Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft
File:                     EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft (raw, json)
Hash identifier:          XDeYWWwGh0OGEVcsSCeEfRchuOVVzcBbac/QE3VPw0s=
Subject key identifier:   2E:06:D1:DE:40:EC:C7:21:06:66:3C:5B:2B:1A:24:A4:13:F8:49:4C
Authority key identifier: 11:0A:AF:90:16:A6:87:52:FC:91:32:14:9B:91:E8:FA:B1:6E:24:BE
Certificate issuer:       /CN=110aaf9016a68752fc9132149b91e8fab16e24be
Certificate serial:       01974CA005656775BF0D2F8C3536B984E0A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQqvkBamh1L8kTIUm5Ho-rFuJL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft
Manifest number:          157F
Signing time:             Sat 07 Jun 2025 23:00:44 +0000
Manifest this update:     Sat 07 Jun 2025 23:00:44 +0000
Manifest next update:     Sun 08 Jun 2025 23:00:44 +0000
Files and hashes:         1: 6R7l5Zc0F8S-RPgHqG7ELPTEGWs.roa (hash: qKcKkoUboZrcqtoprL7lO+GfuPllhw7eINNwNRAw7pk=)
                          2: EQqvkBamh1L8kTIUm5Ho-rFuJL4.crl (hash: ZtITk7JUjxDCWowvAbUKfUN1gt1ISkARLADnqaZJS4Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EQqvkBamh1L8kTIUm5Ho-rFuJL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:a0:05:65:67:75:bf:0d:2f:8c:35:36:b9:84:e0:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=110aaf9016a68752fc9132149b91e8fab16e24be
        Validity
            Not Before: Jun  7 23:00:44 2025 GMT
            Not After : Jun  8 23:00:44 2025 GMT
        Subject: CN=2e06d1de40ecc72106663c5b2b1a24a413f8494c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2b:f6:4b:c0:e7:ac:61:a7:d8:ee:fc:c3:64:
                    59:69:68:bc:15:76:81:8b:7b:28:e7:2e:16:28:5c:
                    8a:63:be:85:5a:e3:52:38:27:49:a1:61:b9:45:db:
                    f6:dd:a3:71:2a:85:d3:8c:38:d8:bb:fd:5d:bf:97:
                    4b:ed:c5:7f:79:f8:cd:4a:04:91:72:3b:be:93:9c:
                    0a:ae:8a:46:57:f3:27:96:91:d7:65:5f:54:80:e6:
                    65:05:da:86:73:92:13:91:b1:98:66:f6:b7:e1:89:
                    8e:96:77:e0:13:47:60:a4:69:e0:1a:fb:90:9b:f9:
                    90:1e:2b:28:ab:e0:2a:f2:69:75:8a:16:81:3f:92:
                    c3:8c:f7:c9:96:ec:91:76:1e:a0:0e:6d:22:cf:2b:
                    cc:85:0a:5c:31:04:e4:a2:aa:84:cd:14:5d:76:2d:
                    49:b3:7a:73:fc:c9:16:87:32:93:0c:da:fd:8b:1d:
                    69:63:10:31:26:27:36:2d:fa:e0:aa:25:2f:ac:2b:
                    f2:ab:11:96:5b:e9:ee:bf:05:06:5f:15:07:3e:97:
                    20:24:78:f4:fb:59:83:99:9c:04:bd:dd:f3:74:cb:
                    81:3a:23:27:07:6e:60:e3:33:4d:b9:36:f1:61:12:
                    66:58:7b:24:7a:a3:34:42:a2:0c:9e:74:b9:cb:7e:
                    a6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:06:D1:DE:40:EC:C7:21:06:66:3C:5B:2B:1A:24:A4:13:F8:49:4C
            X509v3 Authority Key Identifier:
                keyid:11:0A:AF:90:16:A6:87:52:FC:91:32:14:9B:91:E8:FA:B1:6E:24:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQqvkBamh1L8kTIUm5Ho-rFuJL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:eb:fd:e8:0e:af:b5:83:c8:85:48:90:04:ac:ae:ba:27:a7:
         77:17:ac:a2:6e:6a:bf:5f:f9:13:ae:b9:93:33:93:96:db:4d:
         a8:52:29:fa:3f:82:36:aa:46:7a:2a:e0:21:e2:63:95:54:72:
         90:26:a6:79:dd:29:b8:a7:bf:2c:f4:30:0b:20:c3:af:1a:06:
         38:98:9c:2e:65:87:da:47:4f:3b:9c:ec:e7:f4:c1:7f:e1:83:
         29:69:b3:58:6a:0c:bd:05:dd:4b:fc:b4:7e:8b:fd:ef:51:54:
         d8:c5:a0:cb:48:c8:48:88:de:56:0b:6e:1e:7e:78:07:b1:e8:
         7c:42:6b:36:48:eb:fa:ec:87:12:60:1f:dd:a6:43:00:32:8d:
         ac:e5:92:3f:6f:38:f5:25:b7:df:f9:5b:46:c7:7f:4c:7a:67:
         e0:5f:a7:98:c1:6d:aa:9f:25:bc:02:03:67:b0:0b:3b:2c:6f:
         d2:2f:e8:3f:74:5b:c5:45:dd:26:3a:1a:5c:19:02:59:28:53:
         ae:4f:20:85:c5:9a:27:0b:ea:6d:b5:22:15:e9:ca:75:74:27:
         a4:70:b2:e5:a9:cf:15:39:44:ff:e8:a8:49:5a:9a:51:6a:2c:
         b1:22:a9:36:da:82:5f:23:d1:9b:b6:33:41:69:fd:5f:7d:56:
         dc:70:52:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:41:53 2025 by rpki-client