Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft
File:                     EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft (raw, json)
Hash identifier:          7x1jTvz2F3gcq0aT8A677gXRnmQcfz+QjJYYw82RifI=
Subject key identifier:   99:47:36:75:09:91:81:44:EC:AA:79:BA:C0:2C:0A:9A:7A:C9:67:9B
Authority key identifier: 12:E6:40:42:B6:E7:28:8A:48:5D:B2:70:C5:51:32:9B:80:2F:D8:C4
Certificate issuer:       /CN=12e64042b6e7288a485db270c551329b802fd8c4
Certificate serial:       0197469E23AA0098D61546184104B40626C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EuZAQrbnKIpIXbJwxVEym4Av2MQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft
Manifest number:          1237
Signing time:             Fri 06 Jun 2025 19:00:58 +0000
Manifest this update:     Fri 06 Jun 2025 19:00:58 +0000
Manifest next update:     Sat 07 Jun 2025 19:00:58 +0000
Files and hashes:         1: BXtbJRTGPhW1VlCQ66qjiZWhbAM.roa (hash: 9OVGLVBb4qleVwsOx0lriWprWo/Ar1aDDscASTXyLXo=)
                          2: EuZAQrbnKIpIXbJwxVEym4Av2MQ.crl (hash: qpHAaXWlGq0ZGp6sBJuUvsbHkbnEcW6iFOwAqlpCpnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EuZAQrbnKIpIXbJwxVEym4Av2MQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:23:aa:00:98:d6:15:46:18:41:04:b4:06:26:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12e64042b6e7288a485db270c551329b802fd8c4
        Validity
            Not Before: Jun  6 19:00:58 2025 GMT
            Not After : Jun  7 19:00:58 2025 GMT
        Subject: CN=9947367509918144ecaa79bac02c0a9a7ac9679b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:eb:13:1d:78:e7:02:e8:c8:28:a0:da:26:66:
                    81:75:ef:43:bd:43:59:14:99:d7:43:94:f4:ef:b7:
                    dc:63:c1:1c:d1:d2:b1:60:46:7a:df:e5:97:3b:5c:
                    f8:56:1e:a1:a4:1a:d1:d3:ad:d4:45:0c:27:f3:9e:
                    3e:1d:ad:a6:fe:cb:1b:a3:b1:0b:db:f7:4d:64:3b:
                    67:93:31:6b:3a:93:b5:08:c4:4c:8c:92:19:fc:c6:
                    b0:8b:31:7f:73:e4:3c:c9:50:7a:9a:a2:a5:3a:7f:
                    1c:9e:c8:98:e7:36:d9:1f:b5:76:28:2c:f8:37:15:
                    44:0c:ee:2c:59:e1:6d:27:ba:c6:40:a4:19:5f:c9:
                    1d:32:8e:56:b8:b9:06:d5:bb:76:19:16:60:93:e0:
                    23:a1:ce:b6:fb:ba:30:9a:a7:d1:ab:d3:ca:1e:6b:
                    4d:2b:2f:2b:3a:4d:f3:bf:87:e9:b6:2c:d4:0a:f2:
                    09:3a:60:55:89:ca:f1:8b:b0:a1:89:a9:f4:e1:65:
                    c4:ce:fa:bc:a3:2f:2e:35:ea:7b:b5:3d:54:58:17:
                    2e:32:18:3c:a0:6a:de:24:20:ff:de:6f:a1:39:90:
                    df:e4:f2:b1:cb:d4:00:f4:48:44:ea:4d:fa:8f:64:
                    ee:50:dd:c8:e3:6a:03:06:71:cb:e9:82:8e:aa:63:
                    53:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:47:36:75:09:91:81:44:EC:AA:79:BA:C0:2C:0A:9A:7A:C9:67:9B
            X509v3 Authority Key Identifier:
                keyid:12:E6:40:42:B6:E7:28:8A:48:5D:B2:70:C5:51:32:9B:80:2F:D8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EuZAQrbnKIpIXbJwxVEym4Av2MQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:43:3a:db:6c:62:a7:29:ce:de:04:dd:8f:68:8f:6f:04:64:
         c7:c7:69:17:ed:18:c0:73:08:a8:49:09:65:1c:f8:15:e5:53:
         cb:35:29:42:b3:e3:3d:92:c3:87:e4:a9:e0:b1:3e:65:b1:a1:
         07:b0:e9:a0:ff:31:9d:e4:9b:00:ca:a8:d6:1e:2d:b7:df:39:
         be:ec:26:77:34:b1:42:e5:a1:dc:da:30:86:b6:cd:29:74:07:
         06:7a:d0:68:92:ae:a4:53:d1:63:39:23:0f:28:99:67:30:e9:
         82:dd:39:89:33:8b:13:e6:7d:75:41:1a:24:e8:09:99:31:d0:
         85:4b:a9:0f:b7:e3:35:d0:6c:c2:a0:9c:c2:2a:27:22:b2:88:
         4f:b2:e8:99:c5:43:0f:f9:2a:84:6e:d0:24:f3:84:80:1d:19:
         9f:05:4c:e8:21:b6:f1:d3:c9:3d:3a:0a:9f:55:bc:8d:04:61:
         e3:4a:f8:e2:b7:4d:c4:9a:a0:06:66:b4:fd:8d:45:a0:29:48:
         b3:b1:f5:12:0c:bb:96:2d:5a:4a:0b:4c:24:0b:3a:29:cb:3f:
         cb:69:ab:61:29:4d:65:c4:30:cb:c6:73:75:69:91:a3:d2:59:
         d1:23:f7:42:6b:e1:4f:91:3c:61:c0:f0:66:77:1a:55:a4:a8:
         3b:85:1e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:16:38 2025 by rpki-client