sat 19 Apr 2025 10:00:16 +0000
Manifest this update:     Sat 19 Apr 2025 10:00:16 +0000
Manifest next update:     Sun 20 Apr 2025 10:00:16 +0000
Files and hashes:         1: BXtbJRTGPhW1VlCQ66qjiZWhbAM.roa (hash: 9OVGLVBb4qleVwsOx0lriWprWo/Ar1aDDscASTXyLXo=)
                          2: EuZAQrbnKIpIXbJwxVEym4Av2MQ.crl (hash: tlrXkvg8ERuxTa3f6XFfB0trfOQmQ4/RqEfEPsccLUk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EuZAQrbnKIpIXbJwxVEym4Av2MQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:7d:db:e4:42:a5:3f:f2:09:32:fe:92:e0:37:d0:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12e64042b6e7288a485db270c551329b802fd8c4
        Validity
            Not Before: Apr 19 10:00:16 2025 GMT
            Not After : Apr 20 10:00:16 2025 GMT
        Subject: CN=e9501bcc6d9e8e7a8790e15f057a49d2903d2499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:22:de:10:62:89:3a:8b:cc:66:e2:f1:6f:91:
                    97:d9:11:48:f6:27:1d:e6:28:68:63:f5:c1:00:db:
                    cc:46:58:b7:3a:ea:8d:a5:b7:e8:af:9b:49:8a:4a:
                    8e:b8:7c:cd:69:ae:d6:3a:01:1c:41:89:ab:3e:54:
                    a6:26:bc:44:29:21:43:95:99:40:e2:2c:c9:bd:c2:
                    25:e5:73:1b:aa:3d:05:2b:1e:c7:c0:91:b7:b9:c4:
                    a4:e5:75:c6:93:0d:e9:d8:54:40:a0:a4:cb:23:1f:
                    18:4e:60:d9:01:3d:22:0d:67:2a:49:8a:d9:0f:f7:
                    60:17:8c:a5:ae:87:3b:4d:7d:e0:3c:7b:55:3d:ae:
                    db:63:95:f3:0d:63:04:07:a6:7c:79:1c:0a:23:36:
                    d2:65:63:f1:d2:7a:38:5f:63:01:54:cc:eb:7c:d4:
                    b0:d1:a2:d9:ec:7f:dc:d8:e8:b7:77:9f:02:be:c2:
                    e2:57:d0:2d:49:3d:5b:77:0e:82:23:01:a5:32:24:
                    6c:27:b5:76:08:ef:e8:b1:cd:2c:26:0a:bd:a3:61:
                    94:3e:d3:94:26:4c:f9:7f:5a:4c:4e:99:2c:45:8d:
                    cc:93:9f:1b:a7:4b:dd:de:ee:81:96:98:96:54:88:
                    0a:04:87:7c:6d:86:44:22:1c:dd:56:1e:21:b8:52:
                    64:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:50:1B:CC:6D:9E:8E:7A:87:90:E1:5F:05:7A:49:D2:90:3D:24:99
            X509v3 Authority Key Identifier:
                keyid:12:E6:40:42:B6:E7:28:8A:48:5D:B2:70:C5:51:32:9B:80:2F:D8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EuZAQrbnKIpIXbJwxVEym4Av2MQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:37:96:bd:c5:e0:6e:3d:6c:9a:1b:97:01:c3:63:e4:01:ee:
         88:77:eb:0a:1d:79:49:3e:56:97:dc:88:ec:10:81:3b:a8:fa:
         05:1b:0e:b8:73:a3:14:af:c8:c0:23:e7:28:b1:98:03:46:6d:
         e5:02:c0:66:5d:39:95:f4:84:60:c8:63:0a:b7:6c:fd:d6:a4:
         76:5b:e0:ca:be:b3:cd:88:d0:57:e9:4b:e7:3d:23:1a:01:08:
         09:b2:f3:46:58:6c:1a:3d:8a:5c:be:30:d6:88:a2:ae:ff:a9:
         2e:b3:da:0e:22:37:b0:37:74:e9:d2:92:62:80:41:08:56:ec:
         41:d9:cd:b4:43:fa:1b:20:9c:03:64:e5:96:ae:86:1d:4a:59:
         99:c0:91:f0:30:a1:97:72:c2:3c:14:bf:81:6f:54:8f:7b:db:
         6c:d2:90:2b:76:11:40:87:95:38:ed:1c:a3:04:9b:7f:ae:2a:
         85:7a:1a:dd:bd:35:cf:e8:a6:99:8c:2d:0d:fd:8b:a1:94:39:
         53:e6:8f:4f:dc:df:73:06:01:26:84:65:4b:da:70:3f:73:55:
         27:26:06:48:1a:29:3c:46:d0:79:4f:a8:0f:58:00:44:7d:fe:
         66:11:c0:a6:26:ab:29:88:a5:fc:83:a9:f8:5a:75:1d:bf:77:
         2d:65:99:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:45:24 2025 by rpki-client