Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.mft
File:                     EU05B6zlGbJF_rzuMsO3rUk7KGw.mft (raw, json)
Hash identifier:          8CEmQPcHJUGFGKotgQucWQLPoGqsg2XyUhBu71iwEOg=
Subject key identifier:   9D:7C:A5:1A:3D:FE:6D:6E:69:FD:EB:FB:D7:9E:A1:7E:38:7C:A5:37
Authority key identifier: 11:4D:39:07:AC:E5:19:B2:45:FE:BC:EE:32:C3:B7:AD:49:3B:28:6C
Certificate issuer:       /CN=114d3907ace519b245febcee32c3b7ad493b286c
Certificate serial:       0197CD28B009E2FA283EDD60D8A51BB9F367
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EU05B6zlGbJF_rzuMsO3rUk7KGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.mft
Manifest number:          0402
Signing time:             Wed 02 Jul 2025 22:01:25 +0000
Manifest this update:     Wed 02 Jul 2025 22:01:25 +0000
Manifest next update:     Thu 03 Jul 2025 22:01:25 +0000
Files and hashes:         1: EU05B6zlGbJF_rzuMsO3rUk7KGw.crl (hash: A6fXv854HfVMZ+maFz9YRGnKO9HSyVbsOIV8waCe5ok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EU05B6zlGbJF_rzuMsO3rUk7KGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 20:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cd:28:b0:09:e2:fa:28:3e:dd:60:d8:a5:1b:b9:f3:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=114d3907ace519b245febcee32c3b7ad493b286c
        Validity
            Not Before: Jul  2 22:01:25 2025 GMT
            Not After : Jul  3 22:01:25 2025 GMT
        Subject: CN=9d7ca51a3dfe6d6e69fdebfbd79ea17e387ca537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:dc:95:92:45:d6:72:9a:3f:ab:08:ec:1e:81:
                    23:3e:ff:fd:d1:e2:14:a0:9f:02:9f:10:90:61:50:
                    e5:23:1a:3f:1e:2e:81:66:15:86:85:01:32:8b:36:
                    cd:b2:7f:21:d4:62:a1:78:27:7a:6a:45:3f:98:88:
                    bb:5b:05:10:f9:5c:6c:bd:21:93:58:87:e9:97:6e:
                    1b:ae:42:f0:9e:14:c7:3b:4f:6c:e5:20:ad:27:8b:
                    b0:a4:76:97:12:d8:45:de:0a:21:74:0c:78:16:83:
                    2b:0c:16:69:da:9e:e6:aa:94:d3:52:9d:a0:a4:c9:
                    01:62:d9:94:19:0b:2d:d8:d9:9c:be:8c:78:c1:da:
                    0c:01:fe:30:47:5c:ba:7f:36:15:13:bf:86:8e:79:
                    e8:b1:e0:c0:a1:48:c3:e1:52:a6:75:1a:9d:89:42:
                    39:64:7b:a8:e4:91:3d:4b:ae:5c:d8:0c:e0:d2:96:
                    1d:86:b1:c4:91:be:24:3e:61:37:3d:d4:88:b1:7f:
                    5d:31:f0:ff:0b:53:11:49:62:31:19:22:9b:71:5d:
                    3f:8c:c9:b7:0d:3e:9c:14:5a:0e:34:51:a2:08:b0:
                    11:2e:24:ac:9a:e4:31:82:3f:2f:34:2c:f5:d0:62:
                    d4:ed:ab:68:59:2c:89:dd:5d:7f:d4:96:c0:1e:f9:
                    b6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:7C:A5:1A:3D:FE:6D:6E:69:FD:EB:FB:D7:9E:A1:7E:38:7C:A5:37
            X509v3 Authority Key Identifier:
                keyid:11:4D:39:07:AC:E5:19:B2:45:FE:BC:EE:32:C3:B7:AD:49:3B:28:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EU05B6zlGbJF_rzuMsO3rUk7KGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:90:88:41:2c:69:77:ed:62:f7:ba:85:77:a1:be:23:cd:ec:
         75:04:39:f2:b2:80:47:56:62:bc:6f:fe:ae:9a:76:78:29:f6:
         1c:62:80:35:ec:35:e6:05:69:50:e5:91:e6:58:8d:e4:d1:d4:
         b9:a1:eb:af:ee:f1:0b:7f:1e:7f:24:71:d9:63:04:f7:f5:b4:
         07:4b:14:39:56:cf:c2:5b:c4:50:ff:dd:af:50:ae:6e:50:b2:
         ac:93:24:aa:96:2c:fc:cf:bf:e9:d7:6c:7c:24:bd:b3:25:ea:
         b2:6f:46:06:32:92:7a:e3:b2:e9:a1:b1:3d:56:8d:ff:0a:97:
         5c:09:82:24:28:5b:39:b8:d2:ab:76:ec:71:12:77:47:4a:0a:
         a7:ad:be:43:9c:6c:7a:1e:54:e5:b2:7f:f1:a9:c2:cd:10:c8:
         0b:22:d2:dd:6d:8f:67:a0:86:b2:c2:e3:4e:09:35:92:25:5c:
         12:11:b5:57:51:11:84:3b:04:61:41:03:ec:dd:5d:c5:0d:be:
         f0:85:20:7e:5c:0f:73:bc:9a:0c:25:48:b7:5e:88:5d:6b:98:
         06:dc:e9:2e:c8:ba:63:4b:09:fd:eb:91:e5:df:9c:73:54:e0:
         95:8e:f5:8d:d2:36:b8:78:29:17:f9:e8:67:48:2a:53:3f:a4:
         1d:97:ca:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:48:41 2025 by rpki-client