Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
File:                     eaHQ6nMPz8shSZlceCib8tbRhvw.mft (raw, json)
Hash identifier:          wy1hYOMzFm1c+/iMbOyMaJykvt8xern1jmMQij14QXc=
Subject key identifier:   8D:6E:9E:51:C3:F7:C0:F9:A6:DB:47:F8:41:6C:72:38:4E:95:83:37
Authority key identifier: 79:A1:D0:EA:73:0F:CF:CB:21:49:99:5C:78:28:9B:F2:D6:D1:86:FC
Certificate issuer:       /CN=79a1d0ea730fcfcb2149995c78289bf2d6d186fc
Certificate serial:       01974AE8A4739663C71CDE0B45E1ACF60BC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
Manifest number:          03EB
Signing time:             Sat 07 Jun 2025 15:00:49 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:49 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:49 +0000
Files and hashes:         1: eaHQ6nMPz8shSZlceCib8tbRhvw.crl (hash: gmA8q6LOrUdgewcRo3lGwdxsuXwUajnZzv+VObsxwr4=)
                          2: goX035Hv0elR2rCiATveFLxA4oU.roa (hash: HjIa5HxfoLHz1fNA8faR+9nXcT/qazkCcjt+nSvQMlE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 15:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:a4:73:96:63:c7:1c:de:0b:45:e1:ac:f6:0b:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a1d0ea730fcfcb2149995c78289bf2d6d186fc
        Validity
            Not Before: Jun  7 15:00:49 2025 GMT
            Not After : Jun  8 15:00:49 2025 GMT
        Subject: CN=8d6e9e51c3f7c0f9a6db47f8416c72384e958337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c5:3c:2a:7c:6b:0c:d2:c4:88:19:a3:bf:fe:
                    08:f5:08:79:46:c6:61:4b:e6:fc:2d:7a:97:46:b0:
                    58:4a:e7:82:0b:ae:84:f3:00:e3:a9:d5:c1:e6:73:
                    11:5e:06:cf:99:fe:fe:b3:ea:13:98:53:bc:97:89:
                    53:51:41:1b:1b:e9:4c:16:59:bd:57:c9:66:58:80:
                    58:e6:6e:46:e0:6f:3a:53:01:ad:c5:a4:0c:69:63:
                    dc:20:be:68:11:bd:0c:1b:c9:c6:1f:61:98:e3:4c:
                    3b:7b:84:de:68:dc:05:92:d6:aa:5a:bf:7f:42:97:
                    69:eb:03:4d:87:02:9d:73:1a:11:30:89:9b:4c:eb:
                    cb:1d:ab:36:30:aa:b6:fe:8b:78:ec:7e:d0:89:e2:
                    76:96:f2:c2:d2:81:33:a4:5c:02:df:60:76:ce:44:
                    e5:b1:e8:ab:ff:57:c3:7b:60:d8:3e:00:87:ac:29:
                    5f:36:cd:57:b2:81:98:68:26:d2:e9:1c:42:2d:f8:
                    0e:a2:ce:af:cf:e6:86:82:18:da:2f:3b:3c:1f:bf:
                    cd:15:4a:df:46:35:14:44:20:62:07:06:9c:15:79:
                    d4:71:42:ce:cf:5f:02:5c:3d:b0:d6:bf:8c:d4:c2:
                    89:2f:b3:33:d1:9f:b0:c5:b6:d7:45:c3:47:4d:0e:
                    18:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:6E:9E:51:C3:F7:C0:F9:A6:DB:47:F8:41:6C:72:38:4E:95:83:37
            X509v3 Authority Key Identifier:
                keyid:79:A1:D0:EA:73:0F:CF:CB:21:49:99:5C:78:28:9B:F2:D6:D1:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:d4:0f:ee:27:4a:74:4f:8e:1f:90:46:97:fe:59:87:51:46:
         5b:7a:b5:2d:0e:a9:96:70:4b:35:b6:fc:55:4e:1b:30:e2:bc:
         df:33:64:8c:53:1e:7f:5f:83:ac:5a:42:a9:76:7b:9f:4a:78:
         be:2c:56:33:93:c7:6f:78:2e:3f:cf:68:f4:91:1a:74:0b:0d:
         ac:b5:74:8b:5c:f5:7b:f2:52:c9:3d:f8:51:55:0b:70:d9:56:
         89:be:45:38:42:0f:68:cc:a5:f6:2b:b9:61:30:25:e0:c6:29:
         f2:44:16:14:d1:48:c3:aa:63:0e:6f:c8:42:88:a4:e7:e7:22:
         8c:d3:1a:b3:d3:e2:8c:f1:86:5e:d3:39:f0:8d:3e:50:93:66:
         b3:b3:76:06:0d:b2:6f:40:48:82:b7:39:99:26:41:56:32:c4:
         58:ef:fa:28:f7:7d:4a:f9:03:06:1c:95:69:d7:aa:23:61:b1:
         c3:47:31:28:40:2c:80:73:ad:aa:35:cf:2a:2e:01:ee:ca:0f:
         22:58:8c:2c:50:e1:c8:24:b9:24:0e:1a:f8:b7:9f:b9:c7:89:
         06:ea:26:f7:eb:6a:f0:57:18:b6:fc:1c:1c:fa:f9:e0:8e:7b:
         e8:8d:fe:01:cf:28:1b:c2:de:f5:ce:17:7d:a2:db:02:00:8c:
         ec:20:89:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:08:01 2025 by rpki-client