Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.mft
File:                     eVsxnntbAEAd-YBbCV6_WuLOlZw.mft (raw, json)
Hash identifier:          ZsEBR4y+Ucw9swuqgLYYhHEjct6B4Yr9DhcISv/161U=
Subject key identifier:   D4:82:96:67:92:47:98:C1:A7:20:67:1D:B3:E1:23:DA:30:40:DC:EC
Authority key identifier: 79:5B:31:9E:7B:5B:00:40:1D:F9:80:5B:09:5E:BF:5A:E2:CE:95:9C
Certificate issuer:       /CN=795b319e7b5b00401df9805b095ebf5ae2ce959c
Certificate serial:       0197493131AAA60A8DF920BE6338A3655B35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eVsxnntbAEAd-YBbCV6_WuLOlZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.mft
Manifest number:          14DA
Signing time:             Sat 07 Jun 2025 07:00:50 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:50 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:50 +0000
Files and hashes:         1: 87kSYonFcZwIXqn-oUHMTUjS7ZQ.roa (hash: r4G2JQElUAKaln7jVsL6rlmZ7oG6sWqE3/UqSsTnjMU=)
                          2: eVsxnntbAEAd-YBbCV6_WuLOlZw.crl (hash: dMkLtUq47lpAZgbQcaT4Q7EcBPWei0WtSg3HFAKCERU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eVsxnntbAEAd-YBbCV6_WuLOlZw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:31:aa:a6:0a:8d:f9:20:be:63:38:a3:65:5b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=795b319e7b5b00401df9805b095ebf5ae2ce959c
        Validity
            Not Before: Jun  7 07:00:50 2025 GMT
            Not After : Jun  8 07:00:50 2025 GMT
        Subject: CN=d4829667924798c1a720671db3e123da3040dcec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f3:a1:c5:bf:a7:8c:02:8c:cb:66:f9:27:45:
                    eb:3d:4a:f6:f1:9d:22:c5:f7:1e:98:7c:70:ed:1b:
                    60:35:9e:48:c1:87:2e:4f:92:dd:c8:7b:db:d2:da:
                    c3:ba:3f:1a:c4:96:59:29:db:30:bf:a8:f0:41:84:
                    1b:d7:9e:30:58:a0:df:dd:37:70:f7:c0:9b:a7:f3:
                    44:2d:88:8e:3e:c1:61:d4:b0:4e:3e:d2:98:08:4e:
                    1e:be:9d:ee:09:95:72:3a:2c:b0:59:09:1e:0e:da:
                    1e:87:e3:fa:8e:70:92:89:cc:05:00:e3:d5:75:47:
                    ef:59:37:c3:f4:4c:2f:64:60:10:e5:e7:1b:5a:be:
                    cd:a9:c7:14:d0:d9:81:41:06:18:39:f9:3e:1f:b6:
                    5f:6e:66:b5:87:20:7c:dd:2f:9f:f3:91:83:84:23:
                    c8:64:31:34:ed:ca:ec:c9:a0:4b:f5:b8:d1:59:00:
                    03:0a:6c:b4:20:68:42:af:d4:48:74:9a:30:2e:d4:
                    21:77:a2:e2:72:69:a2:77:39:36:9d:09:72:59:7e:
                    c3:4f:e7:0c:b8:70:d0:b3:a7:19:be:d6:71:49:d7:
                    9d:01:fe:d2:06:2a:78:95:8f:ca:46:75:13:0e:4c:
                    12:42:22:a4:9e:9e:50:59:e7:e2:52:aa:2a:27:b3:
                    e6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:82:96:67:92:47:98:C1:A7:20:67:1D:B3:E1:23:DA:30:40:DC:EC
            X509v3 Authority Key Identifier:
                keyid:79:5B:31:9E:7B:5B:00:40:1D:F9:80:5B:09:5E:BF:5A:E2:CE:95:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eVsxnntbAEAd-YBbCV6_WuLOlZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:0a:cf:12:19:7d:d7:26:bd:1e:78:6c:d1:6f:dc:c1:f2:e8:
         51:f3:f4:dc:bc:3a:15:5f:57:13:80:ff:36:e9:03:27:2a:a0:
         64:5a:77:9b:01:32:7f:49:06:a8:1c:8c:a6:10:dd:28:eb:d5:
         16:24:13:37:75:a3:6b:26:38:60:72:00:3e:7a:ab:33:ac:d1:
         ad:93:49:8e:32:08:0b:eb:5c:3f:9d:7e:4b:58:c7:47:2a:da:
         0e:86:28:69:33:62:ec:eb:7c:ad:ea:87:d7:6c:cd:5c:77:8f:
         00:68:d1:ba:0c:44:ee:ad:50:e3:b0:53:17:4f:59:18:d2:cd:
         48:2c:78:c1:93:d0:55:34:24:29:47:be:f5:53:79:a7:f6:ee:
         d3:98:dd:15:11:68:93:f4:f3:f0:af:8f:df:33:72:f1:7c:5a:
         e4:5e:95:db:4d:6f:89:da:8c:77:af:74:a5:ba:a1:a8:47:38:
         9b:ab:8b:05:23:22:1f:b3:01:5a:39:e6:cc:f7:99:6b:ea:ed:
         31:a2:f5:b8:fa:da:b5:bf:c6:61:03:c8:d7:55:95:6c:49:fb:
         03:fb:43:03:87:28:d9:8b:d7:61:ad:23:a7:86:1b:1d:95:7a:
         41:fd:6d:d6:d5:e3:a9:2e:7b:cd:5d:f3:7f:c4:d6:c8:05:57:
         70:2a:fc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:12:23 2025 by rpki-client